Privacy Policy

Cultivated Commerce ("we", "us", "our") is committed to protecting your personal information and handling it responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or engaging our services, you agree to the collection and use of your information as described in this policy.

We collect personal information in the following circumstances:

— Contact and enquiry information: When you submit our contact form or reach out by email, we collect your name, business name, email address, phone number, and the details of your enquiry.

— Engagement information: When you engage our services, we may collect additional business information, system credentials, financial details, and other information necessary to deliver the agreed services.

— Website usage data: We automatically collect information about how you interact with our website, including pages visited, time on page, browser type, device, and referring URL. This data is collected in aggregate and is not linked to identifiable individuals unless you have provided your details.

— Recruitment information: If you apply for a role with us, we collect the information included in your application, including your CV, contact details, and any other information you provide.

We collect personal information directly from you when you complete a form on our website, contact us by email or phone, or enter into an engagement agreement with us.

We also collect information automatically through cookies and analytics tools when you visit our website. See the Cookies and Analytics section below for more detail.

We use the information we collect for the following purposes:

— To respond to your enquiries and assess whether we can assist you.

— To deliver our services and manage our client relationships.

— To communicate with you about your engagement, including updates, invoices, and project delivery.

— To send you information about our services and insights that we believe may be relevant to you. You can opt out of marketing communications at any time by contacting us or using the unsubscribe link in any email we send.

— To improve our website and understand how visitors engage with our content.

— To comply with our legal and regulatory obligations.

We will not use your information for any purpose unrelated to the above without your explicit consent.

Our website uses cookies — small text files stored on your device — to help us understand how visitors use the site. We use standard web analytics tools, which may include Google Analytics, to collect aggregate usage data.

Google Analytics collects information such as your IP address, browser type, the pages you visit, and the time you spend on each page. This information is processed by Google in accordance with their Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of some parts of our website. We do not use cookies for advertising or cross-site tracking purposes.

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

— Service providers: We share information with trusted third-party service providers who help us operate our business — including cloud hosting, email, and project management tools. These providers are only permitted to use your information to provide services to us, and are bound by confidentiality obligations.

— Overseas recipients: Some of our service providers are located or store data outside Australia. Where this occurs, we take reasonable steps to ensure those providers handle your information in accordance with the Australian Privacy Principles.

— Legal requirements: We may disclose information where required by law, regulation, or court order, or where we believe disclosure is necessary to protect our rights or the safety of others.

In the course of delivering our services, we may access business systems, databases, customer data, and other sensitive information belonging to our clients. This information is:

— Treated as strictly confidential.

— Accessed only as necessary to deliver the agreed scope of work.

— Never used for any purpose other than delivering the services.

— Not retained beyond the completion of the engagement without explicit written consent.

We take this obligation seriously. Misuse of client data is inconsistent with who we are and how we operate.

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include secure communication channels, access controls, and industry-standard security practices.

If we become aware of a data breach that is likely to result in serious harm, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

No method of data transmission or storage is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

We retain personal information for as long as necessary to deliver our services, maintain our business records, and meet our legal obligations.

— Enquiry and contact information is typically retained for up to three years.

— Client engagement information is retained for the duration of the engagement and up to seven years thereafter, in line with our legal and accounting obligations.

When information is no longer required, we take steps to securely delete or de-identify it.

Under the Australian Privacy Act, you have the right to:

— Access the personal information we hold about you.

— Request correction of information that is inaccurate, incomplete, or out of date.

— Request deletion of your information, subject to our legal obligations to retain it.

— Opt out of marketing communications at any time.

To exercise any of these rights, contact us at support@cultivated.agency. We will respond within a reasonable timeframe and at no charge.

If you have a concern about how we have handled your personal information, please contact us first at support@cultivated.agency. We will investigate your concern and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated effective date.

We encourage you to review this policy periodically. Continued use of our website or services following any update constitutes your acceptance of the revised policy.