Privacy Policy

Yuzu Labs Pty Ltd (ABN 12 682 064 839), trading as Yuzu Communications · Effective date: 20 August 2026 · Version 2.1

1. Who we are and what this policy covers

Yuzu Labs Pty Ltd (ABN 12 682 064 839), trading as Yuzu Communications (“Yuzu”, “we”, “us”, “our”), is a communications, community consultation and stakeholder engagement consultancy. We operate the Enganuity Insights platform, an AI-assisted tool for analysing stakeholder feedback and survey data.

This policy covers all personal information we collect through our website, including:

  • the free Enganuity Insights sample analysis (“the LITE tool” or “Rapid Insights demo”);
  • the survey assessment tool (which does not collect personal information — see clause 2(b)); and
  • the “Talk to Us” enquiry form.

Our full paid client engagements are covered by separate contractual data-handling terms agreed with each client and are not the subject of this policy.

We handle personal information in accordance with:

  • the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs); and
  • the Privacy Act 2020 (NZ) and the New Zealand Privacy Principles (NZPPs), to the extent we collect personal information from individuals in New Zealand.

Where we analyse data for Queensland government clients under a paid engagement, we also handle it to the standard of the Information Privacy Act 2009 (Qld).

2. What personal information we collect

We collect the following personal information through our website:

  1. LITE tool (Enganuity Insights demo): your email address, if you choose to unlock the Executive Brief. Providing it is optional — you can view the on-screen sample results without giving us your email. The LITE tool runs entirely on a pre-prepared synthetic dataset. It does not accept or analyse any data you provide.
  2. Survey assessment tool: we do not collect personal information for use of the free survey assessment tool. No name, email address or other contact details are requested or collected before or during use of the tool. Users must not upload a completed survey or any material containing personal, private or sensitive information. The tool is intended only for blank survey instruments, question sets and non-personal content.
  3. “Talk to Us” enquiry form: your name, email address, phone number and any other details you choose to include in your message, for the purpose of arranging an initial client meeting.
  4. Technical and usage data: your IP address, request timestamps and basic usage counts, collected automatically when you use any part of our website. We use this data only to operate the service, apply fair-use limits and prevent abuse.

We do not ask for sensitive information (as defined in the Privacy Act 1988 (Cth)) through any of our website tools, and we do not knowingly collect it.

3. How we collect personal information

We collect personal information:

  • directly from you, at the point where you choose to unlock the Executive Brief or complete the “Talk to Us” form; and
  • automatically from our servers when you use the website (technical and usage data).

4. Why we collect it and how we use it

We use the personal information we collect to:

  • deliver the Executive Brief you requested;
  • provide the survey assessment functionality;
  • respond to your enquiry and arrange an initial client meeting;
  • send you Yuzu updates and related communications, where you have consented or where permitted by law — see clause 5 below;
  • operate, secure and improve our website and tools (fair-use limits, abuse prevention, diagnostics); and
  • comply with our legal obligations.

We will not use your personal information for any purpose that is incompatible with the purpose for which it was collected, unless you consent or we are required or authorised by law to do so.

5. Direct marketing and the Yuzu mailing list

LITE tool: when you provide your email to unlock the Executive Brief, you are also subscribed to the Yuzu mailing list. We will use your email to send you the brief and to send you occasional updates about Yuzu Communications and Enganuity (news, features and related offerings). This is a condition of the free tool, and we tell you so clearly at the point where you enter your email.

“Talk to Us” form: we will only add you to our mailing list if you separately opt in at the point of collection.

You can unsubscribe at any time. Every marketing email we send includes a working unsubscribe link. You can also email us at privacy@yuzucom.tech to be removed. We honour unsubscribe requests within 5 business days, consistent with the Spam Act 2003 (Cth).

All our commercial messages identify Yuzu as the sender and include our contact details, consistent with the Spam Act 2003 (Cth).

For individuals in New Zealand, we comply with the Unsolicited Electronic Messages Act 2007 (NZ). We will only send commercial electronic messages to New Zealand recipients with their express or inferred consent, and every message includes a functional unsubscribe mechanism.

6. Who we share your information with

We disclose personal information only to the following, and only as needed to run the service:

  • our email and mailing-list provider (Resend), to deliver the Executive Brief and manage the mailing list;
  • our hosting providers (Netlify and Railway), which operate the servers the website runs on;
  • Anthropic, whose Claude AI models (Opus and Sonnet 5) are used to process survey content and power the Enganuity demo — see clause 7 below for detail on how this works; and
  • Google LLC, for Google Analytics — see clause 8 below.

We do not sell your personal information. We do not disclose it for any purpose unrelated to the services described in this policy, except where required or authorised by law.

The AI analysis in the LITE tool is produced from our own synthetic dataset and does not involve sending any information about you to our AI provider.

7. AI processing — how it works

Our website uses AI models in two ways:

  • LITE tool (Enganuity demo): the sample report is produced using Claude Sonnet 5 (for data analysis) and Fable 5 (for synthesis), operating on a fully synthetic, AI-generated dataset. No genuine data is used. No personal information about you is sent to any AI provider as part of this process.
  • Survey assessment tool: uploaded survey content is processed by Claude Opus (Anthropic) to generate an assessment. The tool is not intended to process personal information. Users are instructed not to upload completed surveys or any material containing personal, private or sensitive information. We do not request or collect personal information as part of the survey assessment process, and the tool is designed for use with blank survey instruments, question sets and non-personal content only.

Anthropic processes data in accordance with its own privacy and data-handling policies. Where we disclose information to Anthropic, we take reasonable steps to ensure it is handled consistently with the APPs and, where applicable, the NZPPs.

We note, for transparency, that the automated decision-making disclosure requirements under the Privacy and Other Legislation Amendment Act 2024 (Cth) commence on 10 December 2026. Those requirements will apply to our paid client work. The LITE tool and survey assessment tool do not make decisions that significantly affect your rights or interests.

8. Analytics and cookies

We use Google Analytics to collect anonymised data about how visitors use our website, including pages visited, time on site and general geographic location. This data is collected via cookies and similar tracking technologies.

Google Analytics data is processed by Google LLC, which may store data in the United States and other countries. Google’s data processing is governed by Google’s Privacy Policy and its data processing terms.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

We do not currently use any other analytics, advertising or tracking cookies beyond those described above.

9. Overseas disclosure (APP 8 / NZPP 12)

Your personal information may be stored or processed overseas by the following categories of recipients:

  • our email and mailing-list provider (Resend), which may hold data in the United States;
  • our hosting providers (Netlify and Railway), which may hold data in the United States;
  • Anthropic (Claude AI models), which processes data in the United States; and
  • Google LLC (Google Analytics), which processes data in the United States and other countries.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle it consistently with the APPs. This may include entering into data processing agreements with those recipients.

For individuals in New Zealand: where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients provide comparable safeguards to those required under the Privacy Act 2020 (NZ).

By using our website and providing your personal information, you acknowledge that it may be transferred to and processed in countries outside Australia and New Zealand, including the United States, where privacy laws may differ from those in your country.

10. How we keep your information secure (APP 11 / NZPP 5)

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Our security measures include:

  • API keys held server-side and never exposed to your browser;
  • access controls limiting who within Yuzu can access personal information; and
  • use of reputable, security-certified hosting and service providers.

Because the LITE tool runs on a fixed synthetic dataset, no personal information about you is processed or retained as part of the demo analysis.

No data transmission over the internet is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

11. How long we keep your information (APP 11 / NZPP 9)

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law:

  • Email addresses (mailing list): retained until you unsubscribe, after which removed within 30 days, except where we must keep a suppression record to honour your unsubscribe request.
  • Survey assessment submissions: survey content submitted through the assessment tool is retained for 90 days after the assessment is delivered, then deleted. As the survey assessment tool does not collect personal information, this retention period applies to non-personal survey content only.
  • “Talk to Us” enquiry form submissions: retained for 12 months after your last contact with us, or until the matter is resolved, then deleted or de-identified.
  • Technical and usage logs: retained for 90 days for security and diagnostics, then deleted or de-identified.

Where we are required by law to retain information for a longer period, we will do so and will delete it once that obligation ends.

12. Notifiable data breaches

Australia: we are subject to the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). If we become aware of a data breach that is likely to result in serious harm to any individual whose information is involved, we will:

  • assess the breach as quickly as possible and no later than 30 days after becoming aware of it;
  • notify affected individuals and the Office of the Australian Information Commissioner (OAIC) if the breach meets the threshold for notification; and
  • take steps to contain the breach and prevent further harm.

New Zealand: we comply with the mandatory privacy breach notification requirements under the Privacy Act 2020 (NZ). If we become aware of a privacy breach that has caused, or is likely to cause, serious harm to an affected individual, we will notify the individual and the New Zealand Privacy Commissioner as soon as practicable.

13. Your rights — access, correction and complaints

Access and correction: you have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, email us at privacy@yuzucom.tech. We will respond within a reasonable period and will not charge you for making a request.

Complaints — Australia: if you believe we have mishandled your personal information, you can complain to us at privacy@yuzucom.tech. We will acknowledge your complaint promptly and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Complaints — New Zealand: if you are in New Zealand and believe we have breached the Privacy Act 2020 (NZ), you may complain to us at privacy@yuzucom.tech in the first instance. If you are not satisfied with our response, you may complain to the New Zealand Privacy Commissioner at privacy.org.nz.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The current version and its effective date will always appear at the top of this page. Where changes are material, we will take reasonable steps to notify you.

15. Contact us

For any privacy-related queries, requests or complaints, please contact:

Privacy Officer, Yuzu Labs Pty Ltd
Email: privacy@yuzucom.tech
Address: Level 6, 25 King Street, Bowen Hills, Queensland 4006