Privacy Policy

Last updated: February 2026

1. Introduction

Thornbill Pty Ltd (ABN to be confirmed) ("Thornbill", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our services, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

We may collect the following types of personal information:

2.1 Account Information

  • Name and contact details (email address, phone number)
  • Business name and ABN (if applicable)
  • Billing and payment information
  • Account credentials

2.2 Utility Bill Data

  • Uploaded utility bills and invoices (electricity, gas, water)
  • Account numbers and meter identifiers
  • Usage data and billing amounts
  • Property and facility addresses

2.3 Usage Information

  • Log data (IP address, browser type, device information)
  • Pages visited and features used
  • Date and time of access
  • Referring website addresses

3. How We Use Your Information

We use your personal information to:

  • Provide and improve our utility bill processing services
  • Extract and analyse data from your uploaded documents
  • Generate reports and insights about your energy usage
  • Process payments and manage your account
  • Communicate with you about your account and our services
  • Respond to your enquiries and provide customer support
  • Comply with legal obligations
  • Detect and prevent fraud or security incidents

4. Data Storage and Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include:

  • Encryption of data in transit and at rest
  • Secure cloud infrastructure with access controls
  • Regular security assessments and monitoring
  • Staff training on privacy and data protection

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

5. Disclosure of Information

We may disclose your personal information to:

  • Service providers who assist us in operating our platform (e.g., cloud hosting, payment processing)
  • Professional advisers (lawyers, accountants, auditors)
  • Government authorities when required by law
  • Third parties with your consent

We do not sell your personal information to third parties.

6. Cross-Border Data Transfers

Our services may involve the transfer of your personal information to servers located outside Australia, including in the United States (for cloud infrastructure services). Before disclosing personal information to overseas recipients, we take reasonable steps to ensure they comply with the APPs or are subject to a substantially similar privacy regime.

7. Your Rights

Under Australian privacy law, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or outdated information
  • Request deletion of your personal information (subject to legal requirements)
  • Withdraw consent for certain processing activities
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, please contact us using the details provided below.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our website. Cookies help us understand how you use our services and allow us to remember your preferences.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or want to make a complaint, please contact us:

  • Email: privacy@thornbill.io

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.