Privacy Policy

Last updated: 21 March 2026

PWD Digital Agency Pty Ltd (“PWD”, “we”, “us” or “our”) operates the website pwd.com.au. This privacy policy explains how we collect, use, disclose and protect personal information in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the EU General Data Protection Regulation (GDPR) where applicable.

We are committed to safeguarding the privacy of our website visitors, clients and prospective clients. This policy sets out what personal data we may collect, how we process it, and the rights you have in relation to your data.

Owner and Data Controller:
PWD Digital Agency
3 Loftus Street, West Leederville, WA 6007, Australia
Email: [email protected]

1. Types of Personal Data Collected
2. Purposes of Processing
3. Third-Party Services
4. International Data Transfers
5. Cookie Policy
6. Your Rights
7. Data Security
8. Data Retention
9. Children’s Privacy
10. Changes to This Policy
11. Definitions
12. Contact Information

Data You Provide Voluntarily

When you contact us through our website forms, email or telephone, you may provide us with the following personal information:

• First name and last name
• Email address
• Phone number
• Company name
• Website URL
• Any additional information you include in your enquiry

Data Collected Automatically

When you visit our website, certain data is collected automatically through cookies and similar technologies:

• IP address
• Browser type and version
• Operating system and device information
• Pages visited and time spent on each page
• Referring URLs and exit pages
• Geographic location (country/region level)
• Usage data and interaction patterns

We collect and process personal data for the following purposes:

• Providing services and responding to enquiries — to communicate with you, answer your questions and deliver the services you have requested
• Analytics and site improvement — to understand how visitors use our website and to improve its performance, functionality and content
• Advertising and remarketing — to deliver relevant advertisements and measure the effectiveness of our marketing campaigns
• Spam protection — to protect our website and forms from automated abuse
• Legal compliance — to meet our obligations under applicable laws and regulations
• Business operations — to manage our client relationships via CRM systems and marketing automation tools

The legal bases for processing (under GDPR) include: your consent, performance of a contract, legitimate interests and compliance with legal obligations.

We use the following third-party services to operate our website and deliver our marketing activities. Each service may collect data as described in its own privacy policy.

Analytics

• Google Analytics 4 (Google LLC / Google Ireland Limited) — web analytics service that tracks and reports website traffic.
  Privacy Policy · Opt Out
• Google Tag Manager (Google LLC) — tag management system used to deploy and manage tracking scripts.
  Privacy Policy
• Meta Pixel (Meta Platforms, Inc.) — analytics tool that measures the effectiveness of advertising by tracking visitor actions.
  Privacy Policy

Advertising & Remarketing

• Google Ads Remarketing (Google LLC) — displays targeted advertisements to users who have previously visited our website.
  Privacy Policy
• Meta Remarketing & Custom Audiences (Meta Platforms, Inc.) — enables targeted advertising on Meta platforms based on website interactions.
  Privacy Policy · Opt Out
• LinkedIn Insight Tag (LinkedIn Corporation / Microsoft) — tracks conversions and enables remarketing on the LinkedIn platform.
  Privacy Policy
• TikTok Pixel (TikTok Inc. / ByteDance) — tracks conversions and enables remarketing on TikTok.
  Privacy Policy
• NextRoll / AdRoll (NextRoll, Inc.) — retargeting and prospecting advertising platform.
  Privacy Policy · Opt Out

CRM & Marketing Automation

• HubSpot (HubSpot, Inc.) — customer relationship management and marketing automation platform.
  Privacy Policy

Session Recording & Heatmaps

• Hotjar (Hotjar Ltd.) — records user sessions and generates heatmaps to help us understand how visitors interact with our website.
  Privacy Policy · Opt Out

Spam Protection

• Google reCAPTCHA (Google LLC) — protects our forms from spam and automated abuse.
  Privacy Policy
• Akismet (Automattic Inc.) — anti-spam service for form submissions and comments.
  Privacy Policy

Infrastructure

• Cloudflare (Cloudflare, Inc.) — content delivery network (CDN), security and video streaming services.
  Privacy Policy

Social Media Integration

• Meta Social Plugins (Meta Platforms, Inc.) — allows interaction with Meta social networks directly from our website.
  Privacy Policy

Some of the third-party services listed above are based outside Australia, including in the United States and the European Union. Where personal data is transferred outside Australia, we ensure appropriate safeguards are in place, including the EU-US Data Privacy Framework, Standard Contractual Clauses, or other mechanisms recognised under applicable law.

Under the Australian Privacy Act, we take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the APPs.

Cookies are small text files that are placed on your device when you visit a website. We use cookies and similar tracking technologies for the following purposes:

Types of Cookies We Use

• Essential cookies — required for the website to function correctly (e.g. session management, security)
• Analytics cookies — help us understand how visitors interact with our website by collecting anonymous usage data (e.g. Google Analytics, Hotjar)
• Advertising and targeting cookies — used to deliver relevant advertisements and track campaign performance across platforms (e.g. Google Ads, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, AdRoll)
• Functional cookies — enable enhanced functionality such as live chat and form pre-population (e.g. HubSpot)

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.

You can also opt out of interest-based advertising through the following industry tools:

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out

Under the Australian Privacy Act

If you are located in Australia, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate, out-of-date or incomplete information
• Complain about a breach of the APPs to us, and if not satisfied, to the Office of the Australian Information Commissioner (OAIC)

Under the GDPR (for EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights including:

• Right of access — to obtain confirmation of whether your data is being processed and access to that data
• Right to rectification — to correct inaccurate personal data
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restrict processing — to limit how we use your data
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time
• Right to lodge a complaint — with a supervisory authority in your member state

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website
• Cloudflare Web Application Firewall (WAF) and DDoS protection
• Access controls limiting who within our organisation can access personal data
• Regular security reviews and updates to our systems

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to taking all reasonable steps to safeguard your data.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data — retained for the duration of our communication and any resulting business relationship
• Contract-related data — retained until the contract is fully performed and for any applicable statutory retention period
• Marketing data — retained until you withdraw your consent or unsubscribe
• Analytics data — retained in accordance with the retention settings configured in each analytics platform (typically 14–26 months)

When personal data is no longer required, it is securely deleted or anonymised.

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected data from a child, please contact us at [email protected] and we will take steps to delete it promptly.

We may update this privacy policy from time to time to reflect changes in our practices, technology or legal requirements. Any changes will be posted on this page with an updated “Last updated” date.

Where changes are material, we will endeavour to notify you via email or by placing a prominent notice on our website. We encourage you to review this policy periodically.

• Personal Data — any information relating to an identified or identifiable natural person
• Usage Data — data collected automatically from the use of our website, such as IP addresses, browser types, pages visited and timestamps
• User — any individual who visits or interacts with our website
• Data Subject — any identified or identifiable natural person whose personal data is being processed (GDPR term)
• Data Processor — a natural or legal person that processes personal data on behalf of the Data Controller
• Data Controller — the natural or legal person that determines the purposes and means of processing personal data. For the purposes of this policy, the Data Controller is PWD Digital Agency
• Cookies — small text files stored on a user’s device by a web browser at the request of a website, used to remember information about the user

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

PWD Digital Agency
3 Loftus Street, West Leederville, WA 6007, Australia
Email: [email protected]

For privacy complaints in Australia, you may also contact the:
Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992