Privacy Policy

ThinkBox Marketing (ABN 62 779 318 454) (“ThinkBox”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why we collect it, how we use and protect it, who we share it with, and the rights available to you.

Information we collect

Information you give us. When you submit an enquiry form, book a call, or otherwise contact us, we collect details such as your name, email address, phone number, business name, and anything you include in your message.

Information collected automatically. When you use our website, we collect technical and usage information, including your IP address, device and browser type, the pages you view, the site or ad you arrived from (including referral URLs, campaign tags, and advertising click identifiers), and cookie identifiers. We use this information to understand how our marketing performs.

Information from our clients. When we deliver marketing services, our clients authorise us to access their own business accounts and platforms, such as their Google Ads, Google Analytics, and Meta advertising accounts. Through this access we may handle data belonging to our clients and their customers in order to manage and optimise campaigns on their behalf.

How we use your information

We use personal information to:

• respond to your enquiry and deliver our services;
• schedule and manage discovery calls and appointments;
• issue invoices and manage payments;
• measure, improve, and deliver our marketing and advertising services;
• operate, secure, and improve our website;
• send you marketing communications where permitted (see below); and
• meet our legal obligations.

Cookies and tracking

We use cookies and similar technologies (including Google Analytics, Google Ads tags, and the Meta Pixel) for analytics and advertising. When you first visit, we show a cookie notice; you can accept or decline, and you can also control cookies through your browser settings. Declining stops analytics and advertising tracking and does not affect your ability to use the site or contact us.

Google user data and the Google Ads API

As part of delivering advertising services, we access and use data obtained through Google APIs, including the Google Ads API, for clients who have authorised us.

• What we access. Google Ads account and campaign data belonging to authorising clients, such as campaign settings, performance metrics, and reporting data.
• How we use it. Solely to report on, manage, and optimise advertising campaigns for the client who granted access.
• How we store and protect it. We access this data through secure, authorised connections, limit access to team members who need it to deliver the service, and protect it using the security measures described below.
• Who we share it with. We do not share this data except with the service providers listed below that help us operate, and only as needed to deliver the service.
• What we never do. We do not sell this data, and we do not use it for our own advertising or for any purpose other than providing services to the client.

ThinkBox’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access to your Google account at any time through your Google account’s security settings, and you may contact us to request deletion of any data we hold on your behalf.

Who we share it with

We share personal information with trusted service providers who help us operate, including:

• Google (Analytics and Ads) — website analytics and advertising;
• Meta (Facebook and Instagram) — advertising and conversion measurement;
• GoHighLevel / LeadConnector — our customer relationship management (CRM), email, and SMS platform;
• Supabase and Vercel — database and website hosting.

We may also disclose information to professional advisers, such as our accountant, and to others where required or authorised by law. Everyone we share information with is required to protect it. We do not sell your personal information.

Overseas disclosure

Several of our service providers store or process information outside Australia, primarily in the United States, where Google, Meta, GoHighLevel, Supabase, and Vercel operate their infrastructure. Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

Marketing communications

With your consent, or where otherwise permitted by law, we may send you marketing communications by email or SMS. You can opt out at any time by using the unsubscribe link in any marketing email, replying STOP to any marketing SMS, or contacting us using the details below. We action opt-out requests promptly.

Automated decisions and artificial intelligence

We use artificial intelligence and automated tools to help deliver and improve our services, for example to analyse campaign performance, generate and test creative, and identify optimisation opportunities. These tools support decisions made by our team; we do not use them to make decisions that produce legal or similarly significant effects about individuals without human involvement. If our use of automated decision-making changes, we will update this policy in line with our obligations under the Privacy Act.

Keeping your information secure

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, including limiting access on a need-to-know basis and using reputable, secure providers. No system is completely secure, but we work to keep your information safe.

How long we keep it

We keep personal information for as long as needed for the purposes described above, or as required by law, and then take reasonable steps to delete or de-identify it.

Accessing, correcting, and deleting your information

You may ask us to access the personal information we hold about you, correct it if it is inaccurate, or delete it. You may also withdraw your consent or ask us to stop contacting you at any time. Where we access data on behalf of a client through a third-party platform, you can also revoke that access directly through the platform’s settings. To make a request, contact us using the details below, and we will respond within a reasonable time.

Complaints

If you have a privacy complaint, please contact us using the details below. We will acknowledge and respond to your complaint within 14 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact us

For any question, request, or privacy complaint, please contact us:

ThinkBox Marketing (ABN 62 779 318 454)
info@thinkboxmarketing.co
1300 112 745

Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the “last updated” date shown above.