Privacy Policy

What we collect

When you fill in a form, book an audit or email us, we collect what you type: name, email, phone number and whatever details you share about your business. When you browse the site we collect standard analytics data: pages viewed, approximate location, device and which ad or search brought you here.

We do not collect sensitive information, we do not scan your social profiles, and we do not buy contact lists. If you didn't give it to us, we don't have it.

In short

• Form details you type yourself
• Anonymous analytics on page views
• Ad platform attribution data
• Nothing sensitive, nothing purchased

How we use it

Your contact details are used to reply to you, deliver your audit or report, and run the service you signed up for. Analytics data is used to understand which pages help people and which ads actually work.

If you join the newsletter, you get one email a week with an unsubscribe link that actually works. We never sell or rent your details to anyone, and we never will.

Who sees it

Inside Target Growth Lab, only the people working on your enquiry see your details. Outside, we use a small set of processors: our email platform, our analytics tools (GA4, Meta Pixel) and our CRM, all bound by their own data processing terms.

Some of these processors store data outside Australia (mostly the US). We use them because they are the industry standard for the work, and we configure them to collect the minimum needed.

Your rights

Under the Australian Privacy Act 1988 you can ask to see, correct or delete the personal information we hold about you. Email us and we will action it within 30 days, usually much faster.

If you're in the EU or UK, GDPR gives you the same rights plus data portability and the right to object to processing. The same email address handles all of it, and our Legal & GDPR page goes into detail.

Retention and security

Lead and enquiry data is kept while your enquiry is active and for up to 24 months after, in case you come back. Client account data is kept for the duration of our work together plus what tax law requires.

Access is limited to staff who need it, accounts use two-factor authentication, and we don't store payment card details at all. Ad spend is always billed directly by the platforms.