Privacy Policy
1. Who we are
Tonic AI is operated by Tonic The Agency Pty Ltd ((ABN 57 139 147 934), trading as Tonic AI, part of the Tonic group (“Tonic”, “we”, “us”).
Contact (privacy): hello@tonic.com.au · 1300 974 864
Postal: Level 5, Suite 2, 162 Goulburn Street, Surry Hills, NSW 2010
We collect and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and where relevant the laws of other places we serve (including the UK and US).
2. What this policy covers
This policy applies to personal information we collect through:
- https://www.tonic-ai.com.au/ and related Tonic AI pages
- Contact, discovery, and Automation Opportunity Assessment forms
- The free AI Automation Maturity Quiz
- Email, phone, and meetings booked via our calendar embeds
- Analytics and similar technologies on the site
It does not replace the confidentiality, data-processing, or security terms in a signed statement of work, MSA, or assessment engagement letter. Those govern client project data.
3. What we collect
3.1 Information you give us
Depending on the form or conversation, this may include:
| Category | Examples |
|---|---|
| Identity & contact | Full name, work email, phone, company name, job title |
| Business context | Primary systems (e.g. HubSpot, Salesforce, Zendesk, Xero, Slack), bottleneck / workflow area, free-text message |
| Assessment / quiz answers | Role, systems, maturity self-scores, recommended next-step selections |
| Booking details | Meeting time, calendar metadata |
We ask for work contact details so we can respond about business services. Please do not submit sensitive information (health, government identifiers, etc.) via website forms unless we expressly ask for it under a separate arrangement.
3.2 Information collected automatically
- IP address, approximate location (city/region), browser and device type
- Pages viewed, referring URL, time on page, clicks on CTAs
- Cookie / local storage identifiers (see section 8)
3.3 Information from others
We may receive limited information from calendar or form providers (e.g. booking confirmations), or from colleagues who refer you.
We do not knowingly collect personal information from children under 16 via this site.
4. Why we collect it (purposes)
We collect and use personal information to:
- Respond to enquiries and book discovery or assessment calls
- Qualify interest in Automation Opportunity Assessments and related services
- Deliver the maturity quiz results and recommended next steps
- Send transactional email (confirmations, follow-ups you would expect)
- Improve the site, measure conversion (e.g. assessment CTA performance), and fix errors
- Meet legal, accounting, and dispute-resolution obligations
- Protect our systems and prevent spam, fraud, or abuse
APP 3 / 6: We only use or disclose personal information for these purposes, a related secondary purpose you would reasonably expect, with your consent, or where the law requires or permits it.
We do not sell personal information.
5. Direct marketing
We may send B2B service updates or relevant offers to work contacts who have enquired or engaged with us, where that is permitted under the Spam Act 2003 (Cth) and the Privacy Act.
You can opt out any time via the unsubscribe link in an email or by writing to hello@tonic.com.au. Transactional messages about an active enquiry or engagement may still be sent.
6. Who we share it with
We may share personal information with:
| Recipient | Role |
|---|---|
| Tonic group companies / contractors | Delivery and support under confidentiality |
| Form / webhook providers | Form webhook / Formspree-compatible backend used for site forms |
| Calendar / scheduling | Embedded calendar provider configured for Contact and Assessment booking |
| Email / CRM tools | Email/CRM tools used to manage leads and conversations |
| Analytics | Google Analytics 4 (when enabled via site config) |
| Hosting / CDN / security | Site infrastructure |
| Professional advisers | Lawyers, accountants, insurers — as needed |
| Regulators / courts | Where required by law |
Overseas disclosure: some providers may process data in the US, UK, EU, or other regions. Where we disclose personal information overseas we take reasonable steps consistent with APP 8 (contractual and due-diligence controls). Client project data residency (AU / UK / US) is agreed per engagement and is separate from routine website lead processing.
7. Security
We use reasonable organisational and technical measures appropriate to the sensitivity of website lead data (access control, TLS in transit, vendor diligence). No method of transmission or storage is completely secure. Report suspected incidents to hello@tonic.com.au promptly.
Security and governance for production automation systems we build for clients are described on /about/security and in the relevant engagement documents — those controls apply to project environments, not automatically to every website form field.
8. Cookies and analytics
We use cookies and similar technologies for:
- Essential site function
- Analytics and performance (understanding traffic and CTA use)
- Remembering preferences where applicable
You can control cookies through your browser. Blocking some cookies may limit site features. When Google Analytics 4 is enabled, it may set analytics cookies; we do not currently show a separate cookie consent banner beyond browser controls.
9. Retention
We keep personal information only as long as needed for the purposes above, including:
- Active sales / assessment enquiries: typically while the conversation is live and for a reasonable follow-up period
- Business records: as required for tax and legal retention
- Analytics: per vendor retention settings
When no longer required we delete or de-identify where practicable.
10. Your rights (Australia)
Under the Privacy Act you may request to:
- Access personal information we hold about you
- Correct inaccurate information
- Ask questions about our handling practices
Contact hello@tonic.com.au. We will respond within a reasonable period (generally 30 days). We may need to verify your identity. In some cases we may refuse a request where the Privacy Act allows — if so we will explain why.
If you are unhappy with our response you may complain to the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au/
UK / EEA visitors may have additional rights under UK GDPR / GDPR (access, erasure, restriction, portability, objection). Contact us to exercise them; our lead supervisory contact for AU remains OAIC.
11. Third-party sites and tools
The site may link to third-party sites or show third-party marks (e.g. HubSpot, Salesforce, Zendesk, Xero, Slack) to describe integrations. Those parties have their own privacy policies. Display of a mark does not mean that party endorses Tonic or shares data with us beyond what you initiate.
12. Changes
We may update this policy from time to time. The “Effective date” above will change when we publish a revision. Material changes will be highlighted on this page or notified where required.
13. Contact
Privacy questions or requests: hello@tonic.com.au · 1300 974 864