Effective date: November 3, 2026

1. About this policy
Launch and Learn ("we", "us", "our") is operated by [Your legal name / business name], ABN [ABN], based in NSW, Australia. We help new small businesses launch by setting up their website, SEO, Google listing, social media and content plan, and by teaching them to run these themselves.
This policy explains what personal information we collect, how we use and protect it, who we share it with, and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), whether or not we are legally required to.

Contact for privacy matters: [Name], [email address]

2. Who this policy covers
This policy applies to:

• visitors to our website [website URL]

• people who enquire about, or purchase, our packages (including Launch and Learn and Get Up and Grow)

• clients who complete our questionnaires and give us access to their accounts and materials

• people who subscribe to our emails or attend our workshops or tutorials

• anyone who otherwise contacts us
   

3. Information we collect
Information you give us

• Contact details: name, email, phone, business name, ABN, postal and business address

• Information in our client questionnaires and onboarding: your business goals, target audience, competitors, brand preferences, services, pricing, and history

• Content and materials you supply: logos, photos, copy, testimonials, product information

• Billing details: invoice details and payment records (card details are handled by our payment provider, not stored by us)

• Correspondence: emails, messages, call notes and feedback

Access to your accounts and systems
To deliver our services we may need access to your domain registrar, website host, Google Business Profile, Google Analytics, Search Console, social media accounts or similar tools. We only access what is needed for the work, and we ask you to grant access using the platform's own delegated or admin-invite features wherever possible rather than sharing passwords. See section 8.
Information collected automatically

• Device and browser type, IP address, pages viewed, referring site, and time on site

• Cookies and similar technologies (see section 9)

Information about other people
Your materials may include personal information about your staff or customers (for example testimonials, customer lists or photos). Please only give us what we need, and make sure you have the right to share it.
We do not knowingly collect sensitive information (such as health or political information) and ask that you do not send it to us unless it is essential to the work.

4. Why we collect and use information
We use personal information to:

• respond to enquiries and prepare proposals

• deliver, manage and improve our services, including building and setting up your website, identity, SEO and content plan

• train you and your team to run your marketing yourselves

• invoice you, process payments and keep financial records

• communicate with you about projects, updates and support

• send marketing emails or newsletters, where you have opted in or we are otherwise permitted to

• understand how our own website is used and improve it

• meet legal, tax and accounting obligations, and protect our rights

We only use information for the purpose it was collected, for a related purpose you would reasonably expect, or as otherwise permitted or required by law.

5. Sharing and disclosure
We do not sell your personal information. We may share it with:

• Service providers who help us operate, such as website hosting, domain and DNS providers, email and newsletter platforms, scheduling and video-call tools, project management and cloud storage, accounting and payment providers, and analytics tools

• Platforms we set up for you, such as Google, Meta and website builders, where creating or managing your accounts requires it

• Professional advisers, such as accountants, lawyers and insurers

• Authorities, where required by law or to protect rights or safety

• A buyer or successor, if our business is sold or restructured, subject to this policy

We require our providers to handle information appropriately and only for the services they perform for us.

6. Overseas disclosure
Many tools we use store data on servers outside Australia, including in the United States and elsewhere. This means your information may be handled overseas by providers such as [list main providers, e.g. Google, Microsoft, Mailchimp, Zoom, Canva, Stripe]. Where we disclose information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs.

7. Direct marketing
We will only send you marketing emails or messages if you have consented, or as otherwise permitted by the Spam Act 2001 (Cth). Every marketing message includes an unsubscribe option, and you can also ask us directly to stop at any time. Unsubscribing from marketing will not affect service-related messages about work you have engaged us for.

8. Client accounts, credentials and project files
Because our model is to set everything up and hand it over to you:

• You remain the owner of your accounts, domains, content and data. We act as your delegate while the work is underway.

• We ask for the minimum access required and prefer invitation-based access that can be revoked.

• If a password must be shared, we ask that you use a password manager or secure sharing method, and we will not store it longer than needed.

• At handover we will remove our access, and we will confirm this with you. You should also review and remove our access from your side.

• We keep working files for a limited period after handover (see section 11) in case of follow-up questions, then securely delete them.
   

9. Cookies, analytics and tracking
Our website uses cookies and similar tools to make the site work, remember preferences and understand how visitors use it. We use [Google Analytics / other] to collect anonymised or aggregated usage data. [If applicable: We also use advertising or social media pixels, such as the Meta Pixel, to measure and improve our advertising.]
You can control cookies through your browser settings, and you can opt out of Google Analytics using Google's browser add-on. Blocking cookies may affect how parts of our site work.

10. Security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include using reputable providers, strong and unique passwords, multi-factor authentication where available, access limited to what is needed, and encrypted connections.
No method of transmission or storage is completely secure. If we experience a data breach likely to result in serious harm, we will assess it promptly and, where required under the Notifiable Data Breaches scheme, notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

11. How long we keep information
We keep personal information only as long as needed for the purposes in this policy or as required by law. As a guide:

• Client and financial records: 7 years, to meet tax and record-keeping obligations

• Project working files and account access details: [e.g. 3 months] after handover, then securely deleted

• Enquiries that do not proceed: [e.g. 12 months]

• Marketing subscriber details: until you unsubscribe

When information is no longer needed, we securely delete or de-identify it.

12. Accessing and correcting your information
You can ask us to access or correct the personal information we hold about you. Contact us using the details in section 1. We will respond within a reasonable time (generally within 30 days). We may need to verify your identity first, and in limited cases the law allows us to refuse access, in which case we will explain why.
You can also ask us to delete your information. We will do so unless we are required to keep it.

13. Anonymity
Where practical, you can deal with us anonymously or using a pseudonym, for example when browsing our site or making a general enquiry. We cannot do this when providing paid services that require identity, billing or account access.

14. Links to other sites
Our website and materials may link to third-party sites and platforms. We are not responsible for their privacy practices, and encourage you to read their policies.

15. Children
Our services are for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe we have, please contact us and we will delete it.

16. Complaints
If you have a privacy concern, please contact us first at the details in section 1. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992.

17. Changes to this policy
We may update this policy from time to time. The current version will always be on our website with the effective date shown at the top. For significant changes, we will let you know directly where practical.