TheGrowthProject Group Pty Ltd (ABN 71 639 245 248), trading as The Growth Project (“we”, “us”), takes your privacy seriously. We handle personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the ADMA Code of Practice.
This policy explains what we collect, how we use it, who we share it with and what choices you have. It covers our website, mobile applications and social media pages. Last updated 6 November 2026.
What we collect and why
Website visits
When you visit our site, we record anonymous information about your visit. We use cookies and pixel tags to do this. We use the information to see how the site is used and to improve it. It does not tell us who you are. It may include:
- your server address
- your operating system (for example Windows or Mac)
- your top-level domain (.com, .gov, .au and so on)
- the date and time of your visit
- the pages you view and documents you download
- the site you visited before ours
- your browser type (for example Chrome or Safari)
Cookies let us see patterns in how people use the site. They recognise your browser between visits, not you personally. You can block cookies in your browser settings, but some features may stop working.
Maps
Our contact page shows our office on a Google map, loaded from Google Maps when you scroll to it. Google’s own privacy policy applies to what it collects through the map.
Videos
Some pages show videos hosted on YouTube. Until you press play, the page shows only a picture we host ourselves, so nothing is sent to YouTube. When you press play, the video loads from YouTube’s privacy-enhanced mode (youtube-nocookie.com), and YouTube’s own privacy policy applies to what it collects while you watch.
Contact forms and email
When you fill out our contact form or join our email list, we collect your name and email address. We use them only for the reasons you gave them.
When you send an enquiry, the form also includes a short note of how you reached it during that visit: the page you arrived on, the site that referred you, any campaign tags in the link, the pages you viewed and the button you clicked.
This note is kept in your browser only until you close the tab, and contains nothing about you personally. We collect them by lawful means and with your consent. We will not add you to other mailing lists unless you ask.
You can unsubscribe at any time using the link in any email we send, or by asking us through our contact form.
Who we share information with
We may share information with trusted providers and partners who help us deliver our service, for example to host our systems, send email or process payments. They may use your information only to provide that service, and we require them to protect it to a standard at least as high as this policy.
We may also share information when the law requires it. We may share it with our legal advisers, government authorities or law enforcement if we reasonably believe it is necessary to follow a law, to protect someone’s safety, to deal with fraud, security or technical problems, or to protect our rights or property.
Providers we use
We use these types of providers. Each receives only the information it needs for its purpose.
- Google Cloud and Google Workspace for hosting, email and storage
- Stripe for payments
- Postmark for email delivery
- Cloudflare for network security and delivery
- AI providers such as Anthropic, OpenAI, Google and OpenRouter (see “AI tools” below)
Sending information overseas
Some providers store or process information outside Australia, including in the United States and the European Union. We may also work with contractors overseas, who could see information when helping with design and development work. We take reasonable steps to make sure overseas recipients handle personal information in line with the Australian Privacy Principles.
Information we handle for clients
When we build, host or support a client’s website or systems, we may process personal information on the client’s behalf, such as their customers’ names, contact details and orders. We use it only to provide the service. The client stays responsible for giving their own customers a privacy notice. Our Terms of Service set out the rest.
AI tools
We may use AI tools to help us do our work. These tools may receive business information, and sometimes personal information, when a task needs it. AI providers have their own terms and settings.
We choose settings that limit how long providers keep information and whether they use it to train their models where we can, but we cannot control how every provider handles information.
Where an AI feature on a client’s website uses an AI account that belongs to the client, that account’s settings apply.
AI features we build suggest, draft or route. A person reviews and confirms anything that affects a customer or an order. We do not use AI to decide credit, pricing, employment or similar matters about an individual. If that changes, we will update this policy first.
Keeping your information safe
We take reasonable steps to protect your information. No security measure is perfect, and we cannot promise that information will never be accessed without permission.
If we suspect a data breach that is likely to cause serious harm, we will assess it promptly. Where the law requires, we will tell the people affected and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme. We tell affected clients without delay.
How long we keep information
We keep daily database backups for 30 days and daily disk snapshots for 7 days. Our backups are stored in Australia. Backups of uploaded files, such as images and documents, are kept until we remove them.
When a client agreement ends, we delete the client’s data from our live systems on request, and we remove it from our backups as they expire or when we clear them.
We keep contact form enquiries and business records for as long as we need them for the reason we collected them, or as the law requires.
Your choices and rights
You can choose not to give us personal information. If you do, we may not be able to provide some services to you. You can ask us to remove you from any mailing list or delete your details from our records at any time.
You can ask to see or correct the personal information we hold about you by asking us through our contact form. We may ask you to confirm your identity first. We will reply within 30 days.
Complaints
If you are unhappy with how we have handled your information, tell us through our contact form. We will respond within 30 days. If you are still not satisfied, you can complain to the OAIC at oaic.gov.au.
Links to other websites
We are not responsible for the practices of websites we link to, or for their content. When you follow a link to another site, this policy no longer applies. Their own rules and policies do.
Changes to this policy
If we change this policy, we will post the changes on this page. Changes apply when they are posted.
Contact us
Questions about this policy or our terms: use our contact form. For more information about privacy law in Australia, visit the Office of the Australian Information Commissioner.