Privacy Policy

Last updated: 15 September 2026

1. Introduction

This Privacy Policy explains how [full legal entity name], trading as Impacto (“we”, “us” or “our”), collects, holds, uses and discloses personal information through impactoagency.com.au and in connection with our services.

We handle personal information in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

2. Information We Collect

Depending on your interactions with us, we may collect:

  • Your name, email address and phone number.
  • Your business name, role and website details.
  • Information you provide through contact forms, enquiries, emails and project communications.
  • Information reasonably necessary to prepare proposals and deliver agreed services.
  • Website usage and technical information collected through the tools described in section 5.

We only collect personal information reasonably necessary for our business activities.

Please avoid sending sensitive information, such as health information, unless we specifically request it and explain why it is needed.

3. How We Collect Information

We generally collect personal information directly from you when you contact us, request a proposal or engage our services.

We may also collect information automatically when you visit our website, as explained in section 5.

Where you authorise us to access business accounts or platforms, we may collect information from those sources as necessary to perform the agreed services.

You can make a general enquiry anonymously or using a pseudonym where practicable. However, without certain information, we may be unable to respond fully or provide the services you request.

4. How We Use Your Information

We use personal information to:

  • Respond to enquiries and prepare proposals.
  • Provide and manage our services.
  • Communicate about projects and ongoing work.
  • Administer our business relationship with you.
  • Improve our website, services and marketing.
  • Protect our systems and prevent misuse.
  • Meet legal obligations and resolve disputes.

If we send promotional emails or messages, we will do so in accordance with applicable consent requirements and provide a way to unsubscribe. You can also ask us to stop direct marketing by contacting us.

We do not sell or rent your personal information.

5. Cookies, Analytics and Advertising Technologies

Our website uses [insert confirmed tools and technologies, their purposes, and the information each collects].

[Confirm whether this includes analytics, advertising pixels, remarketing, conversion tracking, session recordings or customer-data matching. Describe any sharing with the relevant providers and link to their privacy information.]

You can manage or delete cookies through your browser settings. Blocking some cookies may affect website functionality.

Browser cookie settings may not prevent every form of data collection. Any additional controls relevant to the tools we use are described here: [insert applicable opt-out or privacy controls].

6. Sharing Your Information

We may disclose personal information where reasonably necessary to deliver our services, operate our business or comply with the law.

Recipients may include:

  • Personnel and contractors involved in delivering your services.
  • Website hosting and IT service providers.
  • [Insert confirmed categories of other providers, such as email, CRM, project management, accounting, analytics or advertising providers.]
  • Professional advisers where necessary.
  • Authorities or other recipients where disclosure is required or authorised by law.

We take reasonable steps to select appropriate providers and protect information shared with them, including through access restrictions and contractual arrangements where appropriate.

Where we handle personal information supplied by a client, we use it for the agreed services and authorised purposes, subject to applicable law.

7. Overseas Handling of Information

[Confirm whether personal information is stored, accessed or disclosed outside Australia, including access by the NZ business, overseas contractors and software providers.]

[If applicable, identify the countries where recipients are likely to be located, where practicable, and explain the purposes of overseas handling. If countries cannot practicably be identified, explain why.]

Where we disclose personal information overseas, we take the steps required by applicable privacy law to protect that information.

8. Storage, Security and Retention

We hold personal information in [describe the actual systems or storage arrangements used].

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Access is limited to people who need the information for authorised purposes.

No method of electronic storage or transmission is completely secure.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to deliver services, maintain required records and meet legal obligations.

When information is no longer needed, we take reasonable steps to destroy or de-identify it, unless retention is required by law.

If a data breach occurs, we will assess it, take appropriate remedial action and notify affected individuals and regulators where required by law.

9. Access and Correction

You can contact us to request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before responding. We will respond within a reasonable period and comply with any applicable legal timeframes.

If we cannot grant your request, we will explain why, where legally permitted, and tell you how you can raise a complaint.

10. Privacy Complaints

If you have concerns about how we have handled your personal information, please contact us using the details below. Include enough information for us to understand and investigate your concern.

We will acknowledge your complaint, investigate it and aim to provide a written response within 30 days. If we need more time, we will explain the reason and provide an update.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC). The OAIC can consider complaints within its jurisdiction.

Website: www.oaic.gov.au

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices or legal obligations.

The current version will be published on this page with an updated date. Where required, we will provide additional notice of material changes.

12. Contact

For privacy enquiries, access or correction requests, or complaints, contact:

Privacy contact: Impacto
Impacto
Legal entity: THE AUCKLAND CREATIVE COMPANY LIMITED
Business address: 1/178 Hinemoa Street, Birkenhead 0626, Auckland
Email: info@impacto.co.nz
Website: https://impactoagency.com.au

LET’S TALK ABOUT
YOUR BUSINESS.

Free consultation