Privacy Policy

1. Information We Collect

We collect personal information that is necessary to provide our website design and related services. This includes:

• Contact information: Your full name, email address, and mobile phone number (collected via our lead opt-in form).
• Business information: Your business name, trade/industry, business address, years of experience, service area, services offered, and other details provided in our onboarding questionnaire.
• Branding preferences: Logo files, colour preferences, brand tone, and competitor information you choose to share.
• Communications: Any emails, messages, or call notes exchanged between you and us.
• Payment information: We do not store your payment card details. Payments are processed securely through our payment processor.
• Technical data: IP address, browser type, and pages visited, collected automatically via standard web server logs and cookies.

We only collect information that is reasonably necessary for the provision of our services.

2. How We Use Your Information

We use your personal information to:

• Build and deliver your website as described in our service offer.
• Contact you to arrange your website reveal call and any revisions.
• Process payment upon your approval of the completed website.
• Send service-related communications (e.g. project updates, booking confirmations).
• Provide ongoing hosting and SEO services if you choose to subscribe.
• Improve our services and website experience.
• Comply with legal obligations.

We will not use your information to send unsolicited marketing emails. You will only hear from us in relation to your website project or services you have opted into.

3. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

• Service providers: We use GoHighLevel (LeadConnector) as our CRM and business management platform to store contact records, manage workflows, and schedule your reveal call. GoHighLevel processes data on servers located in the United States and is subject to its own privacy policy.
• Hosting and infrastructure providers: Third-party platforms used to host and deliver your completed website.
• Payment processors: Secure third-party payment services to process your $500 payment. We do not receive or store your card details.
• Legal requirements: Where we are required to do so by law, court order, or regulatory authority.

All third parties we engage are required to handle your information in a manner consistent with applicable privacy laws.

4. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Remember your preferences and improve your browsing experience.
• Analyse website traffic and usage patterns (via standard analytics).
• Enable embedded third-party tools (such as our booking calendar).

You may disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

5. Data Storage and Security

Your personal information is stored in secure systems and we take reasonable steps to protect it from misuse, interference, loss, and unauthorised access. These measures include:

• Encrypted connections (HTTPS) across all pages.
• Access controls limiting who can view your information.
• Use of reputable, industry-standard CRM and hosting platforms.

No method of data transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

6. Retention of Information

We retain your personal information for as long as is necessary to provide our services and fulfil the purposes outlined in this policy, or as required by law. If you request that we delete your information and there is no legal obligation to retain it, we will action your request within a reasonable timeframe.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of any inaccurate or out-of-date information.
• Request that we delete your personal information (subject to legal requirements).
• Withdraw consent to marketing communications at any time.

To exercise any of these rights, please contact us using the details below.

8. Cross-Border Data Transfer

Some of our service providers (including GoHighLevel/LeadConnector) are based or store data outside Australia, including in the United States. By submitting your information to us, you consent to this transfer. We take reasonable steps to ensure any overseas recipients handle your data in a manner consistent with the Australian Privacy Principles.

9. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. Continued use of our services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, wish to access your information, or have a privacy concern or complaint, please contact us:

• Email: hello@spotonwebsites.com.au
• Website: spotonwebsites.com.au

We will respond to all privacy enquiries within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).