Draft document. This policy has been prepared as a working draft and should be reviewed by a qualified Australian privacy lawyer before publishing. Fields marked [TO BE CONFIRMED] must be completed prior to launch.

1 About this policy

For Purpose Digital (ABN: [TO BE CONFIRMED]) is a digital marketing agency based in Mount Egerton, Victoria, Australia. We provide local SEO, Google Business Profile optimisation, Google review generation, Google Ad Grant management, and website SEO audit services to Australian charities and not-for-profit organisations.

This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website at forpurposedigital.com.au or engaging our services, you agree to the collection and use of your information as described in this policy.

Plain English summary: We collect the minimum information needed to provide our services and communicate with you. We do not sell your information. We do not use it for purposes you would not reasonably expect.

2 What information we collect

We may collect the following types of personal information:

Contact and identity information

  • Your name and the name of your organisation
  • Your email address
  • Your phone number (where provided)
  • Your position or role within your organisation
  • Your physical or postal address (where provided)

Business and service information

  • Your organisation's website URL
  • Your Google Business Profile details
  • Information about your organisation's digital marketing goals and challenges
  • Information about your organisation's existing Google accounts and performance

Communications

  • The content of emails, messages, and enquiries you send us
  • Notes from calls and meetings
  • Feedback and responses you provide during our engagement

Technical information

  • IP address and browser information collected via Google Analytics 4
  • Pages visited, time spent on our website, and referral source
  • Device type and operating system

We do not intentionally collect sensitive information as defined under the Privacy Act (such as health information, racial or ethnic origin, or political opinions) unless you voluntarily provide it in the course of describing your organisation's work or your personal connection to a cause. Where sensitive information is provided, we treat it with additional care and use it only for the purpose for which it was provided.

3 How we collect it

We collect personal information in the following ways:

  • Booking forms: when you book a free audit call through our website, we collect your name, organisation name, email address, and any information you provide in the booking form fields
  • Email and direct enquiries: when you contact us by email or through our website contact form
  • Audit and onboarding calls: information you share during discovery and onboarding conversations
  • Service delivery: information we access or receive in the course of delivering services, including access to your Google Business Profile, Google Ads account, Google Analytics, and Google Search Console where you grant us access
  • Our website: technical information collected automatically via Google Analytics 4 when you visit our website
  • GoHighLevel CRM: we use GoHighLevel to manage client communications, automate review request sequences, and store contact records. Information entered into our booking system is stored in GoHighLevel
  • Third parties: we may receive your contact details if a colleague or referral partner refers you to us

We collect personal information only by lawful and fair means, and only where it is reasonably necessary for our business functions.

4 Why we collect it and how we use it

We use your personal information for the following purposes:

  • To provide, manage, and improve our services to you
  • To communicate with you about your audit call, onboarding, and ongoing service delivery
  • To run automated review request sequences on your behalf as part of our review generation service
  • To send monthly reports and quarterly review meeting invitations
  • To send service-related communications including invoices, agreements, and updates
  • To comply with our legal obligations
  • To respond to enquiries and complaints
  • To improve our website, services, and communications based on usage data

We will not use your personal information for any purpose that you would not reasonably expect, and we will not use or disclose it for a secondary purpose without your consent, unless an exception under the Privacy Act applies.

5 Who we share it with

We may disclose your personal information to the following categories of third parties where necessary to provide our services:

Service providers and platforms

  • GoHighLevel: our CRM, automation, and SMS platform. Used to manage bookings, store contact records, and run review request sequences. Data is stored on GoHighLevel's servers, which may be located outside Australia
  • Google: we use Google Analytics 4, Google Workspace (email), Google Business Profile, Google Ads, and Google Search Console in the course of delivering services. Your information may be processed by Google in accordance with Google's privacy policy
  • Loom: we use Loom to record and deliver monthly reporting videos. Videos are shared via link and are not publicly searchable
  • Vercel: our website hosting platform
  • GitHub: our website code repository. No personal client data is stored in GitHub

Professional advisers

  • Accountants, lawyers, and other professional advisers where necessary for legal or compliance purposes

We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

We may also disclose your information where required or permitted by law, including to regulators, law enforcement agencies, or courts.

6 Overseas disclosure

Some of the third-party platforms we use may store or process your personal information outside Australia, including in the United States and other countries. These platforms include GoHighLevel, Google, Loom, and Vercel.

Before disclosing personal information to overseas recipients, we take reasonable steps to ensure they are subject to privacy obligations comparable to the Australian Privacy Principles, either through their own privacy policies, contractual obligations, or applicable law in their jurisdiction.

By using our services, you consent to the transfer of your personal information to these overseas platforms as described in this policy.

7 How we store and protect it

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:

  • Password-protected access to all accounts and systems
  • Use of two-factor authentication on Google Workspace, GoHighLevel, and other platforms where available
  • HTTPS encryption on our website
  • Limiting access to personal information to only those who need it to deliver our services

No data transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee the absolute security of personal information transmitted to or from our website.

8 How long we keep it

We retain personal information for as long as it is needed for the purposes for which it was collected, or as required by law. Specifically:

  • Client contact and service records are retained for seven years after the end of the engagement to meet our tax and business record-keeping obligations
  • Enquiries and audit call records from prospects who do not proceed are retained for 12 months, then deleted
  • Review request sequence contact lists are deleted or anonymised within 90 days of the sequence concluding, unless you request earlier deletion
  • Website analytics data retained in Google Analytics 4 is subject to Google's data retention settings, which we set to 14 months by default

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

9 Cookies and website analytics

Our website uses Google Analytics 4 to collect information about how visitors use the site. This includes pages visited, time spent on the site, the device and browser used, and the general geographic region of the visitor. This information is aggregated and used to improve the site.

Google Analytics 4 uses cookies. A cookie is a small text file placed on your device by a website. You can disable cookies through your browser settings, though this may affect the functionality of some websites.

Our website does not use advertising cookies or remarketing pixels. We do not run paid advertising on our own website.

For more information about how Google collects and uses data from Google Analytics, see Google's Privacy Policy.

10 Direct marketing

We may send you service-related communications including monthly reports, quarterly call invitations, invoices, and updates about our services. These are not marketing communications and are part of your service agreement with us.

We may also send you information about new services or resources that we believe may be relevant to your organisation, where you have consented to receive such communications or where we have a legitimate interest in doing so under the Spam Act 2003 (Cth).

You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any email we send you
  • Contacting us directly using the details in section 13 of this policy

Opting out of marketing communications will not affect our ability to send you service-related communications necessary for the delivery of your services.

11 Your rights and how to access your information

Under the Australian Privacy Act, you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of personal information that is inaccurate, out of date, incomplete, or misleading
  • Request that we delete personal information we hold about you, subject to our legal retention obligations
  • Make a complaint about how we have handled your personal information

To make an access or correction request, please contact us using the details in section 13. We will respond within 30 days. In most cases, we will provide access free of charge, though we may charge a reasonable fee for complex requests.

We may decline a request for access or correction in certain circumstances permitted by the Privacy Act, including where providing access would be unlawful or unreasonably affect the privacy of another individual. If we decline, we will tell you why in writing.

12 Complaints

If you believe we have handled your personal information in a way that breaches the Australian Privacy Principles, please contact us first using the details in section 13. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5218, Sydney NSW 2001

13 Contact us

For any questions about this policy, to make an access or correction request, or to make a privacy complaint, please contact:

Matthew O'Brien
Privacy Officer, For Purpose Digital
ABN [TO BE CONFIRMED]
Location Mount Egerton, Victoria, Australia

This policy was last updated in May 2026. We may update this policy from time to time. The current version will always be available at forpurposedigital.com.au/privacy-policy.