Privacy Policy

We are based in New South Wales, Australia. For privacy questions or requests, call +61 478 145 186 or use your existing project correspondence. You may make an initial enquiry anonymously or using a pseudonym where practicable; we need accurate contact and billing details to enter and perform a contract.

We follow the privacy obligations applicable to our activities. This policy does not represent that every client is covered by the same laws or that our role removes any legal obligations we have ourselves.

Enquiries and bookings: your name, business, email, telephone number, appointment details and messages you choose to provide through phone, email, booking or live chat.

Projects and billing: legal entity and invoicing details, proposals, approvals, correspondence, project assets and information needed to perform the agreed services. Where authorised, we may temporarily handle account invitations, access credentials and client-system information.

Website operation: technical information such as IP address, browser/device details, requested pages, timestamps and security logs may be processed by our hosting and embedded-service providers. Booking and chat interactions may also use cookies or local storage.

We do not ask for patient records, medical histories or other sensitive information in ordinary website enquiries. Please do not submit these through our booking or chat tools. If sensitive information is needed for an expressly agreed service, we first agree appropriate consent, access and protection arrangements.

We collect information directly from you, through our website tools and service providers, and from authorised client representatives or referrers. We use it to respond to enquiries, arrange calls, quote, deliver agreed work, administer billing, support clients, protect systems and meet legal obligations.

We use or disclose information for those purposes, related purposes you would reasonably expect, with consent where required, or where otherwise permitted or required by law. We do not sell personal information. Marketing communications, where sent, provide a way to opt out; you can also contact us to stop them.

Our agency website uses Vercel for hosting and GoHighLevel/LeadConnector for the embedded discovery-call booking and live chat tools. Information entered into those tools is processed by the relevant provider and made available to us to handle your enquiry.

Depending on the services you engage us for, other providers may include payment processors such as Stripe, email providers, Google Workspace, Supabase, Resend and AI or automation providers. We share only information reasonably needed for the relevant service, and use personnel or contractors with appropriate confidentiality obligations.

Cloud providers and their support teams may process information outside Australia, including in the United States and European countries, depending on the provider and service. An Australian hosting region does not guarantee that every support, backup or subprocess operation remains in Australia. Contact us for provider and location information relevant to your engagement. We take steps required by applicable law for overseas disclosures; using this website is not a blanket waiver of privacy rights.

The booking and chat tools can use cookies, local storage and similar technologies for their functionality, session management and service measurement. Your browser can restrict these technologies, although some features may not work. You can contact us by phone instead.

External booking, payment and client websites have their own privacy notices. We do not represent that all embedded providers are tracking-free. Any additional advertising or analytics integrations for a client project must be identified in that project’s own privacy arrangements.

For a client-operated website, the client determines its business purposes and manages its customers. Our access is limited to the development, migration, testing or support the client authorises. We do not use a client’s customer list for our own marketing, and we remain responsible for our own handling of information.

For a full-transfer project we remove our routine access at handover, with any temporary support access separately agreed. Working copies of customer data and credentials are returned or securely deleted when no longer needed, normally within 30 days after support ends. We retain only records needed for legitimate legal, accounting or dispute purposes, with restricted access. Questions about orders placed with a client business should go to that business.

We take reasonable steps appropriate to the information and risks, including access controls, secure transfer methods and limiting access to authorised people who need it. No internet service can be guaranteed completely secure.

We keep information only while reasonably needed for the purposes described here or for applicable legal requirements. When no longer required, we take reasonable steps to destroy or de-identify it. Retained backups remain restricted and are removed through the applicable retention cycle. We assess suspected breaches and make notifications where required by applicable law.

Contact us to request access to or correction of your personal information, ask about deletion of information no longer needed, or make a privacy complaint. We may reasonably verify your identity. Any lawful refusal will be explained, including available review options. We aim to respond within 30 days and will explain if more time is needed.

If a complaint is unresolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au, where it has jurisdiction, or another appropriate regulator. Nothing here limits your rights under applicable privacy law.

OAIC privacy complaints

Last updated 29 September 2026. We publish updates here when our handling practices change. A policy update does not by itself authorise a new use of previously collected information; we will provide further notice or obtain consent where required.