Privacy Policy

1. Introduction

Windpixel Digital ("Windpixel", "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, client portal, and digital marketing services, including SEO, web design, PPC advertising, and related services (collectively, "Services").

This policy also describes how we handle data obtained from Google when you or your business authorises us to access Google services on your behalf (for example Google Ads, Google Analytics, Google Business Profile, or Google Search Console). That section is required for transparency and for our use of Google APIs.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which govern how we handle your personal information. By using our Services, you consent to the collection and use of your information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Contact form submissions (name, email address, phone number, message)
• Account registration information (name, email address, company name, job title, phone number)
• Communication preferences
• Payment and billing information
• Content you upload or provide for our Services
• Support requests and customer service interactions

2.2 Automatically Collected Information

When you use our Services, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent on pages)
• Cookies and similar tracking technologies
• Log files and error reports

2.3 Third-Party Information

We may receive information about you from third parties, such as:

• Analytics and marketing platforms (including Google, when you connect an account)
• Business partners and service providers
• Publicly available information

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process your enquiries and respond to your requests
• Process payments and billing
• Send you service-related communications and updates
• Respond to your enquiries and provide customer support
• Send you marketing communications (with your consent, where required)
• Monitor and analyse usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service
• Protect the rights, property, and safety of Windpixel, our users, and others

4. Disclosure of Your Information

We may disclose your personal information in the following circumstances:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Hosting and cloud infrastructure providers
• Payment processors
• Email service providers
• Analytics and monitoring services
• Customer support platforms

These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government regulations).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.4 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information or Google user data to third parties for their marketing purposes. We disclose information only as described in this Privacy Policy (for example to service providers who help us deliver our Services, or when required by law).

4.5 With Your Consent

We may share your information with third parties when you have provided explicit consent for such disclosure.

5. Google API Services and Google User Data

When you engage us to manage or report on Google products, you may authorise Windpixel Digital to access Google services through your Google account or linked business accounts. This section explains how we handle that data.

5.1 What Google data we may access

Depending on the Services you use and the permissions you grant, we may access information from Google APIs and linked Google products, including but not limited to:

• Google Ads (campaign, ad group, keyword, conversion, and billing-related data made available through the API)
• Google Analytics / Google Analytics 4 (property, audience, traffic, and conversion reporting data)
• Google Business Profile (business listing, location, reviews, insights, and profile management data)
• Google Search Console (search performance, indexing, and site verification data)
• Tag Manager or related Google marketing tools, where you connect them for implementation or reporting

We only request access to the Google data needed to deliver the Services agreed with you. We do not use Google user data for purposes unrelated to those Services.

5.2 How we use Google data

We use Google user data to provide, operate, and improve the Services you have engaged us for, such as:

• Setting up, managing, and optimising advertising and marketing campaigns
• Local SEO, Google Business Profile optimisation, and reputation-related work
• Reporting on performance, rankings, traffic, conversions, and campaign outcomes
• Technical setup (tracking, tags, conversions) and troubleshooting with your approval
• Internal operations directly supporting your account (for example secure storage in our client portal or agency tools)

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5.3 How we store and protect Google data

Google data we access is stored only as long as needed to provide our Services and meet our legal and business obligations. It may be held in:

• Our secure client portal and internal agency systems (access restricted to authorised staff)
• Reporting and workflow tools we use to deliver your Services
• Encrypted or access-controlled environments provided by our hosting and infrastructure partners

We apply the security measures described in section 6 of this policy. Google data is not stored longer than necessary for the purposes above unless you agree otherwise or we are required to retain it by law.

5.4 Sharing of Google data

We do not sell Google user data. We may share Google-derived information only with subprocessors that help us deliver our Services (for example secure hosting or reporting platforms), under confidentiality and data-protection obligations, or when you direct us to share reports with your team, or when required by law.

5.5 How you can revoke our access to Google data

You can withdraw our access to your Google data at any time:

• In your Google Account: go to Security → Third-party access (or Connections to third-party apps & services) and remove Windpixel Digital or the relevant connected application
• In Google Ads or Google Business Profile: remove our agency or user access from your account settings, or ask your Google account administrator to do so
• Email us at hello@windpixel.com.au to request disconnection; we will remove stored access tokens and stop API use for your account within a reasonable period, subject to any legal retention requirements

Revoking access may limit or end our ability to provide Services that depend on those Google products. We will confirm what still applies after disconnection.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Secure data centres and cloud infrastructure
• Employee training on data security and privacy

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymise it.

Account information is typically retained for the duration of your account plus a reasonable period thereafter for legal and business purposes (e.g., tax record keeping).

8. Your Rights and Choices

Under the Privacy Act 1988 (Cth), you have the right to:

• Access: Request access to your personal information that we hold
• Correction: Request correction of inaccurate, incomplete, or out-of-date information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Opt-out: Opt out of marketing communications at any time
• Complaint: Make a complaint about how we handle your personal information
• Revoke Google access: Withdraw our access to Google data as described in section 5.5

To exercise these rights, please contact us using the information provided in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your interactions with our Services. Cookies are small data files stored on your device that help us:

• Remember your preferences and settings
• Analyse how you use our Services
• Improve functionality and user experience
• Provide personalised content and features

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Services.

10. Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites or services you access through our Services.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Australia, where our service providers or data centres are located. When we transfer your information internationally, we take steps to ensure that your information receives adequate protection in accordance with this Privacy Policy and applicable privacy laws.

12. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated Privacy Policy on our website and updating the "Last updated" date. Your continued use of our Services after such modifications constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, Google user data, or our handling of your personal information, please contact us:

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):