As of 2 October 2021.

Definitions

Our “Service" includes the nemy website (nemy.io) and its subdomains and all other features, services, products or applications offered by nemy, including through third-parties such as IFTTT.

References to “nemy”, "our", "we" or "us" are references only to NEMY PTY LTD, A.C.N. 654 139 634.

Personal information includes a broad range of information, or an opinion, that could identify an individual. What is personal information will vary, depending on whether a person can be identified or is reasonably identifiable in the circumstances. For more information about personal information, see What is personal information?

Summary

nemy takes the private nature of your personal information very seriously. While we are not presently a type of entity bound by the Privacy Act 1988 (Cth), we seek to comply with the requirements of this Act and the Australian Privacy Principles as a matter of good commercial governance in ensuring open and transparent management of personal information. The purpose of our Privacy Policy is to provide information around:

  1. the collection, use, storage and disclosure of personal information;
  2. nemy's governance and accountability;
  3. integrity and correction of personal information; and
  4. the rights of individuals to access their personal information and to make a complaint about our handling of your personal information.

Please read the Privacy Policy to learn more about the ways in which we use and protect your personal information. By using our Service you acknowledge and agree to be bound by the terms and conditions of this Privacy Policy. If you do not agree to the terms, please do not use our Service or access our website.

nemy is not intended for use by children. If you are under 18, you may use our Service only with involvement of a parent or guardian. We do not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not attempt to register for our Services or send any personal information about yourself to us. If we learn that we have collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us personal information, please contact us at info@nemy.io

Policy

Collection of personal information

What personal information is collected

We may collect personal information about you when you interact with us. You can choose not to provide us with certain information, though you may not be able to take advantage of many of our Service features. Generally, the types of personal information we collect include:

  1. your name;
  2. your contact details, including email and residential address;
  3. information about your electricity use;
  4. information about devices and appliances you use; and
  5. information about how you use our Service including, but not limited to, how you implement features of our Service, the frequency you use our Service and how our Service impacts your electricity consumption.

We may also collect information you provide to us and your opinion on something (e.g. when making a complaint or general enquiry, or assisting us in answering a survey).

It is not expected that we will need to collect sensitive information. Where we do request sensitive information, we will explain to you why we need it.

Automatically collected data

We may also automatically collect some personal information when you use our Service, such as the following:

  1. location information (e.g. IP address, post code);
  2. device identifiers;
  3. web browser information;
  4. page view statistics;
  5. browsing history;
  6. cookies and other tracking technologies (e.g. web beacons, pixel tags, SDKs, etc.); and
  7. log data (e.g. access times, hardware and software information).

This type of aggregate data may enable us to figure out how often users use parts of our Service, help us determine customer service and site needs, and do internal research on our users' demographics, interests, and behavior to better understand, protect and serve you and our community. nemy may use this data in aggregate form, that is, as a statistical measure, but not in a manner that would identify you personally. As part of this use of information, we may provide aggregate information, not information about you personally, to our partners about how our users, collectively, use our Service.

How we collect personal information

Your personal information may be collected through various means, either directly from you or from third-parties. If we receive personal information about you from a third-party, and this information is relevant to our work, we will take reasonable steps in the circumstances to notify you of certain matters concerning that collection. However please note that in some circumstances, it may be reasonable for us not to notify you. If you choose to provide us with the personal information of a third-party, please ensure you have the consent of the individual concerned before sharing it with us.

We may collect personal information directly from you. This could include when you:

  1. register for our Service;
  2. subscribe to our email alerts;
  3. communicate with us via social media platforms;
  4. complete an online form or make a submission to us;
  5. send us an email; or
  6. respond to a request to participate in a survey.

Why we collect personal information

Our primary purpose in collecting personal information is to provide you with a safe, smooth, and efficient experience. We only collect personal information about you that we consider necessary for achieving this purpose. The following examples have been provided to help you understand why we collect personal information. The examples provided are not an exhaustive list of the personal information we collect nor an exhaustive list of the uses of such personal information.

  1. Email address: We collect your email address so that we can register you for our Service, communicate terms and conditions/policy updates, effectively respond to requests and to send direct marketing communication;
  2. Residential address: We collect your residential address so that we can provide electricity network data which is relevant for your location (e.g. state-based wholesale electricity market prices and postcode-based network service provider charges); and
  3. Information about how you use our Service: We collect information about how you use our Service to create data in aggregate form (that is, as a statistical measure, but not in a manner that would identify you personally) which may inform the electricity market about user behaviour patterns.

Subscription to email alerts

When you subscribe to email alerts you must provide an email address to which our system can send your alerts. We may use your email address to send you any unsolicited information, unless you otherwise indicate that you would like not like to receive such information from us.

Social media

We may use social media platforms (e.g. Facebook) to communicate with the public about our work. When you communicate with us using these services we may collect your personal information, but we only use it to help us to communicate with you and the public. The social media platforms will also handle your personal information for their own purposes. These social media platforms have their own privacy policies and we encourage you to read the policies of the services that you visit or use.

Use of personal information

We receive personal information connected with our functions and activities as outlined above. We may collect your personal information for more narrow purposes (e.g. for the purpose of recording feedback or a complaint).

We may use your personal information for the purposes of preparing statistics to enable us to understand trends (e.g. identifying trends in electricity consumption, use of smart devices).

We may use your personal information for direct marketing. You may elect not to receive direct marketing communications by clicking the "unsubscribe" facility at the bottom of any of our marketing email.

Disclosure of personal information

We may disclose your personal information to a third-party such as:

  1. third-party IT service providers (e.g. Amazon Web Services, Mailchimp);
  2. external service providers who we engage to assist us with our functions (e.g. external lawyer, economic advisor, auditor);
  3. IFTTT;
  4. another regulator (including foreign regulators) or law enforcement agency; and
  5. courts and tribunals.

There may be some circumstances where we are legally required to disclose personal information (e.g. in response to a court order). We will endeavour to notify any users whose personal information may be disclosed. However, in some instances, we are not legally required to notify you.

Where information is disclosed to a third party we will, to the extent reasonably possible, ensure that the third-party is subject to the requirements of the Privacy Act 1988 (Cth).

Disclosure of personal information overseas

There are some circumstances where we may share your personal information overseas, such as where:

  1. third-party IT service providers have servers which are located overseas (e.g. our Amazon Web Services WorkMail server is located in Oregon); and
  2. we engage with third-party service providers such as IFTTT who have servers which are located overseas.

Where possible, we try to store personal information within Australia.

Anonymity and pseudonymity

If you do not wish to provide us with your personal information, you may contact us anonymously or by using a pseudonym. By remaining anonymous, or by using a pseudonym, we may be limited in the services which we can provide to you.

Security of personal information

We take reasonable steps to protect personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure. We have systems and procedures in place to secure collected personal information including, but not limited to:

  1. password protection of electronic databases (MFA where possible);
  2. industry-standard Secure Socket Layer (SSL) software to protect the security of your personal information during transmission, which encrypts all of the information you input; and
  3. employee access restriction where only employees/contractors/volunteers who need personal information to perform a specific job (e.g. a customer service representative) are granted access to it. All of our employees/contractors/volunteers are kept up to date on our privacy and security practices.

You are responsible for all actions taken with your User ID and password. You must not disclose your password to any third-parties. If your password has been compromised for any reason, you should immediately change your password.

Interacting with your personal information

Access: You can request more information about the personal information we hold about you and request a copy of such personal information.

Correction: If you believe that any personal information we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. You can also correct some of this information directly by editing your account settings.

Erasure: You can request that we erase some or all of your personal information from our systems.

To request access, a correction or erasure of your personal information, please send a request to us at info@nemy.io. When making your request, please send the request from your registered email address.

We will process this request of your personal information except in certain circumstances where we are not required to by law.

Lodging a complaint

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with us by sending an email to info@nemy.io. We will respond to your complaint as soon as possible.

Changes to our Privacy Policy

We may change the terms of this Privacy Policy at any time, but if we do, we will bring it to your attention by placing a notice on our website or by sending you an email. If you use our Service after a change to this Privacy Policy is effective, that means you agree to all changes.