Privacy Policy
Effective 6 September 2026
Foundly Media (ABN 24 528 350 583) is a partnership between Nic Burton and Chris Pecipajkovski, based in Wollongong, New South Wales. We build websites and run Meta ads, Google Ads and Google Business Profile work for service businesses. This policy explains what personal information we collect, why, who we share it with, and how you can reach us about it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
"You" means anyone whose personal information we handle: people who enquire with us, clients and their staff, and the customers of our clients whose details pass through work we do on the client's behalf.
What we collect and how
When you enquire with us. Your name, phone number, email address, business name and anything you put in a message. We collect this through the form on this website, by phone, by email, by Instagram, and through lead forms we run on Meta platforms (Facebook and Instagram) and Google. When you submit a Meta or Google lead form, the platform passes those details to us and also holds a copy under its own privacy policy.
When you become a client. The above plus: your trading name, ABN, business address, licence numbers, photos, logos, staff names and roles, testimonials and reviews, service areas and pricing, domain registrar and hosting details, and access to accounts you ask us to work in. That may include your Meta Business Portfolio, Facebook Page and ad account, your Google Ads account, your Google Business Profile, Google Analytics and Search Console, your domain registrar and your hosting.
Your customers' information. When we build or host a website with an enquiry form, run lead ads, manage your Google Business Profile or set up conversion tracking, personal information about your customers passes through systems we operate or have access to. This includes enquiry form submissions, lead form submissions, phone numbers from click-to-call ads, review content and reviewer names, and analytics and conversion data. We handle this only on your instructions and only to deliver the work you have engaged us for. You remain responsible for your own privacy obligations to your customers, including having a privacy policy that covers the lead forms and website we build.
When you visit this website. Standard web logs held by our hosting provider (IP address, browser, pages requested, time). We may use Google Analytics and the Meta Pixel on this site. Where we do, they set cookies and collect device and browsing information, and Meta and Google may combine that with information they already hold about you. You can limit this through your browser's cookie settings and, for Meta and Google, through your account settings with them.
Why we collect it
- To respond to your enquiry and quote for work.
- To build, host and maintain your website, and to run and report on your ads and Business Profile.
- To invoice you and keep the records tax law requires.
- To measure whether our own marketing works, including which ads bring in enquiries.
- To send you occasional information about our services if you have enquired or worked with us. Every marketing message we send identifies us and includes a way to opt out, and we stop when you ask.
We do not sell personal information. We do not use client or customer data to build audiences for anyone other than the client it belongs to.
Who we share it with
We share personal information only as needed to do the work:
- Meta Platforms (Facebook, Instagram, Ads Manager, lead forms, Pixel).
- Google (Google Ads, Google Business Profile, Analytics, Search Console, Tag Manager).
- Cloudflare, which hosts this website and processes form submissions and email routing.
- Resend, which delivers enquiry emails to us.
- Domain registrars and hosting providers for client sites.
- Our accounting, invoicing and bookkeeping software, and our accountant.
- Contractors we engage for specific client work (for example video editing), under confidentiality obligations, and only the information the task needs.
- Anyone the law requires us to disclose to.
Several of these providers store data outside Australia, mainly in the United States. By enquiring with us or engaging us you consent to that overseas disclosure. We choose providers with published security practices, but we cannot enforce Australian privacy law against them once your information is in their systems.
How we hold it
Enquiry and client information lives in our email, our project files and the third-party platforms above, protected by unique passwords and two-factor authentication on every account we control. Access to client ad accounts and profiles is granted through the platform's own partner or user tools, so you can see and revoke it at any time; we do not ask for your passwords. We keep client records for seven years after the engagement ends for tax purposes, and delete or de-identify enquiry data that does not turn into work within twelve months. Ad platform and analytics data is retained per the platform's own settings, which you control in your account.
Access, correction and complaints
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where the law allows. Email nic@foundlymedia.com.au and we will respond within 30 days. If you think we have mishandled your information, tell us first and we will try to fix it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We update this policy when our services or providers change. The effective date at the top tells you when it last changed. Continued use of our services after a change means you accept the updated policy.
Contact
Foundly Media, Wollongong NSW
nic@foundlymedia.com.au
foundlymedia.com.au