Privacy policy.

01. About this policy

Breaden Media Pty Ltd (ABN 74 689 547 920), trading as Breaden Media, is a founder-run marketing business based in Newcastle, NSW, servicing businesses across Australia. In this policy, “we”, “us” and “our” mean Breaden Media Pty Ltd.

This policy covers personal information handled through our website, enquiries, communications and delivery of marketing, advertising, content and website services. Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

We take privacy seriously and handle personal information in accordance with applicable Australian law. Where the Privacy Act 1988 (Cth) applies to our activities, we comply with the Australian Privacy Principles.

This policy explains our practices. It does not, by itself, obtain your consent to every collection, use or disclosure of information. Where consent is required, we seek it separately.

02. Information we collect

The information we collect depends on how you interact with us. It may include:

• Contact and enquiry details: your name, business name, role, email address, phone number, address, service interests and meeting preferences.
• Business and service information: information you supply about your business, marketing goals, website, campaigns, account permissions and service requirements, where it identifies an individual.
• Communications: enquiries, emails, messages, meeting notes, feedback and records of our dealings with you.
• Billing information: billing contacts, invoices, payment status and transaction references. Payment providers may collect additional information under their own privacy policies.
• Client customer information: lead details, enquiry records, customer lists and campaign information we access or receive to deliver agreed client services.
• Website and advertising information: IP addresses, browser and device details, cookie identifiers, pages viewed, referring sources and interactions with website features or advertisements.
• Content: photographs, video, testimonials or other material supplied or created for an agreed project, where individuals can be identified.

We do not ask for sensitive information, such as health information, through our general enquiry forms. Please do not include it unless it is necessary for an agreed service and you have discussed this with us. Where we need to collect sensitive information, we will seek consent unless a lawful exception applies.

03. How we collect it

We collect information directly when you complete a website or advertising lead form, contact us, request a marketing review, meet with us, enter into an agreement or provide material for a project.

We may also receive information from clients, authorised representatives, referrals, publicly available business sources and the platforms used to deliver our services. For example, a client may authorise access to an advertising account or supply enquiry records for campaign reporting.

Some technical information is collected automatically through our website and connected platforms. Section 7 explains cookies and tracking.

04. How we use it

We collect, hold and use personal information where reasonably necessary to:

• Respond to enquiries, arrange meetings and prepare recommendations or proposals.
• Deliver and manage agreed services, including campaigns, websites, content, reporting and support.
• Communicate about projects, approvals, performance and account administration.
• Issue invoices, reconcile payments and maintain business records.
• Understand website use, measure advertising performance and improve our services.
• Send permitted marketing communications, as described in section 8.
• Manage security, resolve complaints and meet legal obligations.

If we propose to use information for a different purpose, we will do so only where permitted by law or with any consent required.

05. Client customer information

When delivering client services, we may handle information about a client’s customers, prospective customers or other contacts. This may include leads collected through advertisements, website enquiries, CRM records and customer lists used for agreed marketing activity.

We handle this information for the agreed client service and the client’s authorised instructions, subject to applicable law. We do not use a client’s customer lists to market Breaden Media’s services or another client’s business.

Clients must have the appropriate authority and any required consent to provide information to us or instruct us to use it. Our own privacy obligations continue to apply where relevant.

If your enquiry relates to information you supplied to one of our clients, contacting that business first will usually help resolve it. If you contact us directly, we will assist with requests relating to information we hold and, where appropriate, coordinate with the client.

06. Sharing and overseas providers

We do not sell personal information. Where necessary for the purposes in this policy, we may disclose information to:

• Providers of hosting, email, cloud storage, CRM, project management, reporting, payment processing and other business software, including AI-assisted productivity tools where used for an agreed service.
• Advertising and analytics platforms, including Google and Meta.
• External service providers engaged for an agreed project, where access is necessary.
• Professional advisers, including accountants, insurers and legal advisers.
• Authorities or other parties where disclosure is required or authorised by law.

We limit disclosure to what is reasonably necessary for the relevant purpose and take reasonable steps to select suitable providers and protect information handled on our behalf.

Our main technology providers

The main platforms used in our business include:

• Meta: Facebook and Instagram advertising, lead collection, campaign measurement and advertising audiences.
• Google, including Gmail: email communications, advertising and website measurement through the Google services we use.
• HubSpot: enquiry and contact management, CRM and website activity tracking.
• monday.com: work and project management, including relevant client, contact and project information.
• Elementor Hosting and WordPress: our WordPress website is hosted by Elementor. Elementor Hosting and connected website services support website operation, forms, security and related functionality, and may handle personal information necessary to provide those services.

Overseas handling

These providers operate internationally and may store, process or access personal information outside Australia. Their published arrangements include locations such as the United States, Israel, the United Kingdom, Canada, Singapore, Japan, Brazil, Guatemala, the Philippines and countries in the European Union. The locations relevant to particular information depend on the provider, service, hosting arrangements and support access involved.

An Australian hosting region does not necessarily mean that all processing, support access or service-provider disclosures stay in Australia. Overseas privacy laws may differ from Australian laws. Further information about each provider’s international processing is available in its privacy policy below.

Further information is available in the Google privacy policy, Meta privacy policy, HubSpot privacy policy monday.com privacy policy and Elementor privacy policy.

Where the Privacy Act applies, we take reasonable steps required by that Act in relation to overseas disclosures, unless a lawful exception applies. This policy does not ask you to waive those protections.

07. Cookies and tracking

Our website uses cookies, tags, pixels and similar technologies. These support website operation, usage analysis, advertising measurement and relevant advertising.

• Google tags: support advertising conversion measurement and, where configured, website analytics and advertising audiences.
• Meta Pixel: helps measure interactions following our advertisements and supports advertising audiences and relevant advertisements on Meta platforms.
• HubSpot: supports website activity tracking and, where configured, enquiry and contact management.

These technologies may send information such as your IP address, browser details, identifiers, page URLs and interaction events to the relevant provider. A provider may associate this information with other information it holds, including an account you have with that provider. Tracking data is not necessarily anonymous.

You can manage or delete cookies through your browser and manage advertising preferences through your Google or Meta account. Blocking cookies may affect some website features and does not necessarily prevent every type of tracking. Contact us if you want to request that your information not be used for our direct marketing.

External websites, embedded content and third-party platforms may collect information under their own policies. You can read the Google privacy policy, Meta privacy policy and HubSpot privacy policy.

08. Marketing communications

We may send marketing emails or messages where we have your express consent or valid inferred consent under applicable law. Making an enquiry does not automatically subscribe you to an ongoing marketing list.

You can unsubscribe using the instructions in a marketing message or by contacting contact@breadenmedia.com.au. We process requests to stop marketing emails or messages within five working days, without charging a fee.

We may still send communications needed to respond to your enquiry, deliver agreed services or administer your account. We do not add promotional content to these messages to bypass an unsubscribe request.

09. Storage, security and retention

We hold information in business systems, email, cloud services and project records. We take reasonable technical and organisational steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. No online system or transmission method is completely secure.

We retain information only for as long as reasonably needed for the purpose it was collected, ongoing services, legitimate business needs or legal record-keeping obligations. Retention periods differ between enquiry records, project files, financial records and client customer information.

When information is no longer needed, we take reasonable steps to securely delete or de-identify it, unless retention is required by law. Backup copies may remain until they are overwritten or expire through the relevant provider’s backup processes.

If we become aware of a data breach, we will assess it and take appropriate action. Where legally required, this includes notifying affected individuals and the relevant regulator.

10. Your choices and requests

You can browse our website without providing your name, although technical information may still be collected. Where practical and lawful, you may make a general enquiry anonymously or using a pseudonym. We may need your identity and contact details to prepare a proposal, enter into an agreement or provide services.

You may choose not to provide requested information. This may limit our ability to respond or deliver the service you request.

To request access to, or correction of, personal information we hold about you, email contact@breadenmedia.com.au. We may ask for reasonable identity verification to protect your information. You may also ask us to delete information, although legal or other legitimate retention requirements may prevent immediate deletion.

We aim to respond to access and correction requests within 30 days. If we need longer, we will explain why. If we cannot fulfil a request, we will explain the reason, unless prohibited by law, and tell you how to raise a complaint. We do not charge to lodge an access request or to request a correction.

You can request a copy of this policy in another format by contacting us.

11. Privacy complaints

If you believe we have mishandled your personal information or breached an applicable privacy obligation, please contact Billy Breaden using the details below. Describe what happened, when it occurred and the outcome you are seeking.

We will acknowledge your complaint, investigate the relevant circumstances and aim to provide a written response within 30 days. If additional time is needed, we will explain the delay and give you an updated timeframe.

If you are dissatisfied with our response, or have not received a response within 30 days, you may contact the Office of the Australian Information Commissioner (OAIC). Whether the OAIC can investigate depends on its jurisdiction, including whether the Privacy Act applies to the matter.

12. Policy updates

We may update this policy when our services, systems, information-handling practices or legal requirements change. The current version will be available on this page with its updated date. Where required, we will provide additional notice or seek consent for a change in how we handle your information.