Privacy Policy
Red Herring Digital (ABN 45 617 061 537) is a digital marketing agency at 4 Earsdon Street, Yarraville VIC 3013. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access it, correct it or make a complaint.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Last updated: 1 October 2026
Who this policy covers
This policy applies to Red Herring Digital. Yarraville Studio Hire is operated by the same ownership group and has its own privacy policy, available at yarravillestudiohire.com.au.
This policy does not apply to the websites, campaigns or systems we manage on behalf of our clients. Those are covered by the privacy policy of the client concerned. The section Information we handle for our clients below explains our role in that work.
What we collect
Enquiry and client information. Your name, business name, email address, phone number, the nature of your enquiry, and any information you include in a message to us. For clients, the contact details of your staff, project information and billing details.
Marketing information. Your name and email address, held in our email marketing platform.
Website information. Your IP address, device and browser details, approximate location, the pages you view, how you arrived at our site, and your interactions with pages. Some of this is collected through the analytics, advertising and session-recording tools described below.
Job applicant information. Your name, contact details, work history, qualifications, and anything else in your application or provided during the recruitment process.
Talent and contractor information. Name, contact details, ABN, bank details for payment, and your image, likeness or voice where you appear in work we produce.
We do not collect sensitive information unless you consent and it is reasonably necessary, or the law permits it. We do not collect or use government-related identifiers except where required or authorised by law.
How we collect it
Most of it comes directly from you: when you complete a form on our website, subscribe to our mailing list, call or email us, engage us, apply for a role, or work with us as talent or a contractor.
Some is collected automatically when you use our website, through cookies and similar technologies.
Job applications reach us through Seek and LinkedIn, so we also receive the information you have given those platforms as part of your application.
It is your choice whether to provide your information, but we may not be able to respond to your enquiry, provide our services, or consider your application without it.
Information we handle for our clients
As a marketing agency we handle personal information that belongs to our clients and relates to their customers. This includes customer lists our clients provide to us so that we can run advertising campaigns on their behalf, and information collected through websites and campaigns we manage for them.
When we handle that information:
- we act on our client’s instructions and only for that client’s purposes;
- we do not use it for our own purposes, and we do not use one client’s information for another client;
- we rely on our client having obtained any consent required and having given individuals notice under their own privacy policy; and
- we hold it securely and delete or return it when the client asks or the engagement ends.
If you are a customer of one of our clients and you want to access, correct or complain about information held about you, please contact that business directly. They hold the relationship with you and their privacy policy governs how your information is handled. If you contact us, we will refer you to them.
Why we collect it
- to respond to your enquiry and prepare proposals;
- to provide our services and manage our relationship with you;
- to invoice you and keep accounting records;
- to operate, secure and improve our website;
- to measure the performance of our own advertising;
- to send you updates and promotional material about our services;
- to assess job applications and engage talent and contractors;
- to meet our legal, tax, insurance and record-keeping obligations; and
- to handle enquiries, complaints and disputes.
Who we share it with
We share personal information with the following providers, limited to what each needs to perform its function:
| Provider | What they receive | Why |
|---|---|---|
| Google (Analytics, Tag Manager, Ads) | Website usage data, online identifiers, and hashed contact details submitted through our forms | Website analytics and measuring our own advertising |
| Meta | Website usage data, online identifiers, and hashed contact details submitted through our forms | Measuring our own advertising |
| Microsoft (Clarity) | Website usage data and session recordings | Understanding how people use our site |
| Clickcease | IP address, device information and click behaviour | Detecting fraudulent advertising clicks |
| Adobe (Fonts) | IP address and browser information | Serving fonts on our website |
| Trustindex | Website usage data | Displaying our Google reviews |
| Mailchimp (Intuit) | Name and email address | Email marketing |
| Kinsta | Website data, form submissions and server logs | Website hosting |
| Google Workspace | Correspondence, documents and files | Email and file storage |
| Xero | Billing and payment details | Accounting and payments |
| Seek and LinkedIn | Job application information | Recruitment |
We may also disclose your information to our accountants, solicitors and insurers, to courts, tribunals, regulators or law enforcement where we are required or authorised by law to do so, and to anyone you have authorised to act on your behalf.
Cookies, analytics and advertising
Our website uses cookies and similar technologies. Some are necessary for the site to work. Others are used for analytics, advertising measurement and usability research.
We use Google Analytics and Google Tag Manager, Google Ads conversion tracking, the Meta Pixel and Meta Conversions API, Microsoft Clarity and Clickcease.
Microsoft Clarity records sessions on our website, which can include your mouse movements, clicks, scrolling and the pages you view.
When you submit a form on our website, your email address and phone number are also sent to Google and Meta in hashed form so that we can measure the performance of our own advertising. Hashing converts the value into a code, and we do not send your details in a readable form.
You can control cookies through your browser settings, and you can opt out of Google Analytics using Google’s browser add-on at tools.google.com/dlpage/gaoptout. Blocking cookies will not prevent you from using our website or contacting us.
Marketing
If you subscribe to our mailing list or enquire about our services, we may send you occasional updates and promotional material about what we do.
Every email we send includes an unsubscribe link, which takes effect immediately. You can also opt out at any time by contacting us using the details below. We will not send you marketing after you opt out.
Disclosure of personal information overseas
Several of the providers listed above are based overseas or store information on servers outside Australia. As a result, your personal information may be disclosed to recipients located outside Australia, including in the United States.
Our overseas recipients include Google, Meta, Microsoft, Adobe, Mailchimp (Intuit), Clickcease, Trustindex, LinkedIn and Xero. Our hosting and file storage providers may also store information outside Australia.
Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles it consistently with the Australian Privacy Principles.
How we protect your information
We hold information in our business systems and with the providers listed above. We protect it by:
- restricting access to those who need it for their role;
- requiring unique credentials and multi-factor authentication on business systems;
- managing passwords through a dedicated password manager, never shared in plain text;
- requiring encryption and automatic screen locking on every device used for work;
- applying written confidentiality and data protection obligations to our staff, contractors and suppliers; and
- training our people on privacy and information security, with an annual refresher.
We securely destroy or de-identify personal information when it is no longer needed.
How long we keep it
| Information | Retention |
|---|---|
| Client records, contracts and correspondence | 7 years from the end of the engagement |
| Financial and billing records, including talent and contractor payment details | 7 years, to meet our tax and record-keeping obligations |
| Enquiries that do not become engagements | 2 years |
| Marketing contacts | Until you unsubscribe |
| Unsuccessful job applications | 12 months, unless you ask us to remove them sooner |
| Talent releases and usage records | The term of the usage granted, plus 7 years |
| Website analytics | As set by each provider |
| Information held on behalf of a client | As directed by that client, and deleted or returned at the end of the engagement |
Data breaches
If we become aware of unauthorised access to, or disclosure or loss of, personal information we hold, we will assess it promptly. Where a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme. Where the information belongs to one of our clients, we will notify that client immediately and work with them on any notification to affected individuals.
Accessing and correcting your information
You may ask for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below.
We aim to respond within 30 days. There is no charge for making a request. If providing access involves significant work in locating or copying information, we may charge a reasonable fee. We will give you an estimate first and confirm that you want us to proceed.
In limited circumstances we may refuse access, for example where the information is commercially sensitive or the law requires us to refuse. If we do, we will tell you why.
This policy does not apply to acts and practices in relation to employee records of our current and former employees, which are exempt under the Privacy Act.
If you prefer to deal with us anonymously or under a pseudonym you may, but we may not be able to provide our services to you.
Contacting us and making a complaint
If you have a question about this policy, want to access or correct your information, or wish to make a complaint, contact us:
Phone: 1300 646 118
Email: [email protected]
Post: 4 Earsdon Street, Yarraville VIC 3013
Online: the contact form at redherring.au/contact
We will acknowledge your complaint within 48 hours and provide a response within 30 days.
If you are unsatisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner:
Post: GPO Box 5218 Sydney NSW 2001
Phone: 1300 363 992
Website: www.oaic.gov.au
About this policy
We may amend this policy from time to time. The current version is always published on our website, with the date it was last updated shown at the top.