What I collect, why I collect it, and what happens to it. Written so you can actually read it.
Last updated 31 July 2026. This policy covers smartasprint.com.au and any enquiry you send me through it, through a Facebook or Instagram lead form, or by email.
I collect the details you type into a form so I can reply to you and do the work you asked for. I do not sell your data, I do not rent it, and I do not add you to a mailing list you did not ask for. If you want it deleted, email me and it is gone.
Smarta Sprint is the consulting and growth arm of Smarta Switch Australia Pty Ltd, ACN 698 525 601, ABN 95 698 525 601, based in Brisbane, Queensland. In this policy "I", "me" and "we" mean that company. I am bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Questions, corrections or deletion requests go to [email protected]. That inbox is mine, not a support queue.
Only what you give me, plus the basic technical data every website receives.
Your name, business name, email address, phone number, website or suburb, and whatever you write in the message box. This comes from the contact form, the apply form, the free growth audit form, and lead forms you fill in on Facebook or Instagram. Nothing on those forms is collected that you did not enter yourself.
If you give me a website address, an automated check visits that public page and looks at things any visitor can see: page title, description, headings, whether there is a tap-to-call number, whether the site is on HTTPS. It reads the public page only. It does not log in, it does not scan anything private, and it does not keep a copy of your site.
Your IP address, browser type and the pages you viewed, collected by the hosting layer and by the Meta pixel. This is used to see which pages and ads actually work. It is not used to build a personal profile of you.
I do not collect payment card details on this site, and I do not ask for sensitive information as the Privacy Act defines it. Please do not send me health, financial or identity documents through a web form.
To reply to your enquiry, to prepare the audit or proposal you asked for, to deliver work you have engaged me for, and to keep a record of who I have spoken to so I do not ask you the same questions twice. If you become a client, to run the job and invoice it. That is the whole list.
Your enquiry passes through a small number of services, each doing one job:
Hosts the site and holds your enquiry the moment you submit it, so nothing is lost if something further down the chain fails. Servers are global, including outside Australia.
My CRM. Your details sit here so I can track the conversation and follow up properly. Servers are in the United States.
Email and file storage. Your enquiry lands in my inbox here, and any documents I prepare for you are stored here.
If you filled in a lead form on Facebook or Instagram, Meta holds that submission and passes it to me. The Meta pixel on this site also reports which pages were viewed after an ad. What Meta does with it is governed by their privacy policy, not this one.
Because these providers operate overseas, your information may be stored or processed outside Australia. I use reputable providers and take reasonable steps, but I do not control their infrastructure. I do not sell, rent or trade your information to anyone, ever. The only other people who see it are Chloe Hartley, my co-director, and any contractor working on your job, who are held to the same obligations.
Enquiries that go nowhere are cleared out roughly every two years. Client records are kept for seven years because Australian tax law requires it. You can ask me to delete your details sooner and I will, unless the law says I have to keep a particular record.
Email me and you can:
I will action it within 30 days and usually much sooner. If you think I have mishandled your information, tell me first and give me a fair chance to fix it. If you are still not happy, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
This site uses the Meta pixel to measure whether advertising is working. You can turn off ad personalisation in your Facebook and Instagram settings, block cookies in your browser, or use private browsing. The site works fine either way.
The site runs over HTTPS, access to the CRM and inbox is protected by strong passwords and two-factor authentication, and API credentials are stored as encrypted secrets rather than sitting in code. No system is perfect and I will not pretend otherwise, but if a breach ever affected your information I would tell you and notify the Commissioner as the law requires.
If this policy changes, the date at the top changes with it. Material changes will be obvious on this page rather than buried.