Privacy Policy

Last updated: [RAMI TO CONFIRM: launch date, e.g. 12 May 2026]

1. About this policy

Grow Broker ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website, booking a discovery call, or engaging our services, you consent to the practices described in this policy.

2. Who we are

Grow Broker is operated by [RAMI TO CONFIRM: legal entity name, e.g. "Grow Broker Pty Ltd"] (ABN [RAMI TO CONFIRM: ABN]), based in Sydney, New South Wales, Australia.

For any privacy-related questions or requests, contact our Privacy Officer at privacy@growbroker.co.

3. What we collect

We only collect personal information that is necessary for the services we provide. Specifically:

When you visit our website

• Standard analytics data (IP address, browser type, pages visited, time on site) collected via Google Analytics or similar services
• Information you voluntarily provide via forms or our discovery call calendar

When you book a discovery call

• Your name, email address, and phone number
• Your business name and website (if provided)
• Any notes you provide about your business or what you'd like to discuss

When you become a client

• Business details required to deliver our services (ACN, ABN, aggregator details, lender panel)
• Login credentials for systems we configure on your behalf, only where you provide them to us
• Customer and lead data that flows through systems we configure for you
• Billing details processed via our payment provider (Stripe)

We do not collect sensitive information (as defined in the Privacy Act) unless it is strictly necessary and you have consented to it.

4. How we use your information

We use the information we collect to:

• Provide and improve our services
• Communicate with you about your account, our services, and relevant updates
• Process payments and manage billing
• Respond to your enquiries and provide support
• Comply with our legal obligations

We will not use your personal information for direct marketing without your consent, and you can opt out of any marketing communications at any time.

5. Customer and lead data we process for you

As part of delivering our services, we configure and maintain systems that handle your customers' and leads' personal information. We act as a data processor on your behalf for this information.

You retain ownership of all customer and lead data that flows through systems we configure for you. We will never use, share, sell, or analyse this data for our own purposes. If our engagement ends, we will transfer this data to you and remove our access within 30 days, unless you direct us otherwise.

6. Who we share information with

We do not sell your personal information. We share it only with:

• Service providers who help us deliver our services — including HighLevel (GoHighLevel), Stripe (payments), Google Workspace (email and storage), and similar trusted vendors. These providers are bound by their own privacy obligations
• Professional advisors such as our accountants and lawyers, where required
• Government bodies or law enforcement, where we are legally required to do so

7. Overseas disclosures

Some of the service providers we use are based outside Australia (for example, HighLevel is based in the United States). When we disclose your personal information to overseas providers, we take reasonable steps to ensure they handle your data consistently with the Australian Privacy Principles.

8. How we protect your information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:

• Secure, encrypted storage of credentials and sensitive data
• Access controls and authentication for all internal systems
• Regular review of access permissions for staff and contractors
• Use of reputable, security-compliant service providers

No method of transmission over the internet is 100% secure. While we do our best, we cannot guarantee absolute security.

9. Your rights

Under the Privacy Act, you have the right to:

• Request access to the personal information we hold about you
• Request correction of information that is inaccurate, out of date, incomplete, or misleading
• Request deletion of your personal information (subject to our legal obligations to retain certain records)
• Opt out of direct marketing at any time
• Make a complaint about how we handle your information

To exercise any of these rights, contact us at privacy@growbroker.co. We will respond within 30 days.

10. Cookies and tracking

Our website uses cookies and similar tracking technologies to understand how visitors use our site and to improve your experience. We use:

• Essential cookies required for the website to function
• Analytics cookies (such as Google Analytics) to understand site traffic and behaviour
• Advertising cookies (such as Meta Pixel or Google Ads conversion tracking) if you arrive via a paid ad — these help us measure ad effectiveness

You can disable cookies through your browser settings, though some parts of the site may not function correctly.

11. Complaints

If you believe we have breached your privacy, please contact us first at privacy@growbroker.co. We take complaints seriously and will work to resolve any issues promptly.

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to this policy

We may update this policy from time to time. The most current version will always be available at this URL, with the "last updated" date at the top reflecting the latest changes. We encourage you to review this policy periodically.

13. Contact us

For any questions about this Privacy Policy or how we handle your personal information:

Grow Broker
Email: privacy@growbroker.co
Address: [RAMI TO CONFIRM: business address]