Privacy Policy

GrowthEdge is an Australian digital marketing agency specialising in Google Ads and YouTube Ads management for e-commerce brands. We respect your privacy and are committed to handling your personal information in an open and transparent way.

This Privacy Policy explains how we collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs"). It also explains how you can access and correct your personal information, and how to make a privacy complaint.

By using our website at thegrowthedge.io (the "Site"), submitting an application to work with us, booking a call, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy.

About this policy: This policy applies to personal information we collect through the Site, our application and booking forms, our communications with you, and in the course of delivering our advertising services. It does not apply to the websites, platforms or services of third parties (such as Google, Meta, Typeform or Calendly), which are governed by their own privacy policies.

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. The kinds of personal information we typically collect and hold include your name, email address, phone number, business and company details, website and marketing information you provide, and any other information you choose to share with us.

We do not intentionally collect sensitive information (such as health information, racial or ethnic origin, political opinions, religious beliefs, sexual orientation or criminal records) through the Site. Please do not submit sensitive information through our forms. If sensitive information is provided to us unsolicited, we will handle it in accordance with the Privacy Act, including destroying or de-identifying it where it is not reasonably necessary for our functions or activities.

Directly from you. Most personal information is collected directly from you when you complete our online application form (hosted by Typeform), book a strategy call (via Calendly), contact us by email or through social media, speak with us on a call, or enter into an agreement for our services.

Automatically through our Site. When you visit the Site, we and our third-party service providers automatically collect certain technical and usage information using cookies, tracking pixels (including the Meta Pixel), attribution tracking scripts, and similar technologies. This may include your IP address, the pages you view, and the actions you take on the Site. See section 7 (Cookies and tracking technologies) for details.

From third parties. We may receive personal information from third parties such as advertising platforms (for example, Google and Meta), analytics providers, scheduling and form providers, and publicly available sources such as your business website or social media profiles. We may also receive referrals from other businesses or individuals.

Where it is lawful and practicable, you may deal with us anonymously or by using a pseudonym (for example, when making a general enquiry). However, if you do not provide the personal information we request, we may not be able to process your application, book a call, or provide our services to you.

We collect, hold, use and disclose personal information to process and assess applications to work with us, to schedule and conduct strategy calls, to provide and improve our advertising services, to communicate with you about our services, to send direct marketing (where permitted), to measure and improve the performance of our Site and marketing, to comply with our legal obligations, and to manage and administer our business.

We will only use or disclose your personal information for the purpose for which it was collected, or for a related secondary purpose that you would reasonably expect, or where you have consented, or where otherwise permitted or required by law.

We hold personal information in electronic form, including through secure third-party platforms and cloud-based services used for forms, scheduling, customer relationship management, email, file storage and project management.

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include technical measures (such as encryption in transit, access controls, password protection and multi-factor authentication) and organisational measures (such as limiting access to personal information to team members and contractors who need it for their role, confidentiality obligations, and internal policies and training).

While we take reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

When we no longer need your personal information for any purpose for which it may be used or disclosed under the Privacy Act, we will take reasonable steps to destroy or de-identify it, unless we are required by law to retain it.

Our team members and contractors, including those located overseas (see section 9), who need the information to perform their roles.

Service providers that support our business operations, including Typeform (application forms), Calendly (scheduling), our customer relationship management and email platforms, cloud hosting and storage providers, and IT and security service providers (such as Sentry for error monitoring).

Advertising and analytics partners, including Google and Meta, in connection with our marketing activities and the operation of tracking technologies on our Site.

Professional advisers, such as lawyers, accountants and insurers, where reasonably necessary.

Government bodies, regulators and law enforcement, where required or authorised by law.

A prospective purchaser of our business, in the event of a merger, acquisition or sale of assets, subject to appropriate confidentiality protections.

We do not sell your personal information to third parties.

The Meta Pixel (provided by Meta Platforms, Inc.), which collects information about your activity on our Site (such as pages visited and actions taken) and may link that information to your Meta profile. We use it to measure the effectiveness of our advertising and to deliver targeted advertising to you on Meta platforms.

Attribution and analytics scripts (including our first-party tracking script served from growthedgescaling.com), which help us understand how visitors find and use our Site and which marketing activities drive enquiries.

Embedded content from third parties such as Wistia, Vimeo, Loom and Typeform, which may set their own cookies and collect information about your interaction with that content.

Error monitoring tools (Sentry), which collect technical diagnostic information when errors occur on the Site.

Information collected through these technologies can constitute personal information where it can be linked to an identifiable individual. We configure these tools to limit collection to what is reasonably necessary, and we do not use them to collect sensitive information.

You can control cookies through your browser settings, including blocking or deleting cookies. You can also opt out of targeted advertising through Meta's ad preferences and the Digital Advertising Alliance's opt-out tools. Please note that blocking cookies may affect the functionality of the Site.

We may use your personal information (such as your name, email address and phone number) to send you marketing communications about our services, where you would reasonably expect us to do so or where you have consented. This may include emails, SMS messages and targeted online advertising.

You can opt out of receiving direct marketing from us at any time, free of charge, by using the unsubscribe facility in the communication or by contacting us using the details in section 13. We will action opt-out requests promptly.

We comply with the Spam Act 2003 (Cth) in relation to commercial electronic messages and the Do Not Call Register Act 2006 (Cth) in relation to telemarketing.

We operate with a distributed team and use service providers located outside Australia. As a result, your personal information is likely to be disclosed to, or accessed from, overseas recipients. The countries in which these recipients are likely to be located include the United States, the United Kingdom, the European Union, the Philippines, India and other countries where our service providers operate.

Before disclosing personal information to an overseas recipient, we take reasonable steps in the circumstances to ensure the recipient handles the information in a manner consistent with the APPs, for example by using reputable providers with contractual privacy and security commitments. However, by providing your personal information to us, you acknowledge that where we disclose information overseas, the overseas recipient may not be subject to privacy laws equivalent to the Privacy Act, and we may not be able to ensure that the recipient complies with the APPs. Where an exception under APP 8 applies (including where you have consented to the disclosure after being expressly informed), we may not be accountable for the overseas recipient's handling of your information.

From 10 December 2026, the Privacy Act requires additional transparency about certain automated decision-making. We do not currently use computer programs to make decisions that would reasonably be expected to significantly affect your rights or interests without human involvement. If we introduce such processes (for example, automated tools that use personal information to assess applications or eligibility for our services), we will update this Privacy Policy to describe the kinds of personal information used in, and the kinds of decisions made by, those processes, before they take effect.

We have procedures in place to identify, assess and respond to suspected data breaches. If we experience a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

You have the right to request access to the personal information we hold about you, and to request that we correct it if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make an access or correction request, please contact us using the details in section 13. We will respond to your request within a reasonable period (usually within 30 days). We do not charge for making a request, and any charge for providing access will be reasonable and will be advised to you in advance.

In some circumstances, the Privacy Act permits or requires us to refuse access (for example, where providing access would have an unreasonable impact on the privacy of others, or where the request is frivolous or vexatious). If we refuse your request, we will give you written reasons and explain how you can complain about the refusal.

If you have a question about this Privacy Policy, wish to access or correct your personal information, or want to make a complaint about how we have handled your personal information, please contact our Privacy Officer:

Privacy Officer — GrowthEdge

Email: privacy@thegrowthedge.io

Website: https://thegrowthedge.io

We take privacy complaints seriously. We will acknowledge your complaint promptly and aim to investigate and resolve it within 30 days. Our process is:

Contact us first. Lodge your complaint in writing using the contact details above, and give us a reasonable opportunity to respond.

Our response. We will investigate the matter and provide you with a written response setting out our findings and any steps we will take.

Escalation. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner

Website: www.oaic.gov.au | Phone: 1300 363 992 | Post: GPO Box 5288, Sydney NSW 2001

We review this Privacy Policy regularly and may update it from time to time to reflect changes in our practices, technologies or legal obligations. The current version will always be available on our Site, free of charge, and the "last updated" date at the top of this page shows when it was most recently revised. Where changes are significant, we will take reasonable steps to bring them to your attention.

If you would like a copy of this Privacy Policy in a particular form (for example, by email or in print), please contact us and we will take reasonable steps to provide it in that form, free of charge.

This Privacy Policy was prepared with reference to the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Privacy and Other Legislation Amendment Act 2024 (Cth), and guidance published by the Office of the Australian Information Commissioner.