Privacy Policy

1. Introduction

Marketing Unagency Co. ("we", "us", "our") is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), and other applicable Australian privacy laws.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you interact with us. This includes when you visit our website, enquire about our services, become a client of ours, or receive marketing communications sent by us or sent by us on behalf of our clients.

2. What personal information we collect

We may collect the following types of personal information:

• Contact information such as your name, email address, phone number, business name, ABN, position or title, and postal or business address.
• Communication content such as the messages, emails, SMS exchanges, call notes, and meeting summaries that arise from your communications with us.
• Marketing engagement information such as which marketing communications you open, click on, reply to, or unsubscribe from, and your stated communication preferences.
• Website and technical information such as your IP address, device type, browser type and version, operating system, pages visited, time spent on pages, referring URLs, and similar data collected automatically through cookies and analytics tools.
• Business information such as details about your business, industry, marketing objectives, current marketing channels, and any information you choose to share with us as part of an enquiry or engagement.
• Service delivery information such as account credentials you authorise us to hold or access, brand assets, marketing strategy documents, and other materials you provide to us as part of receiving our services.
• Payment information such as billing name, billing address, and transaction details. Full credit card numbers and bank account details are processed by our payment providers and are not stored on our systems.

We do not deliberately collect sensitive information (as defined under the Privacy Act, such as health information, racial or ethnic origin, religious beliefs, or biometric data). If you provide sensitive information to us unsolicited, we will deal with it in accordance with APP 4 and either destroy or de-identify it where lawful and practical.

3. How we collect personal information

We collect personal information:

• Directly from you when you complete a form on our website, send us an email or SMS, book a call, sign up for marketing communications, become a client, or otherwise communicate with us.
• Automatically through technology when you visit our website, including through cookies, analytics platforms, and similar tracking technologies.
• From third parties such as referral sources, publicly available business directories, social media platforms, and lawful marketing intelligence tools, where it is reasonable and relevant for a legitimate business purpose.
• On behalf of our clients when we are delivering marketing services to them and the data relates to their customers, leads, or prospects. In these cases, we act as a service provider to the client and the client remains primarily responsible for the personal information they have entrusted to us.

4. Why we collect and use personal information

We collect and use personal information for the following purposes:

• To respond to your enquiries and provide information or quotes you request.
• To deliver our marketing services to clients, which may include strategy, copywriting, content creation, paid advertising, search engine optimisation, email and SMS marketing, reporting, and platform management.
• To send marketing communications about our own services to people who have consented or where consent can reasonably be inferred under the Spam Act.
• To send marketing communications on behalf of our clients to their customers and prospects, where authorised by the client and permitted by law.
• To improve our website, services, and customer experience.
• To manage our business operations, including invoicing, accounting, contract administration, and record-keeping.
• To comply with our legal obligations, including tax, consumer protection, and privacy laws.
• To protect our legal rights, prevent fraud, and maintain the security of our systems and the systems we manage on behalf of clients.

5. Marketing communications and the Spam Act

All commercial electronic messages we send comply with the Spam Act 2003 (Cth). This means:

• We only send commercial electronic messages where we have your consent (express or inferred under the Act) or where the message is otherwise permitted by law.
• Every commercial message identifies the sender. Where we send a message on behalf of a client, the client is identified as the sender for Spam Act purposes.
• Every commercial message includes a functional unsubscribe mechanism that remains valid for at least 30 days.

You can unsubscribe from our own marketing communications at any time using the unsubscribe link in any message, by replying STOP to an SMS, or by emailing us directly. Unsubscribing from one of our clients' marketing lists is separate from unsubscribing from ours.

6. Who we disclose personal information to

We may disclose personal information to the following categories of recipients:

• Service providers and platforms that help us run our business and deliver our services, including our customer relationship management and automation platform (HighLevel / LeadConnector), email delivery providers, SMS providers, payment processors, cloud storage and hosting providers, accounting and bookkeeping providers, advertising platforms, analytics providers, and other technology vendors.
• Our clients where the personal information relates to marketing services we are delivering on their behalf.
• Professional advisers such as our lawyers, accountants, and auditors, where reasonably required and bound by confidentiality obligations.
• Government agencies and regulators where we are required by law or in response to a valid legal request or process.
• Potential or actual purchasers of our business in the event of a sale, merger, restructure, or similar transaction, subject to appropriate confidentiality protections.

We require third parties who handle personal information on our behalf to do so in a manner consistent with this Policy and with applicable privacy laws.

7. Overseas disclosure

Some of the third-party providers we use are located outside Australia, including in the United States and the European Union. By providing your personal information to us, you acknowledge and consent to the disclosure of your personal information to overseas recipients for the purposes set out in this Policy.

We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the APPs, including by selecting providers with appropriate data protection commitments. To the extent permitted by law, we are not responsible for the conduct of overseas recipients once your personal information has been disclosed to them as described.

8. Storage, security, and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include access controls, password protection, encryption in transit, secure cloud storage, supplier due diligence, and ongoing staff awareness.

No system or transmission method is completely secure. While we take security seriously, we cannot guarantee that information transmitted to us over the internet will be free from interception or unauthorised access.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to meet our legal and contractual obligations, and to handle any disputes that may arise. Categories of information are generally retained as follows:

• Active client records are retained for the duration of the engagement and for a reasonable period afterwards for tax, legal, and audit purposes (typically up to seven years).
• Enquiry records that do not result in an engagement are retained for up to two years.
• Marketing engagement records are retained until you unsubscribe or until they are no longer needed for analytical purposes.

If we become aware of a data breach that is likely to result in serious harm to affected individuals, we will respond in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

9. Cookies, analytics, and tracking

Our website uses cookies and similar technologies to:

• Make our website function properly and remember your preferences.
• Understand how visitors use our website, including through analytics tools such as Google Analytics.
• Deliver, measure, and optimise marketing campaigns, including through advertising platforms such as Meta and Google.

You can manage or disable cookies through your browser settings. Disabling cookies may affect the functionality of our website.

If you are visiting from a jurisdiction that requires cookie consent (such as the European Union or United Kingdom), you may be presented with a consent prompt and additional choices when you first visit our site.

10. Automated decisions and AI tools

We use software platforms that include automation features, such as marketing automation, segmentation rules, and AI-assisted content generation. These tools support our work but do not, on their own, make decisions that have a legal or similarly significant effect on you.

If we introduce any automated decision-making process that would materially affect you, we will update this Policy and provide further information about how it works and your rights in relation to it.

11. Accessing and correcting your personal information

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Withdraw consent for the use of your personal information for direct marketing purposes.
• Ask us how we collected your personal information if it came from a source other than you.

To make a request, contact us using the details below. We will respond within a reasonable timeframe, usually within 30 days. We may need to verify your identity before processing your request. There is generally no fee for accessing your personal information, although we may charge a reasonable cost-based fee in limited circumstances.

If we refuse a request, we will explain our reasons in writing and let you know how you can complain.

12. Complaints

If you believe we have breached the Privacy Act or this Privacy Policy, please contact us in the first instance using the details in section 14. We will acknowledge your complaint within a reasonable time and aim to investigate and respond to you within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

13. Children's privacy

Our services are directed to business owners and operators and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided personal information to us, please contact us and we will take reasonable steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on our website, with the "Last updated" date at the top. Material changes will be communicated as appropriate. We encourage you to review this Policy periodically.

15. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: