1. Who we are and the scope of this policy

This Privacy Policy explains how EMC2 ONLINE PTY LIMITED trading as EMC2 Online (ABN 37 642 080 457, ACN 642 080 457), of 12 Hunts Road, Kulnura NSW 2250 (EMC2, we, us), collects, holds, uses and discloses personal information.

It applies to our websites, enquiry and booking forms, online checkout, client onboarding, advertising and marketing services, website and hosting services, automation and system-development work, support, billing and other dealings with us. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply, and otherwise use those principles as our privacy standard.

2. The information we collect

Depending on how you deal with us, we may collect your name, job title, business name, postal and service addresses, email address, phone number, enquiry details, service requirements, advertising budget, website and account information, meeting preferences, approvals, support history and communications with us.

For orders and accounts, we may also collect product and service selections, transaction and invoice details, payment status and payment-provider references. We do not need to store your complete card number when payment is processed by a payment provider. We may collect technical information such as IP address, device and browser information, page activity, referring source, cookie or advertising identifiers, form and checkout events, consent records and security logs.

When we provide services for a client, we may handle information in the client systems we are authorised to access. The client remains responsible for ensuring it is permitted to provide that information and instruct us to handle it.

3. How we collect information

We collect information directly when you browse our website, complete a form, request a quote, book a meeting, create an account, buy a service, contact us, approve work or provide access for service delivery. We may also receive information from an authorised representative, referral partner, publicly available business source, advertising or analytics platform, payment provider, accounting platform, CRM, scheduling provider, hosting provider or another service you ask us to connect.

If you do not provide information that is reasonably required, we may be unable to respond, provide an accurate recommendation, process an order or deliver the requested service.

4. Why we use information

We use personal information to respond to enquiries; recommend, quote and sell services; schedule meetings; create and manage client records; verify acceptance; process payments; onboard clients; request access and approvals; deliver, support and improve services; administer recurring services and spend-tier changes; issue invoices and notices; prevent fraud and security incidents; keep business and accounting records; comply with law; and manage disputes.

We may use aggregated or de-identified information to understand service demand and improve our website, processes and reporting where it is no longer reasonably capable of identifying an individual.

5. Client onboarding and account access

When you become a client, we give you a private onboarding link that shows only the steps your services need. We collect the information needed to connect and deliver those services, such as Google Ads customer IDs, Google Tag Manager container IDs, Google Analytics property IDs, Meta ad account and Page details, Microsoft Advertising and ChatGPT Ads account details, your website platform and address, your service areas, lead contact details and your daily advertising budget.

We ask you to grant access by approving a manager or partner request, or by adding our access address (access@emc2online.com.au) as a user in your own account. We never ask for your passwords, and our onboarding forms reject passwords, secret keys and card numbers. We record the status of each access step, who verified it and when, so that we can confirm access, support you and remove access when our services end.

Our onboarding pages are protected against automated abuse using Google reCAPTCHA and similar security controls.

6. Google user data and connected platforms

EMC2 ONLINE operates an internal application, “EMC2 ONLINE”, that connects to Google APIs, including the Google Ads API, the Google Tag Manager API and the Google Analytics Admin and Data APIs. We use it only for the services you engage us to provide, specifically to:

• send and confirm Google Ads manager-account link requests, and create Google Ads accounts when you ask us to;
• confirm that we have access to your Google Tag Manager containers and Google Analytics properties, and create containers or properties for you when you ask us to;
• set up, manage, measure and report on your advertising, tracking and analytics.

The Google user data we access through these APIs may include account, container and property identifiers and names, account settings, user-access and link status, campaign configuration and performance data, and analytics configuration. We access only the accounts you have connected or authorised.

EMC2 ONLINE’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not sell Google user data; we do not use or transfer it for serving advertising unrelated to your services, for credit-worthiness or lending purposes, or to train generalised artificial-intelligence or machine-learning models; and our people only view it where needed to deliver or support your services, for security, or to comply with law.

Access tokens are stored in our secured automation platform with restricted access and encryption in transit. You can remove our access at any time by removing access@emc2online.com.au or our manager or partner link from your account, or by revoking the EMC2 ONLINE app at myaccount.google.com/permissions. To ask us to delete Google user data we hold, email info@emc2online.com.au. We will action it within 30 days, except where we must keep records to meet legal, tax or accounting obligations.

We connect to other platforms you engage us for, such as Meta, Microsoft Advertising, HighLevel and your website platform, in the same limited way and only for your services.

7. Purchase and service communications

When you make an enquiry or purchase a service, we may use the email address and mobile number you provide for factual communications reasonably necessary to respond, administer the purchase and deliver or support the service. These may include order and payment confirmations, onboarding and access requests, meeting details, project or campaign updates, approvals, support responses, renewal, suspension or cancellation notices, security alerts and legally required notices.

These operational communications are part of the requested transaction or service. We keep them separate from promotional marketing. Please keep your contact details current so important service information reaches the right person.

8. Marketing choices

We may send marketing emails or SMS messages where you have consented or where another permission is available under applicable law. Marketing may include useful insights, service ideas and occasional offers. A marketing choice at checkout is recorded separately from acceptance of the Terms and from operational service communications.

You can unsubscribe using the link in an email, reply STOP to an SMS, or contact us. We will action an unsubscribe as required by law, although we may still send non-promotional communications needed for an existing enquiry, order or service.

9. Cookies and similar technologies

Our website uses cookies, pixels, tags, local storage and similar technologies. Some are set by us and others by service providers. A cookie may last for the browsing session or remain for a defined period. These technologies can recognise a browser or device, remember a preference, protect a form or checkout, measure use and help us understand advertising performance.

Google reCAPTCHA may also process device and interaction information to protect forms from abuse. Analytics, advertising, embedded content and scheduling providers may set their own cookies or receive technical identifiers under their policies.

You can block or delete cookies using your browser settings and use any consent controls made available on our website. Blocking strictly necessary cookies may prevent forms, carts, checkout or account functions from working. Browser controls do not necessarily prevent all server-side or cookieless measurement.

10. Who we disclose information to

We may disclose personal information to personnel and managed contractors who need it for their role; website, hosting, email, CRM, scheduling, automation, analytics and advertising providers; payment and accounting providers; professional advisers; a prospective purchaser of the business under appropriate confidentiality; and regulators, courts or law-enforcement bodies where required or authorised by law.

Providers currently relevant to our operations may include Google, Meta, Microsoft, OpenAI, HighLevel, WordPress and WooCommerce providers, Shopify, Xero, payment providers, Canva and hosting, email or automation vendors. The providers used for a particular client depend on the selected services and integrations. We do not sell a list of client contact details.

11. Overseas handling

Some service providers, infrastructure and managed personnel may be located outside Australia or may store or process information in other countries. Likely locations include the United States, the Philippines, India and other countries in which a selected technology provider operates.

Where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances before disclosing personal information overseas. Overseas privacy laws and remedies may differ from those in Australia. Contact us if you need more information about the likely location relevant to a particular service.

12. Security and retention

We use reasonable technical and organisational safeguards appropriate to the information and service, which may include access controls, managed user permissions, encryption in transit, backups, logging, updates and limiting access to people who need it. No internet-connected service can be guaranteed completely secure.

We keep personal information only for as long as reasonably required for the purposes described in this policy, to provide ongoing services, maintain transaction and acceptance evidence, resolve disputes and meet legal, tax, accounting or insurance obligations. Retention periods vary by record and system. When information is no longer required, we take reasonable steps to delete it or de-identify it, subject to backup cycles and lawful retention requirements.

If you believe information has been exposed or an account is at risk, contact us promptly at info@emc2online.com.au.

13. Access and correction

You may ask for access to personal information we hold about you or ask us to correct inaccurate, out-of-date, incomplete, irrelevant or misleading information. Contact us using the details below and provide enough information for us to identify the relevant records. We may need to verify your identity or authority before responding.

We will respond within a reasonable period. If an applicable law permits us to refuse or limit a request, we will explain the reason where required and tell you about available complaint options.

14. Privacy complaints

If you have a privacy concern, contact our Privacy Officer using the details below and describe what happened, the information involved and the outcome you are seeking. We will acknowledge and investigate the complaint and aim to provide a response within a reasonable period.

If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

15. Changes and contact

We may update this policy when our services, technology or legal obligations change. The current version and effective date appear at the top of this page. Material changes will apply prospectively unless law requires otherwise.

Privacy Officer, EMC2 Online
12 Hunts Road, Kulnura NSW 2250
Email: info@emc2online.com.au
Phone: 02 8078 6684