Legal
Privacy policy
How we handle the information you give us through this website, in plain English.
Last updated: 3 November 2026 · version 1.0 · effective 3 November 2026
Who we are
This website, trafficsocialmedia.com.au, is run by A3V Group Pty Ltd, trading as Traffic Social Media (ABN 83 619 475 259), based in Melbourne, Victoria. In this policy, “we” and “us” mean A3V Group Pty Ltd.
You can contact us about privacy at hello@trafficsocialmedia.com.au.
The short version
- We collect only what you type into the enquiry form, and we use it only to reply to you and prepare a written scope if you ask for one.
- We don't run advertising or tracking cookies, and we don't sell or rent personal information.
- Your enquiry is stored in our business email (Microsoft 365, configured for Australian data residency where available) and deleted on the schedule set out below.
- You can ask to see, correct or delete what we hold about you at any time.
Does the Privacy Act apply to us?
Under the Privacy Act 1988 (Cth), an annual turnover of A$3 million or less alone does not establish that a business is exempt as a small business operator under section 6D. Whether the business is exempt depends on meeting the section 6D definition and whether any statutory exceptions apply. Those exceptions include: annual turnover exceeding the statutory threshold; providing a health service and holding health information (other than only employee records); disclosing or collecting personal information for a benefit, service or advantage (subject to statutory consent and authorisation qualifications); being a Commonwealth contracted service provider; operating a residential tenancy database; operating a credit reporting body; being a reporting entity or agent under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (limited to activities covered by that Act); being an employee association; participating in protection action ballots; holding Consumer Data Right (CDR) accreditation; being a related body corporate to an entity that is not a small business operator; falling within any prescribed category under the regulations; or opting in under section 6EA. We do not assert whether A3V Group Pty Ltd is exempt or subject to the APPs absent full factual verification. Where reasonably practicable, we voluntarily handle personal information consistently with the Australian Privacy Principles, because that is how we would want our own information handled. If our circumstances change in a way that may affect our coverage or obligations under the Privacy Act, we will review this policy and update it as appropriate.
What we collect, and when
When you send an enquiry. The form asks for: your name, email address, what you need, phone number (optional), how you'd like us to reply, your message (optional), business name, type of business, current website (optional), budget range, when you'd like to start. Fields marked optional can be left blank.
The “Where to start” self-check runs entirely in your browser. Your answers are not sent to us unless you choose to add the result to your enquiry, in which case the result (not your individual answers) becomes part of your message.
Spam protection. To stop automated submissions, the form checks how quickly it was filled in and limits how many submissions come from one connection. For the limit it keeps a pseudonymised anti-spam identifier: a one-way SHA-256 digest of your internet address, held in the server's memory for a 10-minute sliding window and then discarded. It is never written to storage or attached to your enquiry. Because it is derived from your address it is treated as personal information, not as anonymous data.
Technical logs. Our hosting provider records standard web-server information (the pages requested, the time, your browser type and your internet address) to run and secure the service. We don't use these logs to identify visitors.
If you email or call us directly, we keep the correspondence the same way as a form enquiry.
We don't ask for, and please don't send us, sensitive information such as health, financial account or identity-document details.
When you submit an enquiry, we collect the information you provide and use it to respond to you and manage your enquiry, as described in this Privacy Policy.
How we use your information
We use the details you give us to:
- reply to your enquiry, by the method you chose;
- prepare a written scope and quote, if you ask us to;
- keep a record of what was discussed and agreed, if you become a client;
- meet legal obligations, such as keeping tax and business records.
We don't add you to a mailing list, send marketing you didn't ask for, build profiles, or make automated decisions about you. If we ever want to send a newsletter, we will ask first and you can say no.
Who we share it with
We share personal information only with the providers that run this website and our email, and only so they can do that job:
- Vercel Inc. (United States) hosts this website and processes the technical logs described above. Pages are served from Vercel's global network, which means a request from you may be handled by a server outside Australia.
- Microsoft 365 holds our business mailbox, where enquiries are received and kept. Our tenant is configured for Australian data residency where that is available and applicable; Microsoft's support, security, diagnostic and global services may still handle data elsewhere under Microsoft's service terms.
- Resend, Inc. (United States) passes each form submission from the website to our mailbox as an email. It handles the message in transit and keeps a copy of the message and its delivery logs for 30 days, the fixed retention period on its plan, after which they are deleted.
We don't sell, rent or trade personal information. We would disclose it to someone else only if the law requires it, or to protect our legal rights, and we would tell you if we lawfully could.
Because Vercel and Resend are US companies, some technical information about your visit, and the enquiry email in transit, are disclosed overseas, and Microsoft may process some data outside Australia as described above. Where an overseas provider handles your information we rely on its contractual commitments to protect it, but you should know that it may be subject to the laws of that country.
How long we keep it
How long we keep information depends on what it is and why we hold it:
- Enquiries that don't become work: we aim to delete them from our mailbox 12 months after our last contact with you.
- Financial and tax records (invoices, payments) and signed agreements and scope documents: 7 years after the work ends, as Australian tax and business-record rules require.
- Ordinary project correspondence with clients: kept while the engagement runs and for a period afterwards in case of questions about the work, then deleted or archived with the agreement it relates to.
- Anti-spam identifiers: 10 minutes, in memory only.
- Hosting logs: kept by Vercel for its standard log-retention period and not exported by us.
We may keep information longer where the law requires it, where it is needed for a dispute, complaint, fraud or security investigation, or where it records consent or permission you have given. Deleted items may persist for a time in system backups before those backups are overwritten; we don't restore personal information from backups except to recover from a failure.
Cookies and analytics
This website doesn't use analytics, advertising or tracking cookies, and doesn't load scripts from advertising networks or social media platforms. Its fonts are hosted with the site, so loading a page doesn't send your details to a font provider.
If we add privacy-respecting analytics later (counting page views without identifying visitors), we will update this policy first and say exactly what is collected.
Keeping it secure
The website is served over HTTPS. Our email accounts use multi-factor authentication, and only the founder, who answers every enquiry personally, has access to the mailbox. No system is perfectly secure, so if we ever discover that your information has been accessed without authorisation we will tell you promptly and explain what we are doing about it.
Seeing, correcting or deleting your information
You can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, at hello@trafficsocialmedia.com.au. We aim to acknowledge your request promptly and respond as soon as reasonably practicable, taking into account the nature and complexity of the request; if a request is complex we will tell you and say how long it will take. We may need to confirm you are who you say you are first. We can decline to delete information we are legally required to keep, and we will tell you if that applies.
Links to other websites
This site links to a small number of other websites, including those of clients whose work we show. Their privacy practices are their own; this policy applies only to trafficsocialmedia.com.au.
Complaints
If you think we have mishandled your information, please tell us first at hello@trafficsocialmedia.com.au; we aim to acknowledge it promptly and respond as soon as reasonably practicable. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.
Changes to this policy
We will review this policy when our circumstances change in a way that may affect our coverage or privacy obligations, and update this policy as appropriate, showing the version and date at the top. Adding any analytics, advertising pixel, chat tool, embedded map, booking tool, CAPTCHA or email-marketing software triggers a review of this policy before release. Previous versions are kept and available on request. See also our terms of use.