Privacy Policy

Hermes Digital · ABN 18 180 768 086 · Central Coast, NSW · Effective [DATE – confirm]

The short version: we only collect what we need to look at your application, talk to you and run your website. We don't sell your info. You can ask to see it, fix it or delete it any time.

1. Who we are

Hermes Digital (ABN 18 180 768 086) is a web design and website care business based on the Central Coast, NSW ("we", "us", "our"). This policy explains how we handle personal information when you visit hermesdigital.com.au or our landing pages, apply to be a case study, or become a client.

We aim to handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). [CONFIRM: if annual turnover is under $3M the Privacy Act may not strictly apply, but following it is still best practice – lawyer to confirm]

2. What we collect

When you apply or contact us

Your name, business name, phone number and email address.
Your trade, service area and ABN (if you give it).
Your current website address and how jobs come in now.
Anything else you choose to tell us in the form, by email, phone or text.

When you become a client

Billing details. Card or bank details are handled by our payment provider [e.g. Stripe – confirm]. We don't store full card numbers.
Logins or access you give us (for example your domain, Google Business Profile, Google Analytics or Search Console) so we can build, track and look after your site.
Website performance data used to measure the guarantee (form submissions, tracked calls, bookings).

Automatically, when you visit

Device and browser info, pages viewed, and roughly where you are (city level), through cookies and similar tools (see section 5).

You can deal with us without giving your name (for example, just reading the page). But we can't assess an application or build a site without contact details.

3. Why we collect it

To review your application and decide if you're a fit for one of the case study spots.
To contact you about your application, book calls and answer questions.
To build, host, maintain, secure and improve your website, and deliver the monthly plan.
To bill you and keep business and tax records.
To measure results, including for the guarantee.
To publish a case study, only as set out in our Terms and with your consent for anything like a testimonial.
To run and measure our ads (for example Meta/Facebook and Instagram ads) and improve our website.
To meet our legal obligations.

We'll only send you marketing emails or texts if you've agreed or it's allowed under the Spam Act 2003. Every marketing message has a way to unsubscribe.

4. Who we share it with

We don't sell or rent your personal information. We share it only with people who help us run the business, and only as much as they need:

Website hosting, domain, email and form providers.
Payment and accounting providers.
Scheduling, CRM and communication tools.
Analytics and advertising platforms (for example Google and Meta).
Contractors who help build your site, who must keep your info confidential.
Our accountant, lawyer or insurer, or a government body if the law requires it.

5. Cookies, the Meta Pixel and analytics

Our pages may use cookies and similar tools, including the Meta Pixel and Google Analytics [CONFIRM which tools are actually installed]. These help us see which ads and pages work and show our ads to people who have visited. They may collect your IP address, device and browser info, and which pages you viewed. Meta and Google handle that data under their own privacy policies.

You can block or delete cookies in your browser settings, and change your ad settings in your Facebook/Instagram and Google accounts. The page still works without them.

6. Storage, security and overseas

We store information with reputable cloud providers and take reasonable steps to protect it from misuse, loss and unauthorised access (strong passwords, two-factor login where available, and limited access).

Some of our providers (for example Meta, Google and some hosting and software tools) store data overseas, including in the United States [CONFIRM provider locations]. By using these services we take reasonable steps to make sure they handle information in a way consistent with the APPs.

We keep information only as long as we need it for the reasons above or as the law requires (for example, tax records for 5 years). Applications that don't go ahead are deleted after [SUGGESTED: 12 months – confirm] unless you ask us to delete them sooner.

If there's a data breach likely to cause you serious harm, we'll tell you and, where required, the OAIC under the Notifiable Data Breaches scheme.

7. Seeing and fixing your information

You can ask for a copy of the personal information we hold about you, or ask us to correct or delete it. Email us at [hello@hermesdigital.com.au – confirm]. We'll reply within 30 days. We may need to confirm who you are first. If we can't do what you ask (for example, we have to keep tax records), we'll tell you why.

8. Complaints

If you're worried about how we've handled your information, email [hello@hermesdigital.com.au – confirm] and we'll respond within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

9. Changes

We may update this policy from time to time. The latest version will always be on this page with its effective date.

10. Contact

Hermes Digital · ABN 18 180 768 086 · Central Coast, NSW
Email: [hello@hermesdigital.com.au – confirm]