Privacy Policy
Last updated: 10 September 2026
This policy explains how Agency360 Labs collects, uses, stores and discloses your personal information. It applies to the website at agency360.com.au and to the services provided under the Agency360 Labs name.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In plain terms: we only collect what we need, we tell you why, we keep it secure, and we don't sell it.
1. What personal information we collect
Information you give us
- When you book a discovery call or an AI Readiness Audit (through our scheduling tool, Calendly): your name, email address, phone number if you provide one, and anything you include in the booking notes or in messages to us.
- When you email us at stan@agency360.com.au: your email address and the contents of your message, including any attachments.
- During an engagement: information about your business, systems, workflows and goals that you share with us so we can carry out the audit or build. This may include limited personal information about you or people in your business.
- Payments: if you pay for an AI Readiness Audit, the payment is processed by Stripe through Calendly. We receive confirmation that a payment was made and basic transaction details. We do not receive or store your full card number.
We do not seek to collect sensitive information (such as health, racial or ethnic origin, or political views). Please don't send us sensitive information unless it is genuinely necessary for an engagement.
Information collected automatically when you visit the site
Like most websites, we collect some technical and usage information automatically:
- Pages viewed, time on page, links clicked, and the general path taken through the site.
- Approximate location (usually city or region level), device type, operating system, browser, and screen size.
- The website or source that referred you to us.
This is collected through Google Analytics 4 and our hosting provider's logs. It is mostly aggregated and is not used to identify you personally.
2. How we use your information
We use personal information to:
- respond to your enquiry and arrange and conduct your discovery call or audit;
- deliver the services you have engaged us for, including preparing your roadmap and any systems we build;
- process payments and issue invoices;
- keep business records and meet our legal, accounting and tax obligations;
- understand how the website is used so we can improve it;
- with your consent, send you occasional updates about our services. You can opt out at any time.
We will not use your personal information for a purpose that is unrelated to the above without telling you first or obtaining your consent.
3. Cookies and analytics
- Google Analytics 4 is used to measure traffic and understand how visitors use the site. It sets cookies and collects the automatic information described in section 1. It does not record your full IP address.
- Calendly may set cookies when the booking widget loads, so that scheduling works.
- Cloudflare, which hosts and protects the site, may set cookies for security and performance.
- We do not currently use advertising or cross-site tracking cookies, or run a Meta (Facebook) or similar advertising pixel. If we introduce advertising or marketing analytics tools in future, we will update this policy first and, where the law requires it, ask for your consent.
You can control cookies by blocking or deleting them in your browser settings, and you can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on. Most browsers also offer a "Do Not Track" setting, although not all websites act on it.
4. Who we share it with
We do not sell your personal information. We use a small number of third-party service providers to run the business, and we share only the information they need to do their job:
- Calendly - scheduling and booking (United States).
- Stripe - payment processing (United States and other countries).
- Google - website analytics, and Google Fonts, which your browser loads directly from Google to display the site's typeface (Google may log your IP address as part of that request) (United States).
- Cloudflare - website hosting, delivery and security (United States).
- Our email and document providers, and our bookkeeper or accountant, where relevant to servicing you or meeting our obligations.
We may also disclose personal information if we are required or authorised to by law, or where it is reasonably necessary to protect our rights, property or safety, or those of others.
5. Overseas disclosure
Several of the providers listed above store and process data outside Australia, primarily in the United States. By using this website or engaging us, you consent to your personal information being disclosed to and handled by recipients located overseas. We take reasonable steps to use reputable providers with appropriate safeguards, but privacy laws in other countries may differ from those in Australia.
6. How we protect your information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes using reputable service providers, limiting who can access data, and keeping accounts and devices secured.
No method of transmission or storage is completely secure. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.
7. How long we keep it
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires. Financial and tax records, for example, generally need to be kept for five years. When information is no longer needed, we delete it or de-identify it.
8. Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is inaccurate, out of date or incomplete. Email stan@agency360.com.au with your request.
We will respond within a reasonable time, usually within 30 days. There is normally no charge; if a cost would apply, we will tell you before proceeding. If we are unable to provide access or make a correction, we will explain why in writing.
9. Marketing and unsubscribing
If you receive updates from us and no longer wish to, use the unsubscribe link in the email or reply asking to be removed, and we will action it promptly. Our direct marketing complies with the Spam Act 2003 (Cth).
10. Complaints
If you believe we have mishandled your personal information or breached the Australian Privacy Principles, please contact us first at stan@agency360.com.au so we can try to resolve it.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au or 1300 363 992.
11. Children
Our website and services are intended for business owners and are not directed at people under 18. We do not knowingly collect personal information from children.
12. Links to other websites
This site contains links to third-party websites, including Calendly and our social media profiles. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
13. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the "last updated" date shown at the top. Where changes are material, we will note them here.