Privacy

Privacy Policy

Effective date: May 2026 Version: 2.0 Last updated: 21st May, 2026

Workhouse Advertising Pty Ltd (Workhouse, we, us, our) is committed to protecting the privacy of the personal information we handle. This policy explains how we collect, hold, use, disclose and protect personal information, and how you can access or correct your information or make a complaint.

We are bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).

1. The kinds of personal information we collect and hold

Depending on your relationship with us, we may collect and hold the following kinds of personal information:

  • Contact details — name, business name, job title, email address, postal address, phone number.
  • Enquiry and engagement information — the content of messages you send us, services you're interested in, how you found us.
  • Client and supplier information — billing details, ABN, business contacts, account history, contractual records.
  • Employment-related information — for candidates and employees, including résumés, work history, references, qualifications, eligibility-to-work documents, and tax/superannuation details.
  • Website and analytics information — IP address, device and browser data, pages viewed, referring URL, and similar information collected via cookies and tracking tools (see Section 8).
  • Information collected on behalf of our clients — in delivering digital marketing, analytics and advertising services to our clients, we may process personal information about end users of our clients' websites and platforms. We process this information as a service provider on our clients' instructions; the relevant client is the entity responsible for that information and their privacy policy applies.

We don't generally collect sensitive information. If we ever need to, we'll seek your consent first unless an exception under the Privacy Act applies.

2. How we collect personal information

We collect personal information:

  • directly from you — when you contact us, submit a form on our website, attend a meeting or event, apply for a role, or engage us for services;
  • from third parties — for example, referees you've nominated, public sources such as LinkedIn (for recruitment), or our clients (where they share their data with us so we can deliver services); and
  • automatically — through cookies and similar technologies on our website (see Section 8).

If we collect personal information about you from someone other than you, we'll take reasonable steps to make you aware of the collection unless an exception applies.

3. The purposes for which we collect, hold, use and disclose personal information

We collect, hold, use and disclose personal information for the following purposes:

  • Responding to enquiries — to answer questions, provide quotes, and follow up on contact form submissions.
  • Delivering services to clients — including SEO, paid search and paid social, analytics, conversion rate optimisation, web development and other digital marketing services.
  • Managing client relationships — administration, invoicing, reporting, project communications, and account management.
  • Recruitment and HR — assessing job applications, managing employment, and meeting employment-related legal obligations.
  • Supplier and contractor management — engaging and paying suppliers and contractors.
  • Website operation and improvement — understanding how visitors use our site, fixing issues, and improving content and performance.
  • Legal, compliance and risk management — meeting legal obligations, responding to lawful requests, and managing risk.

We won't use or disclose personal information for a purpose other than the one we collected it for, unless you'd reasonably expect us to, you consent, or another exception under the Privacy Act applies.

4. How we hold and protect personal information

We hold personal information in a combination of secure cloud-based systems and (where applicable) physical records at our Subiaco office. Our cloud providers are reputable third parties with their own security and privacy controls.

We take reasonable steps to protect personal information from misuse, interference, loss, and from unauthorised access, modification or disclosure. These include both organisational measures (staff training, access controls based on role, confidentiality obligations, vendor due diligence, incident response procedures) and technical measures (encryption in transit, multi-factor authentication on key systems, network and endpoint security, logging and monitoring, and regular backups).

When personal information is no longer needed for any purpose for which it may be used or disclosed under the APPs, and we're not required by law to keep it, we'll take reasonable steps to destroy or de-identify it. Indicative retention periods:

  • General enquiry data: up to 24 months from last contact.
  • Unsuccessful job applications: 12 months from the decision (unless you ask us to keep your details on file for future opportunities).
  • Client and supplier records: 7 years after the end of the engagement, to meet tax, accounting and contractual obligations.

5. Disclosure of personal information

We may disclose personal information to:

  • our staff and contractors, on a need-to-know basis;
  • our clients (where the information was collected on their behalf or relates to a service we're delivering for them);
  • service providers that support our business — for example, hosting, cloud storage, email, accounting, CRM, and analytics platforms;
  • professional advisors such as lawyers, accountants and auditors; and
  • regulators, courts or other authorities where required or authorised by law.

We don't sell personal information.

6. Overseas disclosures

The analytics tool embedded in our website transmits website usage information to a provider located outside Australia:

  • Google Analytics 4 (Google LLC) — website usage data is transmitted to Google's infrastructure, with primary processing in the United States and other locations in Google's global network.

For information about how Google handles personal information, see Google's privacy policy. We don't otherwise store or transmit personal information outside Australia.

Before personal information is disclosed to an overseas recipient by us, we take reasonable steps to ensure they handle it in a way consistent with the APPs, unless an exception under APP 8.2 applies.

7. Automated decision-making

We don't use computer programs to make, or substantially help make, decisions about individuals that could reasonably be expected to significantly affect their rights or interests. If this changes, we'll update this policy to describe the kinds of personal information used, the kinds of decisions made, and how those decisions are made, consistent with APP 1.7.

8. Cookies and tracking technologies

Our website uses cookies and similar technologies — Google Analytics 4 and Google Tag Manager — to understand how visitors use the site. We don't use this data for remarketing or to build audiences for advertising. However, Google receives this data as part of how its tools operate and may use it for its own purposes in line with its terms and privacy policy.

You can block or delete cookies through your browser settings. You can also opt out of Google Analytics specifically by installing the Google Analytics opt-out browser add-on. Some parts of our site may not work as expected if cookies are blocked.

For information about how Google handles personal information, see Google's privacy policy.

9. Accessing and correcting your personal information

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it's inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact our Privacy Officer using the details in Section 11. We may need to verify your identity before responding. We'll respond within 30 days and won't charge you for making a request (though a reasonable cost-recovery charge may apply to access requests in some circumstances — we'll let you know before any charge is incurred).

If we refuse access or correction, we'll explain why in writing and tell you how to complain.

10. Complaints

If you think we've breached the Australian Privacy Principles or otherwise mishandled your personal information, please contact our Privacy Officer (Section 11). Tell us what happened and what you'd like us to do.

We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If we need longer, we'll explain why and give you an updated timeframe.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

  • Website: oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5288, Sydney NSW 2001

11. Contact us

Privacy Officer Workhouse Advertising 193 Roberts Road, Subiaco WA 6008 Phone: (08) 9217 4500 Email: [email protected]

12. Changes to this policy

We may update this policy from time to time. The current version, with the effective date and version number, will always be available at workhouse.au/privacy-policy. Material changes will be noted at the top of the page.