Privacy Policy

1. Introduction

GRPL Pty Ltd (ABN 78 420 400 824) ("we", "us", or "our") is committed to protecting your privacy and handling your personal information in an open and transparent way.

This Privacy Policy explains how we collect, hold, use, and disclose your personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs").

This Privacy Policy applies to all personal information collected through our website located at grpl.com.au ("Website"), as well as any personal information collected in the course of providing our fractional CMO and marketing consulting services.

2. What Personal Information We Collect

We may collect the following types of personal information:

2.1 Information you provide directly

• Your name, email address, phone number, and business name (when you contact us via our contact form, email, or phone)
• Your name and email address (when you subscribe to our newsletter, download a resource, or register for a lead magnet)
• Any other information you choose to provide in correspondence with us

2.2 Information collected automatically

• Your IP address, browser type and version, operating system, and device information
• Pages visited, time spent on pages, links clicked, and referring website addresses
• Information collected through cookies and similar tracking technologies (see Section 8)

2.3 Sensitive information

We do not collect sensitive information (as defined in the Privacy Act) such as information about your health, racial or ethnic origin, political opinions, religious beliefs, or criminal record. If we ever need to collect sensitive information, we will obtain your explicit consent first.

3. How We Collect Personal Information

We collect personal information:

• Directly from you, when you fill in a form on our Website, subscribe to our newsletter, contact us by email or phone, or engage our services
• Automatically, through cookies and analytics tools when you visit our Website
• From third parties, such as referrals from existing clients or business contacts (with your knowledge)

Where practicable, we will collect personal information directly from you. We will not collect personal information unless it is reasonably necessary for one or more of our functions or activities.

4. Why We Collect, Hold, Use, and Disclose Personal Information

We collect, hold, use, and disclose your personal information for the following purposes:

• To respond to your enquiries and communicate with you about our services
• To provide, manage, and administer our fractional CMO and consulting services
• To send you our newsletter, blog updates, and marketing communications (where you have opted in)
• To improve our Website, services, and user experience
• To comply with our legal obligations
• For any other purpose with your consent or as required or authorised by law

5. Disclosure of Personal Information

We may disclose your personal information to:

• Our professional advisers, including accountants and lawyers, as reasonably required
• Third-party service providers who assist us in operating our Website and delivering our services (e.g. web hosting, email marketing, analytics providers)
• Government agencies or law enforcement bodies, as required or authorised by law
• Any other party with your prior consent

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

6. Overseas Disclosure

Some of our third-party service providers may store or process your personal information outside of Australia. Where this occurs, we take reasonable steps to ensure that the overseas recipient handles your personal information in accordance with the APPs.

The countries where your information may be processed include the United States, due to the location of our service providers' servers (e.g. email marketing platform, website hosting, analytics tools).

By providing us with your personal information, you consent to the disclosure of your information to these overseas recipients.

7. Security of Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include:

• Using secure (SSL/TLS) connections on our Website
• Restricting access to personal information to authorised personnel only
• Using password protection and encryption where appropriate
• Regularly reviewing our information security practices

We will destroy or de-identify personal information when it is no longer needed for the purpose for which it was collected, unless we are required by law to retain it.

8. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to improve your experience and to help us understand how our Website is used.

8.1 What are cookies?

Cookies are small text files placed on your device by our Website. They allow us to recognise your browser and remember certain information about your visit.

8.2 Types of cookies we use

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that some features of our Website may not function properly if cookies are disabled.

9. Direct Marketing

We may use your personal information to send you marketing communications about our services, blog updates, and resources that may be of interest to you. We will only do so where you have opted in to receive such communications (for example, by subscribing to our newsletter).

You can opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us using the details in Section 13.

10. Access and Correction

You have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, incomplete, out-of-date, irrelevant, or misleading.

To make a request, please contact us using the details in Section 13. We will respond to your request within a reasonable period (and in any event within 30 days). We may require you to verify your identity before processing your request.

We will not charge you for making a request or for correcting your personal information. If we refuse access for a lawful reason, we will provide you with a written explanation.

11. Notifiable Data Breaches

In the event of a data breach that is likely to result in serious harm to any individuals whose personal information is involved, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act. This includes notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated version will be indicated by the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of our Website after any changes constitutes your acceptance of the updated Privacy Policy.

13. How to Contact Us or Make a Complaint

If you have any questions about this Privacy Policy, wish to make a request regarding your personal information, or wish to make a complaint about how we have handled your personal information, please contact us:

GRPL Pty Ltd
Privacy Officer: Matt
Email: matt@grpl.com.au
Website: grpl.com.au

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.