Privacy Policy

New Era Scaling is a sole-trader web design and AI automation business based on the Northern Beaches of Sydney, Australia. We can be reached on +61 478 145 186.

We collect personal information when you:

• Contact us by phone, web form, email, or chat — typically your name, business, phone, email, and the contents of your message.
• Engage us as a client — billing information, business details, content and assets you share with us, and login or API keys you authorise us to manage on your behalf.
• Visit our website — limited technical data (IP address, browser type, pages viewed, referrer) collected by our hosting and analytics providers for security and basic usage analytics.

When we operate AI receptionist or chat features on a client’s site, we may collect transcripts of conversations on behalf of that client, who is the data controller for that information.

We use personal information to:

• Respond to enquiries and quote on work.
• Deliver and maintain the services you’ve engaged us for.
• Issue invoices and collect payment.
• Improve our services, with aggregate or de-identified analytics where possible.
• Comply with our legal and tax obligations.

We do not sell personal information, and we do not use it for any purpose materially different from the one for which it was collected without your consent.

To deliver our services we share necessary information with trusted third-party providers, who are bound by their own privacy obligations:

• Stripe — payment processing. Card data is sent directly to Stripe; we do not store full card numbers.
• Vercel — hosting of our website and most client websites (servers in Sydney / global edge).
• Supabase — database and authentication for some client systems.
• Resend — transactional email delivery.
• Third-party AI providers (e.g. OpenAI, Anthropic) — for chat, receptionist, and automation features. Inputs sent to these providers may be processed outside Australia.
• Google — Google Workspace, Google Ads, and Analytics where engaged.

Some of these providers store or process data outside Australia (commonly in the United States or the European Union). By using our services you consent to this transfer where it is necessary to provide them.

We store information in cloud services that use industry-standard encryption in transit (TLS) and at rest. Access to client data is restricted to the personnel who need it to deliver services. We retain personal information only as long as necessary for the purpose it was collected or as required by law (e.g. tax records).

Our website may use first-party cookies and privacy-preserving analytics to understand traffic patterns. We do not use intrusive cross-site tracking or sell visitor data. You can disable cookies in your browser without losing core site functionality.

Under the Australian Privacy Act, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or out-of-date information.
• Request deletion of personal information that is no longer needed for the purpose it was collected, subject to legal retention requirements.
• Make a complaint about how we have handled your personal information.

To exercise any of these rights, call us on +61 478 145 186. We’ll respond within thirty (30) days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If we become aware of an eligible data breach affecting your personal information, we will notify you and the OAIC in accordance with the Notifiable Data Breaches scheme.

Our services are intended for businesses and adult users. We do not knowingly collect personal information from children under 16.

We may update this policy from time to time. The “effective” date at the top reflects the most recent version.