Exposure Agency PTY LTD ("Exposure", "we", "us" or "our") is committed to protecting the privacy of personal information collected from clients, website visitors and advertising audiences. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the data requirements of the advertising platforms we use. Our registered office is 41 Hutchinson Street, St Peters NSW 2044, Australia.
This Policy explains how we collect, use, disclose and safeguard personal information when we provide digital advertising, creative and analytics services and when you use our website at www.exposure.com.au (the "Service"). By using the Service, you agree to the handling of information as described here.
1. Information We Collect
Client & business information. Name, business name, contact and billing details, and (where authorised) login credentials or platform access permissions.
Website & usage data. Collected automatically through cookies, pixels, tags and SDKs, including IP address, device and browser information, behavioural data (pages visited, time on page, conversion events), approximate geo-location, and referral/campaign data (e.g. UTM parameters).
Advertising platform data. Through integrations with Meta, Google and TikTok we may process custom-audience data, conversion-tracking events, and aggregated or anonymised performance metrics (impressions, clicks, conversions), under each platform's data and advertising terms.
First-party client data. Where a client uploads audience or customer lists, we may process email addresses, phone numbers, and purchase or attribution data, securely and only under that client's instruction.
2. How We Use Your Information
- To provide, maintain and improve the Service and deliver campaigns;
- To manage your account, requests and our contractual relationship;
- To contact you about your engagement, including service and security updates;
- To measure and improve advertising performance and our offering;
- To send you relevant updates or offers, which you can opt out of at any time;
- To meet legal obligations and protect our legal rights.
3. Legal Bases for Processing
Depending on the information and context, we rely on your consent, the performance of a contract, our legitimate business interests, and compliance with law.
4. Cookies, Pixels & Tracking
We use cookies and similar technologies (including the Meta Pixel and Conversions API, Google Analytics 4 and Google Ads tags, the TikTok Pixel and Events API, and first-party/server-side tracking) to operate the Service, remember preferences, and measure advertising. You can manage cookies through your browser settings, platform opt-out tools and any consent controls we display. Some features may not work if you disable essential cookies.
5. Advertising Platform Compliance
When running campaigns we comply with the relevant platform terms, including the Meta Business Tools Terms and Custom Audiences Terms, the Google Ads and Analytics Data Processing Terms (and consent-mode requirements where applicable), and the TikTok Business Products (Data) Terms. We hash or encrypt customer data on upload where required, use client data only for that client's authorised audiences, never share audiences between clients, and delete data when it is no longer required.
6. How We Disclose Information
We may share personal information with:
- Advertising platforms, as required to deliver campaigns;
- Analytics, CRM and marketing-automation tools;
- Cloud hosting, security and IT providers;
- Contractors and subcontractors who support our Services under confidentiality;
- Acquirers or successors in connection with a business sale or restructure;
- Authorities where required by law.
We do not sell your personal information to unrelated third parties.
7. International Data Transfers
Some of our service providers store data in the United States, Europe or Asia. Where personal information is transferred overseas, we take reasonable steps to ensure safeguards consistent with the Privacy Act 1988 and the APPs are applied.
8. Data Security
We use measures including encrypted storage and transmission, access controls and authentication, restricted internal access, and routine review of our integrations. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Data Retention
We retain personal information only for as long as necessary for the purposes in this Policy, to comply with legal obligations, resolve disputes and enforce our agreements. Usage data is generally retained for shorter periods unless needed for security or functionality.
10. Your Rights
You may request access to, correction of, or deletion of the personal information we hold about you, and may opt out of marketing at any time. Some information may need to be retained where we have a legal obligation or lawful basis. To make a request, contact us using the details below. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Children's Privacy
The Service is not directed at anyone under 18, and we do not knowingly collect information from minors. If you believe a minor has provided us personal information, please contact us and we will take reasonable steps to delete it.
12. Links to Other Sites
The Service may link to sites we do not operate. We are not responsible for their content or privacy practices and recommend you review their policies.
13. Changes to This Policy
We may update this Policy from time to time. We will post the updated version here and change the "Last updated" date, and where appropriate notify you by email or a notice on the Service. Please review it periodically.
14. Contact
For privacy questions, requests or complaints, contact gabe@exposure.com.au, or write to Exposure Agency PTY LTD, 41 Hutchinson Street, St Peters NSW 2044, Australia.