Privacy Policy

1. About this policy

Holistic Digital Solutions ("we", "us", "our") provides business automation, AI consulting and AI Receptionist services. We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect, why we collect it, how we use and protect it, and how you can access or correct it. It applies to our website holisticdigitalsolutions.com, our social media advertising (including Facebook and Instagram lead forms), WhatsApp, email, phone and any other way you deal with us.

2. Information we collect

We only collect information that is reasonably necessary for our business. This may include:

• Contact details: your name, email address, phone number and business name.
• Business information: your industry, business size, the processes you'd like to automate, your timeframe and any other details you choose to share with us.
• Communications: records of enquiries, emails, messages, calls and meeting notes.
• Technical information: your IP address, browser type, device information and how you use our website, collected through cookies and analytics tools.
• Billing information: if you become a client, details needed to invoice you and receive payment.

We do not intentionally collect sensitive information (such as health, racial or religious information). Please don't include sensitive information in forms or messages to us.

3. How we collect it

We collect personal information directly from you when you:

• complete a lead form on Facebook or Instagram, or a form on our website;
• message us on WhatsApp, Messenger or Instagram, email us or call us;
• book a consultation, request a quote or become a client;
• browse our website (through cookies and analytics).

Where you submit a Meta lead form, some fields may be pre-filled from your Facebook or Instagram profile. You can edit these before submitting.

4. How we use it

We use your personal information to:

• respond to your enquiry and contact you about the quote or information you requested;
• understand your business and recommend suitable automation and AI solutions;
• provide, manage and support our services if you become a client;
• send invoices and manage our business records;
• improve our website, advertising and services;
• send you relevant updates or offers, where you haven't opted out (see section 9);
• meet our legal obligations.

We will not sell your personal information.

5. Facebook, Instagram & WhatsApp

We advertise on Meta platforms (Facebook and Instagram). When you submit a lead form in one of our ads, Meta shares the information you enter with us so we can contact you. Meta also handles that information under its own Privacy Policy.

If you choose to chat with us on WhatsApp, your messages and phone number are processed by WhatsApp under its Privacy Policy, and we receive the messages you send us.

We may use Meta's advertising tools to measure how our ads perform and to show ads to people with similar interests. This uses aggregated or hashed data and does not give us access to your private profile information.

6. AI tools & client systems

Our services involve setting up and using AI and automation software. When we work on your systems:

• we only access the data needed to scope, build and support your automation;
• we use reputable third-party AI and software providers and, where possible, choose settings that stop your data from being used to train their models;
• if you engage our AI Receptionist, it may record call details, notes and booking information on your behalf. You remain responsible for telling your own callers how their information is handled, and we can help you with suitable wording.

Specific data handling for client projects will also be set out in our service agreement.

7. Who we share it with

We only share personal information where needed to run our business, including with:

• trusted service providers who help us operate, such as hosting, email, CRM, scheduling, accounting, analytics, telephony and AI software providers;
• professional advisers such as accountants and lawyers;
• government or regulatory bodies where required or authorised by law.

These providers may only use your information to provide services to us, and we take reasonable steps to make sure they protect it.

8. Overseas disclosure

Some of our service providers (for example Meta, cloud hosting, CRM and AI software providers) may store or process information outside Australia, including in the United States, Europe and Asia. When this happens, we take reasonable steps to make sure your information is handled consistently with the Australian Privacy Principles.

9. Marketing & opting out

We may send you information about our services by email, SMS or phone. We comply with the Spam Act 2003 (Cth), and every marketing email includes a way to unsubscribe. You can also opt out at any time by emailing sales@holisticgroup.com.

10. Storage & security

We store personal information electronically with reputable providers and take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. These include access controls, secure passwords and multi-factor authentication where available.

We keep personal information only for as long as we need it for the purposes above or as required by law, and then securely delete or de-identify it. If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

11. Cookies & analytics

Our website may use cookies and similar technologies (such as Google Analytics and the Meta Pixel) to understand how visitors use the site and to measure our advertising. You can block or delete cookies through your browser settings, although some parts of the site may not work as intended.

12. Access & correction

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within a reasonable time, usually 30 days. In some circumstances allowed by law we may refuse access, and if so we will explain why.

You can also ask us to delete your information where we no longer need to keep it.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. We aim to respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

15. Contact us

For privacy questions, access or correction requests, or complaints:

16. Donor Link – Privacy Policy

Donor Link (the website donarlink.com and the Donor Link mobile apps for Android and iPhone) is operated by Holistic Digital Solutions. It helps people find blood and plasma donors near them. Donor Link is used by people all over the world, so this section applies to everyone who uses it, wherever they live. It is written to meet the Australian Privacy Principles, the EU and UK General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act 2023, and other privacy laws that give you similar rights. Where this section differs from sections 1–15, this section applies to Donor Link.

16.1 What we collect

• Account details: first and last name, date of birth, sex (optional), country, mobile number, email address (optional) and password. Passwords are stored only as a secure one-way hash. We cannot see them.
• Location: postcode / PIN code, city and state, and optionally your street address. We never collect GPS or live location.
• Donor and health information: blood group, weight, whether you can give whole blood and/or plasma, donation dates you record, and any optional health notes you add.
• Family members you add: their name, relationship, blood group, date of birth, sex, mobile number (optional) and medical notes (optional). Only add someone if you have their permission, or are their parent or guardian.
• Blood requests: patient name, blood group needed, hospital, hospital postcode, a contact number, a note, and which donors responded.
• Your settings: availability, and how you want to be alerted (in the app, and later email, SMS or WhatsApp if you switch these on).
• Technical information: a login session cookie, your IP address (used to block abuse and too many attempts), and a log of security-related actions such as password resets.

Blood group and health notes are health information (sensitive personal data). We only collect it because you choose to give it to us so we can match you with requests. By ticking the consent box when you sign up, you give us your explicit consent to use it for this purpose.

16.2 How we use it

• to create and run your account and keep it secure;
• to show people who need blood that a matching donor exists near them;
• to alert matching, eligible donors near a hospital when a request is posted;
• to work out whether you are likely to be eligible to donate (for example, by age and the time since your last donation);
• to let an administrator help you, for example by resetting your password;
• to prevent misuse, fake requests and fraud.

We do not sell your information, use it for advertising, or share it with advertisers. Donor Link has no advertising or analytics trackers.

16.3 Who can see your information

• People searching for donors see only your first name, the first letter of your last name, your blood group, a distance band (same postcode, city or state) and whether you are likely eligible today. They never see your phone number, email, address, date of birth or health notes.
• Contact details are shared only when a donor chooses to help. When a donor offers to help with a specific request, they see the contact number the requester gave for that request. The donor's own number is shared with the requester only if the donor ticks the option to share it.
• Donor Link administrators (Holistic Digital Solutions staff) can see all account information so they can run, support and protect the service. They cannot see your password.
• Service providers who help us run Donor Link, under confidentiality obligations:
  • our web hosting provider (Hostinger), which stores the database;
  • postcode lookup services (India Post, Zippopotam.us and OpenStreetMap Nominatim), which receive only the postcode and country you type, to fill in your city and state;
  • Google Fonts, which provides the website's typefaces and may see your IP address;
  • email, SMS or WhatsApp providers, if those alerts are switched on in future.
• Authorities, only if the law requires it.

16.4 Where your information is stored

Donor Link data is stored on servers run by our hosting provider, which may be in a different country from you. When information is transferred between countries, we take reasonable steps to make sure it stays protected to the standard described in this policy, including contractual protections where the law requires them.

16.5 How long we keep it

We keep your information while your account is open. You can delete your account at any time from My dashboard. This permanently removes your profile, family members and donation records from the live database. This also deletes the blood requests you posted and your responses to requests. Copies in backups are deleted within a short period. Security logs are kept for a limited time to protect the service.

16.6 Children and age limits

• Children under 10 cannot create an account. A parent or guardian can add them as a family member instead.
• People aged 10 to 17 can join as community members, but they cannot be listed as donors. Donating is locked until their 18th birthday.
• If you are under the age at which you can give your own consent in your country (for example, under 16 in some EU countries or under 18 in India), you need permission from a parent or guardian to use Donor Link.

16.7 Your rights

Wherever you live, you can:

• see and correct your information (most of it you can edit yourself in My dashboard);
• delete your account and information;
• get a copy of your information;
• withdraw your consent or pause being a donor at any time. This does not affect anything we did before you withdrew;
• object to or restrict how we use your information;
• nominate someone to act for you if you cannot (where your local law allows this).

To use any of these rights, email gundeep@holisticgroup.com.au. We will reply within 30 days and will not charge you. We may need to confirm your identity first.

Legal basis (EU/UK): we use your information to provide the service you sign up for (contract), with your explicit consent for health information, and for our legitimate interest in keeping Donor Link secure.

16.8 Security

We use encrypted connections (HTTPS), hashed passwords, limits on login attempts and restricted administrator access. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the relevant regulator as the law requires.

16.9 Cookies and the app

Donor Link uses one essential cookie to keep you logged in. It does not use advertising or analytics cookies. The Donor Link mobile app shows the Donor Link website inside the app. It does not access your contacts, photos, camera, microphone or location.

16.10 Complaints

Please contact us first at gundeep@holisticgroup.com.au and we will try to resolve your concern. If you are not satisfied, you can complain to your local privacy regulator. For example:

• in Australia, the Office of the Australian Information Commissioner (oaic.gov.au);
• in the EU, your national data protection authority;
• in the UK, the Information Commissioner's Office (ico.org.uk);
• in India, the Data Protection Board of India.

16.11 Changes and contact

If we make important changes to how Donor Link uses your information, we will update this page and tell you in the app or by email before the changes apply.

17. Donor Link – Terms of Use

These terms apply when you use Donor Link anywhere in the world. By creating an account or using Donor Link, you agree to them.

17.1 What Donor Link is, and is not

• Donor Link is a free service that connects people who need blood or plasma with willing donors nearby.
• Donor Link is not a blood bank, hospital or medical service. It does not collect, test, store, transport or supply blood, and it does not give medical advice.
• Every donation must take place at a licensed blood bank, hospital or donor centre, which decides whether a donor is suitable. The eligibility shown in Donor Link is only a rough guide.
• In a medical emergency, contact your local emergency number or hospital straight away. Do not rely on Donor Link.

17.2 Who can use it

• You must be at least 10 to create an account, and at least 18 to be listed as a donor. Your local blood service may have its own age and health rules, and those always apply.
• If you are a minor, you must have a parent or guardian's permission where your local law requires it.
• You must give true, accurate information and keep it up to date, especially your blood group and donation dates.
• One account per person. Keep your password private. You are responsible for what happens in your account.

17.3 Donors are volunteers

Donors are never obliged to respond to any request, and they can pause or leave at any time. Nobody may pressure, harass or threaten a donor.

17.4 No buying or selling blood

You must not offer, ask for or accept money, goods or any other reward for blood or plasma through Donor Link. In many countries this is illegal. Accounts that do this will be removed and may be reported to the authorities.

17.5 Acceptable use

You must not:

• post false, test or misleading requests, or pretend to be someone else;
• use any contact details you receive for anything other than the specific blood request;
• send spam, advertising, abuse or harassment;
• copy, scrape or collect donor information, or use Donor Link for commercial purposes;
• try to break, overload or get around the security of the service;
• add another person's details without their permission (or, for a child, without being their parent or guardian).

We may remove content, or suspend or close accounts, that break these terms or put other people at risk.

17.6 No guarantee

We work hard to keep Donor Link running and accurate, but we cannot guarantee that:

• a donor will be found or will respond;
• information entered by users is correct;
• the service will always be available.

Donor Link is provided "as is".

17.7 Our responsibility

As far as the law allows, Holistic Digital Solutions is not liable for any loss, injury or harm arising from:

• arrangements or meetings between users;
• medical outcomes;
• information provided by users;
• the service being unavailable.

Nothing in these terms limits any rights you have under consumer protection laws in your country that cannot be excluded, including the Australian Consumer Law.

17.8 Ending your use

You can delete your account at any time from My dashboard. We may stop or change Donor Link, or close accounts that break these terms. Where reasonable, we will give notice first.

17.9 Changes and governing law

We may update these terms. If changes are important, we will tell you in the app or by email before they apply. These terms are governed by the laws of Victoria, Australia, but this does not take away the protection of mandatory laws in the country where you live. Questions: gundeep@holisticgroup.com.au.

18. Ninety – Tambola – Privacy Policy

Ninety – Tambola (the Android app com.holisticgroup.ninety) is a tambola (housie) game operated by Holistic Digital Solutions. This section explains how the app handles your information. Where it differs from sections 1–15, this section applies to Ninety – Tambola.

18.1 Played for fun only

Ninety – Tambola is a free entertainment game. It does not involve real money, betting, wagering or cash prizes.

18.2 Information we collect

Ninety – Tambola does not require an account or sign-in, and it does not collect, store or share any personal information. We do not collect your name, email address, phone number, location, contacts, photos or device identifiers. Any game settings or progress are kept only on your own device.

18.3 Ads, analytics and third parties

• The app does not show advertising and does not use the advertising ID.
• The app does not use analytics or tracking tools.
• We do not sell, rent or share any information from the app with third parties.

18.4 Age

Ninety – Tambola is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect information from anyone, including children.

18.5 Deleting your data

Because the app does not send any personal information to us, we hold no data about you. Uninstalling the app removes any game data stored on your device.

18.6 Changes and contact

If we change how Ninety – Tambola handles information, we will update this section before the change applies. For any privacy questions about Ninety – Tambola, email gundeep@holisticgroup.com.au.

19. TaskNudge – Privacy Policy

TaskNudge (the Android app app.tasknudge.reminders and the web app at holisticgroup.com.au/tasknudge) is a reminder and task app operated by Holistic Digital Solutions. This section explains how TaskNudge handles your information. Where it differs from sections 1–15, this section applies to TaskNudge.

19.1 Accounts and what we collect

You can use TaskNudge as a guest, with everything stored only on your device, or create an account so your tasks are saved and synced across your devices. If you create an account we collect: your email address, your name (if you give it or your Google/Facebook profile provides it), a password (stored only as a salted hash, never in readable form) if you sign up with email, and the tasks, lists, meetings, birthdays, anniversaries, notes and dates you enter while signed in. Signing in with Google or Facebook gives us your name and email address from that provider; we do not receive your provider password or access your contacts, calendar or friends.

19.2 How we use it

We use this information only to run your account: signing you in, saving and syncing your tasks, sending a password-reset email when you ask for one, and keeping the service secure (for example limiting repeated failed sign-in attempts). We do not use it for advertising and do not sell or rent it.

19.3 Where it is stored and who can see it

Account data is stored on our web hosting provided by Hostinger. We keep a small session token on your device so you stay signed in. We do not share your data with third parties except the hosting provider that stores it and, when you choose to sign in with Google or Facebook, those providers (their own privacy policies apply to that sign-in).

19.4 Permissions on Android

• Internet: to sign in and sync your tasks.
• Notifications: to show your reminders.
• Exact alarms: where Android allows it, so reminders arrive on time.
• Run at startup: so reminders are set again after your phone restarts or the app updates.
• Vibrate: so reminders can vibrate.

TaskNudge does not ask for access to your location, contacts, photos, camera, microphone or files. Reminder scheduling happens on your device.

19.5 Backups, calendar files and sharing

Backup and calendar export create a file on your device. You choose where it goes using your phone's share sheet. Once you send a file to another app or service, that service's privacy policy applies. Links such as "Add to Google Calendar", "Add to Outlook" or WhatsApp drafts open those services only when you tap them.

19.6 Ads, analytics and fonts

• TaskNudge shows no advertising, does not use the advertising ID and uses no analytics or tracking tools.
• When online, the app may load fonts from Google Fonts, so Google may receive technical information such as your IP address. The app works offline with your system font.
• Our hosting provider may keep standard server logs (such as IP address and pages requested) for security and operations.

19.7 Age

TaskNudge is a general-purpose productivity app and is not directed at children under 13. We do not knowingly collect information from children.

19.8 Your choices and deleting your data

You can edit or delete any item at any time. You can delete your account and all data stored with it directly in the app (Account → Delete account), which removes your profile and tasks from our server. You can also request deletion by emailing gundeep@holisticgroup.com.au from your account email. Guest data stays on your device and is removed by clearing the app's storage or uninstalling.

19.9 Changes and contact

If we change how TaskNudge handles information, we will update this section before the change applies. Questions: gundeep@holisticgroup.com.au.