Privacy Policy
How RooLinks collects, holds, uses and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
RooLinks (“RooLinks”, “we”, “us”, “our”)
Last updated: 30 August 2026
1. Introduction
RooLinks respects your privacy and is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit roolinks.lovable.app (Website), engage us for digital marketing services, or otherwise interact with us.
Although some small businesses are exempt from the Privacy Act, RooLinks handles personal information as part of providing paid advertising and social media marketing services on behalf of clients — including disclosing information to third parties such as Google and Meta for a benefit — and therefore we choose to comply, and in some respects are required to comply, with the APPs regardless of annual turnover.
Business details:
- Legal / trading name: [Insert Business Legal Name] (trading as RooLinks)
- ABN: [Insert ABN]
- Address: [Insert Registered/Business Address], Australia
- Email: [Insert Privacy Contact Email]
- Phone: [Insert Phone Number, if applicable]
By using our Website or engaging our services, you agree to the collection, use and disclosure of your personal information as described in this Policy. If you do not agree, please do not provide us with personal information or use our Website.
2. What Personal Information We Collect
Depending on how you interact with us, we may collect:
- Contact details — name, email address, phone number, business name and job title (e.g. when you submit a contact form, request a “Digital Growth Audit,” or book a strategy call).
- Client and campaign information — business details, marketing goals, website access credentials, advertising account access (e.g. Google Ads, Meta Business Manager), and performance data we manage on your behalf.
- Billing information — invoicing details and, where applicable, payment information (processed via third-party payment providers; we do not store full card details).
- Technical and usage data — IP address, browser type, device information, pages visited, referral source, and interactions with our Website, collected automatically via cookies and similar technologies (e.g. Google Analytics, Meta Pixel, or other analytics/advertising tags we use or deploy on behalf of clients).
- Marketing preferences — details you provide when subscribing to our newsletter or communications.
- Information about third parties — where you provide us with information about other individuals (e.g. colleagues, customers, or leads as part of a marketing campaign), you confirm you have their consent, or another lawful basis, to do so.
We do not intentionally collect sensitive information (such as health, racial or religious information) unless it is volunteered by you or reasonably necessary and permitted under the Privacy Act, in which case we will seek your consent.
3. How We Collect Personal Information
We collect personal information directly from you, via our Website forms, email, phone, or in-person/online meetings; automatically, through cookies, tracking pixels, and analytics tools when you browse our Website; from third parties, such as when a client provides us with customer or lead data to run marketing campaigns, or from publicly available sources (e.g. LinkedIn, business directories) for legitimate business development; and from advertising and analytics platforms (e.g. Google, Meta) in connection with campaigns we manage.
5. How We Use Personal Information
We use personal information to:
- respond to enquiries and provide quotes, audits, and strategy consultations;
- deliver our digital marketing services, including SEO, social media marketing, paid advertising, website design, and analytics/reporting;
- manage and optimise advertising campaigns on platforms such as Google Ads and Meta, on behalf of clients;
- communicate with you, including sending invoices, service updates, and (with consent or as otherwise permitted by law) marketing communications and our newsletter;
- improve our Website, services, and internal business operations;
- comply with our legal, regulatory, and accounting obligations; and
- protect our legal rights and investigate or prevent fraud, misuse, or security incidents.
We will only use personal information for the purpose it was collected, a related secondary purpose you would reasonably expect, or as otherwise permitted or required by law.
6. Disclosure of Personal Information
We may disclose personal information to:
- Service providers and subcontractors who help us operate our business, such as website hosting providers, CRM and email marketing platforms (e.g. Mailchimp, HubSpot, or similar), scheduling tools, and cloud storage/productivity providers.
- Advertising and analytics platforms, including Google (Analytics, Ads) and Meta (Facebook/Instagram Ads, Pixel), to deliver and measure marketing campaigns.
- Professional advisers, such as our accountants, auditors, or lawyers, where necessary.
- Government or regulatory bodies, where required or authorised by law.
- A prospective buyer or their advisers, if we sell or restructure our business, subject to appropriate confidentiality arrangements.
We do not sell personal information to third parties. Where we disclose personal information to service providers, we take reasonable steps to ensure they handle it in accordance with applicable privacy laws.
7. Overseas Disclosure of Personal Information
Some of the third-party platforms and tools we use (for example, Google, Meta, and other cloud-based CRM, hosting, or email marketing services) may store or process personal information on servers located outside Australia, including in the United States or other jurisdictions.
Where personal information is disclosed overseas, we take reasonable steps, as required by APP 8, to ensure the overseas recipient does not breach the APPs in relation to that information — including, where possible, relying on the provider's own compliance with recognised privacy or data protection frameworks (such as the GDPR, EU-US Data Privacy Framework, or equivalent). By providing us with personal information, you consent to this disclosure, where such consent is required.
We are not always able to control how overseas recipients (such as Google or Meta) handle personal information once disclosed, and you should also review their respective privacy policies.
8. Direct Marketing
We may send you direct marketing communications (such as our monthly newsletter with marketing, search and social insights) by email, in accordance with the Privacy Act and the Spam Act 2003 (Cth). We will only do so where you have consented (including inferred consent from an existing business relationship) or another exception applies. Every marketing communication will include a clear way to opt out. You can also unsubscribe at any time by using the “unsubscribe” link in our emails or by contacting us using the details in Section 13.
9. Data Quality and Security
We take reasonable steps to ensure the personal information we hold is accurate, up to date, and complete, and to protect it from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:
- restricting access to personal information to authorised personnel;
- using secure, password-protected systems and reputable third-party service providers;
- using encryption and secure connections (e.g. HTTPS) on our Website; and
- regularly reviewing our data handling and security practices.
No method of online transmission or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
10. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it, unless we are required by law to retain it for longer (for example, tax and business records under the Income Tax Assessment Act and Corporations Act 2001 (Cth)).
11. Access and Correction
You have the right to request access to the personal information we hold about you and to request correction if it is inaccurate, out of date, incomplete, irrelevant, or misleading. To make a request, contact us using the details in Section 13. We may need to verify your identity before processing your request. We will respond within a reasonable period (generally within 30 days). In some circumstances, we may be entitled to refuse access or correction, in which case we will provide reasons in writing. There is generally no charge for making a request, but we may charge a reasonable fee for giving access if permitted under the Privacy Act.
12. Complaints
If you believe we have breached the Privacy Act or mishandled your personal information, please contact us first using the details in Section 13 so we can investigate and try to resolve your concern.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
13. Contact Us
For any questions, requests, or complaints about this Privacy Policy or our handling of your personal information, please contact: [Insert Business Legal Name] (RooLinks) — Email: [Insert Privacy Contact Email] — Phone: [Insert Phone Number] — Address: [Insert Business Address], Australia.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on our Website with a revised “Last updated” date. We encourage you to review this Policy periodically.
This Privacy Policy is provided as a general template based on the Privacy Act 1988 (Cth) and the Australian Privacy Principles as at August 2026, including reforms introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth). It is general information only and does not constitute legal advice. Given ongoing reforms — including the proposed removal of the small business exemption (expected by December 2026), new AI transparency obligations, and the forthcoming Children's Online Privacy Code — we recommend having this policy reviewed by an Australian solicitor before publishing, and revisiting it periodically as the law develops.