This policy explains what personal information Crsp Digital collects, why we collect it, how we use it, who we share it with, and how you can access or correct it. It applies to this website, to enquiries and bookings made through it, and to the services we provide under a plan. The terms of our plans are set out separately in our terms and conditions.
Who we are
- Legal entity: RB40 Pty Ltd, an Australian private company.
- ABN: 86 112 245 048.
- Trading as: Crsp Digital.
- Based in: Port Macquarie, New South Wales.
- Contact: [email protected] or 1300 800 358.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Definitions
- We, us, our means RB40 Pty Ltd trading as Crsp Digital.
- You, your means the person whose information we hold: an enquirer, a client, or someone acting for a client business.
- Personal information means information about an identifiable person, such as a name, email address or phone number.
- Your customers means the people who use the website we build for you, for example by sending an enquiry through it.
What we collect
When you enquire or book a call
- Your name, business name, email address and phone number.
- What your business does and what you already have online, if you tell us.
- The date and time of a call you book, and any notes you add to the booking.
- Anything else you choose to tell us in a form, an email, a call or a meeting.
When you sign up to a plan
- Your billing details: business name, business address, ABN and the email address for tax invoices.
- Your card or bank details, which go directly to our payment providers and are never seen or stored by us (see Payments and billing).
- The information needed to build your site and set up your accounts: your logo, photos, opening hours, services, prices and the words you want used.
- Logins and access you give us to an existing website, domain, Google or social account so we can do the work.
When you visit this website
- Technical information such as your approximate location, the pages you view, how you arrived at the site, and the browser and device you used.
- Cookies and similar technology, as described under Cookies and tracking.
What we do not collect
- Sensitive information, such as health, religious or political information. We do not ask for it and we do not need it.
- Information from anyone under 18. Our services are for businesses.
How we collect it
- Directly from you, when you fill in a form, book a call, email us, call us or meet with us.
- Automatically, through cookies and similar technology when you use this website.
- From public sources, such as a business listing or your existing website, when we prepare for a call or set up your accounts.
- From the services we set up for you, such as a notification from Google that your Business Profile has been verified.
Why we use it
- To answer your enquiry and call you back.
- To prepare for a call you have booked.
- To deliver the plan you have signed up for, including registering your domain and setting up your website, email, Google and social accounts.
- To bill you, issue tax invoices and keep our accounts.
- To support you and tell you about anything that affects your website or accounts.
- To improve this website and understand which pages are useful.
- To follow up your enquiry and tell you about what we offer (see Marketing).
- To meet our legal obligations, such as tax record keeping.
We do not use your information for anything else without asking you first.
Payments and billing
- Card payments are processed by Stripe. Your card number goes directly to Stripe and is never seen or stored by us.
- Direct debits, where we have agreed to them, are processed by GoCardless. Your bank details go directly to GoCardless and are never seen or stored by us.
- Invoices and accounts are kept in Xero, which holds your business name, address, ABN, contact email and the history of what we have invoiced you. We are required to keep those records.
- We receive confirmation from each provider that a payment succeeded or failed, and nothing more.
Accounts we set up for you
Part of what we do is set up accounts in your business name with other companies. To do that, we give those companies the business details you provide.
- Your domain name, with a domain registrar. The registrar holds your business name, contact details and ABN, as the registry rules require.
- Your website hosting, on servers we manage in Australia.
- Your business email, with Microsoft 365. Microsoft holds your name, your email address and the contents of your mailbox.
- Your Google Business Profile, with Google. Google holds your business details, photos and reviews.
- Your Facebook page and Instagram profile, with Meta. Meta holds your business details and posts.
Each of these companies handles that information under its own privacy policy. The accounts are yours. We manage them while you are on a plan and hand them over if you leave, as set out in our terms.
Your customers’ information
The website we build for you may collect information from your own customers, most often through a contact form.
- That information belongs to you, not to us.
- Enquiries are sent to the email address you nominate. A copy is also stored in your website’s own database, which we host, so nothing is lost if an email goes astray. That copy is yours and is deleted when your plan ends.
- We handle it only to run your website. We do not use it for anything else and we do not keep it once we stop working with you.
- You are responsible for having a privacy policy on your own site. We can set one up with you as part of your plan.
Cookies and tracking
- This website uses cookies and similar technology to keep the site secure and to measure how it is used.
- Cloudflare, which serves the site, sets a security cookie to protect against automated traffic.
- We may use Google Analytics to understand which pages are useful, and Google and Meta advertising tools to see whether our advertising is working. If we do, this page is updated to say so.
- Booking a call uses TidyCal, which sets its own cookies while the booking calendar is open.
- You can block or delete cookies in your browser settings. The site will still work, but some parts, such as the booking calendar, may not.
Marketing
- If you enquire or book a call, we may follow up by phone, text message or email about your enquiry and what we offer, including after the call.
- We send marketing emails only to people who have enquired or are clients. Every one includes an unsubscribe link.
- You can ask us to stop contacting you at any time, by replying to a message, emailing [email protected] or telling us on the phone. We stop straight away.
- We never sell or rent our list.
Who we share it with
We do not sell your personal information. We share it only where we need to in order to run the business:
- The companies that host this website and our email, and that send email on our behalf.
- Analytics and advertising providers, including Google and Meta, where we use them.
- Stripe, GoCardless and Xero, for taking payment and invoicing.
- Our accountant, for tax and reporting.
- Domain registrars, hosting companies, Microsoft, Google and Meta, where we register or set up those services for you.
- Anyone else you have asked us to deal with on your behalf.
- A government agency or court, where the law requires it.
Information sent overseas
Some of the providers above are based outside Australia, so your information may be stored or processed overseas.
- United States: Google, Meta, Cloudflare, Microsoft and TidyCal.
- United States and Ireland: Stripe.
- United Kingdom: GoCardless.
- New Zealand and Australia: Xero.
We take reasonable steps to use reputable providers who handle information appropriately, but we cannot control the laws of another country.
Keeping it safe
We take reasonable steps to protect your information from misuse, loss and unauthorised access, including:
- access controls on the systems we use, so only the people who need your information can see it;
- two-factor authentication on our accounts;
- encrypted connections to this website and to the systems we use;
- nightly backups of the websites we host.
No system is completely secure, and we cannot guarantee absolute security.
If there is a data breach
- We assess what happened and contain it.
- If the breach is likely to cause you serious harm, we notify you and the Office of the Australian Information Commissioner as soon as practicable, as the Notifiable Data Breaches scheme requires.
- We tell you what was involved, what we have done about it, and what you can do.
How long we keep it
- While we work with you: for as long as you are a client or an active enquiry.
- After that: for as long as we need it to meet our legal and tax obligations, which is generally seven years for billing records.
- Enquiries that do not become clients: deleted or de-identified within two years.
- Your customers’ information on the website we host for you: not kept once we stop working with you.
After those periods we delete the information or de-identify it.
Access and correction
- You can ask us what personal information we hold about you.
- You can ask us to correct it if it is wrong.
- Email [email protected] and we respond within a reasonable time, generally within 14 days.
- We may need to confirm who you are first.
- There is no charge for asking. We may charge the cost of supplying a very large amount of information, and we tell you before we do.
Complaints
- Contact us first at [email protected] or on 1300 800 358 and tell us what has gone wrong.
- We look into it and respond in writing, generally within 14 days.
- If you are not satisfied with our response, you can take the matter to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
- We may update this policy from time to time.
- The current version is always on this page, with the date it was last updated at the top.
- If a change materially affects how we handle your information, we notify clients by email.
Contact us
RB40 Pty Ltd trading as Crsp Digital ABN 86 112 245 048 Port Macquarie, New South Wales Email [email protected] Phone 1300 800 358