1. Who is responsible
EBN Australia is a service operated by NEWSOURCE GLOBAL GROUP PTY LTD, ABN 68 695 689 377, in Melbourne, Victoria 3171, Australia.
Privacy enquiries and complaints may be sent to review@energybillnavigator.com.au.
2. Information we collect
Depending on the service requested, we may collect:
- your name, email, mobile number, role and contact preference
- postcode, property type, site or location details
- business name, ABN, NMI, business-detail confirmation and any later provider-specific authority information
- retailer, tariff, billing period, bill amount, usage and other energy information
- a bill you choose to upload as PDF, JPG or PNG
- consent records, request reference, timestamps and contact verification status
- basic request and security information such as source page and IP information held in service logs
- draft information saved on your own device before submission.
ABR business search results come from the Australian Business Register. Public business information does not remove the privacy protections applying to your contact details or request.
3. How and why we collect it
We collect information directly from website forms and uploaded bills, from an authorised representative, or from an approved energy-data provider after the relevant authority is checked. We use it to:
- prepare and respond to the bill, plan or energy review you requested
- understand tariff, consumption, demand, solar, battery or off-grid context
- verify business details through ABR
- contact you about that request
- request interval data only after a separate provider-specific authority is completed, reviewed and accepted
- prevent duplicate requests, fraud and security abuse
- maintain consent and compliance evidence
- make a relevant referral where required for the requested service and the necessary consent or authority is confirmed.
If you do not provide the required information, we may not be able to complete the requested review.
4. Service providers and overseas handling
We disclose only the minimum information reasonably necessary to approved hosting, IT-security, email, retailer, metering-data or referral service providers. We do not sell personal information.
The current website environment is hosted through Hostinger on a server in Singapore, with backups displayed in India (Mumbai). Provider locations may change. We will review and update this policy before using a new material provider or overseas location for customer information.
5. Security
Production traffic uses HTTPS. Submitted lead payloads and bill files are encrypted before database storage. The encryption key is stored separately, internal project files are blocked from public access, and customer details or bills are not included in notification email. At launch, internal decryption and bill access is limited to one approved owner; general staff access is not enabled.
No online system can guarantee absolute security. Suspected incidents are contained, assessed and escalated under our breach-response process.
6. Retention and deletion
- Unsubmitted browser drafts expire 30 days after their last update and can be cleared manually.
- Selected bill file bytes are not stored in browser draft storage.
- Requests that do not proceed, and website copies of completed-review bills, are normally deleted within 90 days after the last meaningful activity or delivery of the review.
- When minimum necessary information is transferred to an approved customer system, the website lead-store copy is normally deleted within 30 days after confirmed transfer.
- Consent and authority evidence is kept only while it is relied upon and for the approved compliance-evidence period.
- Security logs are normally retained for 30 days unless required for an active investigation.
- Deleted production data may remain in protected provider backups until the applicable backup cycle expires.
Deletion may be paused where a record is required for a complaint, dispute, investigation, legal requirement or documented legal hold.
7. Access, correction, deletion and withdrawal
Email review@energybillnavigator.com.au to request access or correction, ask for deletion where the information is no longer required, withdraw future contact consent, or raise a privacy concern. We will verify identity before disclosing or changing a record.
8. Direct marketing
At launch, EBN Australia does not use submitted details for promotional email or SMS. Contact is limited to the review or service you requested. Future marketing would require a separate consent and a working withdrawal or unsubscribe process.
9. Complaints
Please first contact us at review@energybillnavigator.com.au with enough information for us to understand and investigate the concern. If the Privacy Act applies and you are not satisfied after first complaining to us, you may contact the Office of the Australian Information Commissioner.
10. Updates
We will update this policy when our service, provider, hosting country, recipient, purpose, retention rule or legal obligations materially change. The effective date appears at the top of this page.