- Perth, Australia
- Mon to Fri · 9am to 5pm
We know privacy policies are usually the page nobody reads, so we have written this one the way we would explain it to you over a coffee. It covers what information we collect when you visit onlinestrategyco.com.au or work with us, why we collect it, where it goes, and what you can do about it.
This policy is written to line up with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If anything here is unclear, just ask. Our details are at the bottom.
Online Strategy Co (ABN 44 123 231 851) is an SEO and digital marketing agency based in Perth, Western Australia. When this policy says “we”, “us” or “our”, that is who we mean. When it says “you”, that means anyone visiting our website, getting in touch, subscribing to our emails, or working with us as a client.
Most of what we hold, you give us yourself. Here is how that usually happens.
If you fill in a contact or enquiry form, request a free video SEO audit, or book a discovery call, we will ask for things like your name, email address, phone number, business name and website address, what you would like help with, and a rough idea of your monthly budget. We use this to reply to you, prepare for the call, and work out whether we are the right fit for each other.
If you join our newsletter or download a resource such as our SEO cheat sheet, we collect your name and email address so we can send it to you and keep in touch. Every email we send has an unsubscribe link, and we will not be offended if you use it.
Like most websites, ours collects some information automatically through cookies and similar tools. That includes things like the pages you visit, how long you stay, the device and browser you are using, your rough location (city level, not your street), and the website or ad that sent you here. This is not tied to your name unless you go on to fill in a form. There is more on the specific tools we use in the section below.
Once we are working together, we will hold your business details, billing information, the contents of our emails and calls, and login or access details for the accounts we need to do the job (for example your website, Google Business Profile, Google Analytics, Search Console or ad accounts). Wherever possible we will ask you to grant us access to those accounts rather than share passwords with us.
We use the information above to:
We do not use your information for anything unrelated to the reason you gave it to us without asking first.
We rely on a few third-party tools to run the website and the business. Each one handles a slice of your information, so here is the honest list.
Tells us how many people visit, which pages they read and where they came from. Google sets cookies to do this and processes the data on its servers, which may be located outside Australia. IP addresses are anonymised. You can opt out with the Google Analytics browser add-on at tools.google.com/dlpage/gaoptout.
A small piece of code from Meta (Facebook and Instagram) that lets us measure whether our ads are working and show ads to people who have visited our site. Meta may match your visit to your Facebook or Instagram account if you are logged in. You can control this in your Facebook ad settings, and Meta explains how it handles data in its own privacy policy at facebook.com/privacy.
Records how visitors move around the site, including clicks, scrolling and mouse movement, and produces anonymised heatmaps and session replays. It helps us spot where a page is confusing. Clarity automatically masks sensitive content such as text typed into forms. Microsoft may use this data for its own analytics and advertising purposes, as described at privacy.microsoft.com.
The platform behind our enquiry forms, discovery call bookings and client messaging. When you fill in a form or book a call, your details are stored in our GoHighLevel account, which is hosted in the United States.
Our email newsletter platform. If you subscribe, download a resource or get in touch, your name and email address are added to our Flodesk audience so we can send you what you asked for. Flodesk is based in the United States.
We also use standard business software for email, file storage, invoicing and payments (for example Stripe for card payments). These providers only see the information needed to do their job, and we choose reputable providers with their own privacy and security commitments.
Cookies are small files a website stores in your browser. Ours fall into three groups: cookies that make the site work, cookies that measure how the site is used (Google Analytics and Microsoft Clarity), and cookies used for advertising (Meta Pixel).
You do not have to accept them. You can block or delete cookies in your browser settings at any time, use the opt-out links listed above, or use the “Do Not Track” and ad personalisation settings on your device. Blocking cookies will not stop you reading the site, though a few features such as forms may not work as well.
We do not sell, rent or trade your personal information. Full stop. We share it only with:
If we ever sold the business, your information may be passed to the new owner, who would be bound by this policy.
We are in Perth, but many of the tools we use are hosted overseas, mainly in the United States. That includes Google, Meta, Microsoft, GoHighLevel and Flodesk. By using our website or working with us, you acknowledge that your information may be stored and processed outside Australia by these providers under their own privacy policies. We pick providers that take security seriously, but we cannot control their systems directly.
SEO work means we spend time inside your systems, including your website admin, analytics, Search Console, Google Business Profile and sometimes your ad accounts. In doing that we may come across information about your customers, such as enquiry form submissions or customer reviews. We treat that as your information, not ours. We only access what the job requires, we do not copy it out or use it for our own purposes, and we remove our access when our engagement ends or you ask us to. Any specific requirements are set out in our SEO Engagement Terms.
We use reasonable steps to protect your information from misuse, loss and unauthorised access. That includes password managers and two-factor authentication on our accounts, requesting delegated access rather than shared passwords, limiting who on our team and our contractors can see what, and using providers with strong security practices. No system is perfect, but we take this seriously and review our practices regularly.
We keep your information for as long as we need it for the purpose we collected it, and then delete it or de-identify it. As a guide:
You are in control here. At any time you can:
Just email us using the details below. We will usually get back to you within a few business days and there is no charge for any of this.
If you think we have mishandled your information, please tell us first. Email us, explain what happened, and we will look into it and reply within 30 days. If you are not happy with our response, you can take it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
If we ever suffer a data breach that is likely to cause you serious harm, we will let you and the OAIC know as soon as we reasonably can, in line with the Notifiable Data Breaches scheme.
Our services are for businesses and business owners, so our website is not aimed at anyone under 18 and we do not knowingly collect information from children. If you think a child has given us their details, let us know and we will remove them.
We may update this policy from time to time as our tools or the law change. The date at the top tells you when it was last updated, and the current version will always live on this page. If a change is significant, we will let our clients and subscribers know by email.
Questions, requests or just want to chat about any of this? Here is how to reach us.
