Privacy policy

The form asks for the minimum we need to write you something useful and then ring you about it:

• Your first name, mobile number and email address.
• Your business name, your trade and your suburb.
• Your website address, if you have one.
• What you would like to happen, and optionally a rough monthly advertising budget.
• Anything you type into the notes box.

We do not ask for an ABN, an address, a date of birth or any financial detail, because none of those are needed to look at your website and your Google listing.

Separately from the form, this site records how you arrived. That is the same measurement we sell, and it would be a strange thing to sell and not use. Specifically:

• Campaign tags on the link you followed — source, medium, campaign, search term and ad, where an advertiser set them.
• A platform click identifier, such as Google's gclid, where one was present.
• The address of the page you landed on, and the website that referred you, if any.
• A count of how many browsing sessions this browser has started on this site.

This is kept in your own browser's storage. It reaches us only if and when you submit the form, at which point it is attached to your enquiry so we can tell what that enquiry cost us. The “How you got here” section of the site shows you exactly what has been recorded, as it is recorded.

What it does not include: your name, your location, an IP-based geolocation, a device fingerprint, any profile bought from a data broker, or anything at all about other websites you have visited.

Where they are configured, this site loads Google Analytics 4 and Google Ads conversion tracking. Both are Google products and both set cookies in your browser. Google processes that data as a controller in its own right under its own terms, and may transfer it outside Australia.

Every event this site emits is also pushed into a plain JavaScript array in the page, which is how the measurement works even when a tag is blocked. Nothing in that array is sent anywhere unless a Google tag is present to send it.

If you block either with a browser extension or a privacy setting, nothing on this site breaks, including the form.

To write the audit you asked for, to contact you about it, and to work out what our own advertising costs us per enquiry. We do not use your details for anything else, and we do not add you to a mailing list — there is no mailing list.

Under the Australian Privacy Principles we collect this with your consent, given by submitting the form, for the purpose stated on the form itself.

As few parties as the system can be built with:

• Netlify, which hosts this site and stores your enquiry. Netlify is a United States company and the data is held on its infrastructure.
• Google, if and when analytics or conversion tracking is configured, as described above.
• Our own notification channel — a messaging webhook that tells us an enquiry has arrived, so somebody actually reads it.

We do not sell your details, we do not trade them, and we do not pass them to any other agency, lead broker or directory. If you have ever filled in a “free marketing audit” form elsewhere and then been rung by six different companies, that is what is being described here, and it is not what happens.

Working on your advertising means being granted access to accounts that belong to you: Google Ads, Google Analytics, Google Business Profile, your website host, sometimes your domain registrar. Those accounts contain data about your customers as well as about you.

Our commitments: the accounts are created in your name and you remain the owner; we are added as a manager and nothing more; we do not export your customer data; we do not use anything we see in your account to benefit another client; and our access is removed when the engagement ends, at the latest within five business days of either side giving notice.

An enquiry that does not become work is kept for twelve months and then deleted. We keep it that long because people come back — a business that was not ready in March often is in October, and starting the conversation over is worse for both of us.

Records relating to work actually performed are kept for seven years, because Australian tax law requires it.

You can ask us to delete your enquiry before then and we will, except where we are legally required to keep a record.

Email hello@kerbie.com.au and ask. You do not need a reason and there is no form. We will confirm what we hold, send you a copy, correct anything wrong, or delete it, within thirty days and usually within two business days.

If you are not satisfied with how we have handled it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

The site is served over HTTPS, enquiries are stored in access-controlled storage rather than emailed around, and the export that returns enquirers' contact details is disabled entirely unless a secret is configured — the safe state is the one you get by doing nothing.

What we are not going to claim is that any of this makes a breach impossible. No business can promise that, and the ones that do in their privacy policy are telling you something about the rest of it.

The pages under /demos are samples for invented businesses. Their forms and booking buttons are deliberately not connected to anything — nothing typed into them is transmitted or stored, because there is no business there to receive it.

If this policy changes in a way that affects what we do with details already given to us, we will email anybody affected rather than quietly changing the date at the top.