Privacy Policy

1. Information We Collect

We collect personal information that is necessary to provide our website design and related services. This includes:

• Contact information: Your full name, email address, and mobile phone number (collected via our lead opt-in form).
• Business information: Your business name, trade/industry, business address, years of experience, service area, services offered, and other details provided in our onboarding questionnaire.
• Branding preferences: Logo files, colour preferences, brand tone, and competitor information you choose to share.
• Communications: Any emails, messages, or call notes exchanged between you and us.
• Payment information: We do not store your payment card details. Payments are processed securely through our payment processor.
• Technical data: IP address, browser type, and pages visited, collected through standard web server logs and cookies.
• Search performance data: Where you use our Leads Unlimited plan (hosting, SEO, and Spot On Leads Portal) or related services, we may access aggregated search performance metrics for your website (for example impressions and queries) via Google Search Console or tools you authorise, to deliver SEO and support our 30-Day Lead Guarantee where applicable.

We only collect information that is reasonably necessary for the provision of our services.

2. How We Use Your Information

We use your personal information to:

• Build and deliver your website as described in our service offer.
• Contact you to arrange your handover call, milestone approvals, and any revisions.
• Process milestone payments ($300 and $200) and ongoing hosting subscriptions when you subscribe.
• Send service-related communications (e.g. project updates, booking confirmations).
• Provide ongoing hosting, Leads Unlimited (hosting, SEO, Spot On Leads Portal), and optional edit-only plans if you choose to subscribe.
• Deliver SEO and lead-related services and measure organic visibility using Google Search Console or equivalent, where you grant access, as described in our Terms & Conditions.
• Improve our services and website experience.
• Comply with legal obligations.

We will not use your information to send unsolicited marketing emails. You will only hear from us in relation to your website project or services you have opted into.

3. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

• Service providers: We use GoHighLevel (LeadConnector) as our CRM and business management platform to store contact records, manage workflows, and schedule your handover call. GoHighLevel processes data on servers located in the United States and is subject to its own privacy policy.
• Hosting and infrastructure providers: Third-party platforms used to host and deliver your completed website.
• Google LLC and related Google services: Where you authorise access, Google Search Console and other Google products may process URL and search-analytics data relating to your site. Google's handling of that data is governed by Google's terms and privacy policy.
• Payment processors: Secure third-party payment services to process milestone payments for your website build and any monthly hosting or edit subscriptions. We do not receive or store your full card details.
• Legal requirements: Where we are required to do so by law, court order, or regulatory authority.

All third parties we engage are required to handle your information in a manner consistent with applicable privacy laws.

4. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Remember your preferences and improve your browsing experience.
• Analyse website traffic and usage patterns (via standard analytics).
• Enable embedded third-party tools (such as our booking calendar).

You may disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

5. Data Storage and Security

Your personal information is stored in secure systems and we take reasonable steps to protect it from misuse, interference, loss, and unauthorised access. These measures include:

• Encrypted connections (HTTPS) across all pages.
• Access controls limiting who can view your information.
• Use of reputable, industry-standard CRM and hosting platforms.

No method of data transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

6. Retention of Information

We retain your personal information for as long as is necessary to provide our services and fulfil the purposes outlined in this policy, or as required by law. If you request that we delete your information and there is no legal obligation to retain it, we will action your request within a reasonable timeframe.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of any inaccurate or out-of-date information.
• Request that we delete your personal information (subject to legal requirements).
• Withdraw consent to marketing communications at any time.

To exercise any of these rights, please contact us using the details below.

8. Cross-Border Data Transfer

Some of our service providers (including GoHighLevel/LeadConnector and, where you use Search Console, Google) are based or store data outside Australia, including in the United States. By submitting your information to us, you consent to this transfer. We take reasonable steps to ensure any overseas recipients handle your data in a manner consistent with the Australian Privacy Principles.

9. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. Continued use of our services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, wish to access your information, or have a privacy concern or complaint, please contact us:

• Email: hello@spotonwebsites.com.au
• Website: spotonwebsites.com.au

We will respond to all privacy enquiries within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).