Privacy Policy
Effective Date: 03/04/2025
Introduction
Tomorrow Box PTY LTD (“Tomorrow Box”, “we”, or “us”) is committed to protecting your privacy and managing your information in a transparent and responsible manner. This Privacy Policy explains how we access and use personal and business information both in our email marketing campaigns and in our engagements with clients for paid work. This Policy is designed to comply with the Privacy Act 1988, the Australian Privacy Principles (APPs), the Australian Spam Act 2003, and other applicable laws.Information We Access or Collect
2.1 Marketing Data via Third-Party Provider
We access publicly available business contact information through a third-party subscription service. This service sources and maintains its data through Bombora, a leading database provider.
The information accessed includes names, business email addresses, and other professional details. Although the data provided by Bombora may include phone numbers, we do not use or process phone numbers in our marketing activities.
We do not collect or store a separate marketing database; all data remains managed by our third-party provider.
2.2 Client and Operational Data
When engaging with clients for paid work, we may collect personal and business information directly from you. This can include your name, contact details (such as email address and phone number), billing and financial information, and any other details necessary to provide our services.
This information is collected through our website, contracts, or other direct communications.
How We Use Your Information
3.1 For Marketing Purposes
We use the business contact information accessed via our third-party subscription service solely for delivering personalized email marketing communications, managing our outreach campaigns, and fulfilling our legal obligations.
3.2 For Client Services and Business Operations
For clients and operational purposes, we use your information to:
Provide and manage our services and support.
Process payments and manage billing.
Communicate with you regarding our services, updates, or contractual matters.
Comply with legal, regulatory, or contractual obligations.
Improve our products and services through feedback and analysis.
Legal Basis for Processing
Our processing of personal information is founded on:Compliance with Legal Obligations: Adhering to the Privacy Act 1988, the Australian Spam Act 2003, and other relevant laws.
Legitimate Business Interests: Utilizing data for targeted marketing communications and effective service delivery, balanced against your privacy rights.
Contractual Necessity: Processing client data as necessary to fulfill contractual obligations and provide services.
Consent: Where required by law, we obtain your consent for specific types of processing. (For our marketing efforts using publicly available business data, the data is accessed via our third-party provider and does not require us to independently secure explicit consent.)
Email Communications
For all email communications:We clearly identify the sender and provide accurate contact details.
Every email includes a clear and functional unsubscribe mechanism, enabling recipients to opt out of future communications in accordance with the Australian Spam Act 2003.
Data Sourcing and Platform Use
Our marketing data is accessed exclusively through a third-party subscription service, which sources and maintains its data through Bombora.
We rely on our service provider to manage and secure this data, and we perform regular due diligence to ensure that their practices meet or exceed industry standards and comply with applicable laws.
We do not independently collect or store this marketing data.
Due Diligence and Data Security
Marketing Data: Although stored and managed by our third-party provider and Bombora, Tomorrow Box PTY LTD continuously reviews our partners’ security practices to ensure they adhere to high standards and legal requirements.
Client and Operational Data: We implement appropriate technical and organizational measures to safeguard personal and financial information that we collect directly from clients. These measures are designed to protect against unauthorized access, disclosure, alteration, or loss.
Data Retention
Marketing Data: Retention is governed by the data management policies of our third-party provider and Bombora.
Client and Operational Data: We retain personal and financial information only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Retention periods will depend on contractual obligations and regulatory requirements.
Your Rights and Choices
Under applicable privacy laws, you have the following rights:Access and Correction: You may request access to or correction of your personal information.
Opt-Out: You may withdraw your consent for email marketing communications at any time via the unsubscribe link included in every email.
Deletion: Subject to legal or contractual obligations, you may request the deletion of your personal data.
For any such requests or questions regarding your personal information, please contact us using the details provided below.
Cookies and Online Tracking
Our website may use cookies and similar tracking technologies—such as tracking pixels from Facebook Meta and Google—to monitor user behavior, analyze website traffic, and support our advertising efforts. These technologies help us understand how visitors interact with our site and improve our online services. By using our website, you consent to the use of these tracking mechanisms.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or industry standards. The latest version will always be available on our website. We encourage you to review this Policy periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: