Goober Marketing Pty Ltd (ABN 34 694 706 619) ("Goober", "we", "us") is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, and how we handle it.

Last updated: 14 July 2026. Contact: info@goober.com.au.

This policy applies to:

• Clients and their staff — businesses that engage us for advertising, website, SEO or analytics services, including users of our client portal and dashboards.
• Visitors and leads on client websites — where our tracking or enquiry-capture technology is installed on a client's website, we collect information on behalf of that client. The client is responsible for their own privacy disclosures to their site visitors; we act as their service provider.
• Visitors to our own websites and people who contact us.

• Client account information — names, business names, email addresses, phone numbers, billing details, login credentials for our portal.
• Marketing and website data — Google Ads, Google Analytics (GA4) and Google Search Console data for client accounts; website content, performance and crawl data; conversion and call/click events.
• Enquiry and lead data captured on client websites — when a visitor submits a form on a client site using our tracking, we receive the submitted details (typically name, email, phone, message), the page it was submitted from, and marketing attribution (for example Google click identifiers and UTM campaign tags).
• Technical data — browser/user-agent details, referral sources (including referrals from AI assistants), and usage logs of our platform. IP addresses are used transiently to secure the platform and rate-limit abuse; we do not store visitor IP addresses alongside lead records.
• Communications — emails, support requests and portal messages.

We do not knowingly collect sensitive information (such as health information) and ask that it not be submitted through website forms.

Directly from you (onboarding, forms, the portal), automatically through our tracking snippet and platform logs, and from third-party platforms you authorise us to access (Google Ads, Google Analytics, Google Search Console, hosting and content-management platforms such as Vercel, GitHub and WordPress).

• To provide our services: managing advertising accounts, building and improving websites, SEO, analytics, reporting and lead tracking.
• To record and forward enquiries/leads to the relevant client.
• To attribute leads and conversions to marketing campaigns.
• To operate, secure and improve our platform.
• To communicate with clients about their accounts (service messages, reports, alerts).
• To meet legal obligations.

We do not sell personal information.

Our platform uses AI systems (including large language models supplied by third parties such as Anthropic, and image-generation models supplied by Replicate) to analyse marketing data, draft content and recommendations, and propose website and advertising changes. Data processed for these purposes may include campaign metrics, website content, and the contents of enquiries submitted through client websites — including a lead's name, contact details and the message they sent. AI outputs that affect a client's website or advertising account are subject to our review and approval workflow. We access these AI providers under their standard API terms, under which data submitted through the API is not used to train their generally available models.

We may disclose personal information to:

• The relevant client — leads and enquiries captured on a client's website are passed to that client.
• Service providers — hosting, infrastructure, email and SMS delivery, analytics, and AI providers, only to the extent needed to provide our services. These include Google (Ads, Analytics, Search Console), Anthropic (AI language models), Replicate (AI image generation), Vercel and GitHub (website hosting and code for sites we build), Resend (email delivery), Twilio (SMS), and Hostinger (our application and database hosting).
• Professional advisers, regulators and law enforcement where required by law.

Where your data is held (APP 8): our application and database run on a dedicated virtual server (provided by Hostinger), and we use service providers including Google, Anthropic, Vercel, GitHub, Resend, Twilio and Replicate. Depending on the region of our hosting and of these providers, your information may be stored or processed outside Australia, including in the United States. We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs.

We use industry-standard safeguards: encrypted connections (HTTPS), encryption at rest for stored credentials, secrets and API keys, HTTP security headers, brute-force and rate-limiting protections, access controls, audit logging, and least-privilege access for staff. No system is completely secure; we cannot guarantee absolute security.

We keep personal information only as long as needed for the purposes above or as required by law. Some data is deleted automatically on a schedule — for example raw AI-referral traffic logs after about 90 days, and usage and email-delivery logs after about 12 months. Lead and analytics data we hold for a client is retained while their engagement is active. On request, and in any case within a reasonable period after your engagement ends, we will provide an export of, and then delete or de-identify, the personal information we hold for you — except limited records we are required or entitled to keep for legal, security or accounting reasons, which we retain only for as long as needed. To request an export or deletion, email info@goober.com.au.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

We only send marketing material in accordance with the Spam Act 2003 (Cth): with consent, identifying ourselves, and with a working unsubscribe. Leads captured on client websites are passed to the relevant client; that client is responsible for its own marketing consent obligations to those leads.

You may request access to, or correction of, personal information we hold about you by emailing info@goober.com.au. We will respond within a reasonable period. If you have a privacy complaint, contact us first; if you are not satisfied with our response you may complain to the OAIC (oaic.gov.au, 1300 363 992).

Where our snippet is installed on a client website it may set or read browser storage to: run Google Analytics and Google Ads conversion tracking, remember marketing attribution (such as a Google click ID) for up to 90 days, detect visits referred by AI assistants, and capture form submissions as enquiries for that client. Clients must disclose this tracking in their own website privacy policy. A template disclosure is available from us on request.

We may update this policy from time to time. The current version will always be available on our website and portal.