Privacy Policy

OSEO DIGITAL ("OSEO", "we", "our", "us") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth). This policy explains what personal information we collect, why we collect it, how we use and disclose it, and the choices you have.

1. Who we are

OSEO is a search intelligence business operating from 1438, 180D George Street, Parramatta, NSW 2150, Australia. You can contact our Privacy Officer at privacy@oseo.com.au or +61 421 670 436.

2. Personal information we collect

• Contact details you provide via forms, email, phone or bookings (name, business email, company, phone, website URL).
• Audit data submitted through our free website audit tool, including URLs you ask us to analyse and the resulting reports.
• Technical data collected automatically: IP address, device type, browser, referring URL, pages viewed and interaction events (only if you consent to analytics cookies).
• Communications you send us and our responses.

We do not knowingly collect sensitive information as defined by the Privacy Act.

3. How we collect it

We collect information directly from you when you complete a form, request an audit, book a consultation, subscribe to updates, or contact us. We collect technical data automatically through cookies and analytics tools where you have provided consent.

4. Why we collect and use it

• To deliver the services or reports you have requested.
• To respond to enquiries and provide customer support.
• To send transactional emails (audit reports, booking confirmations, account notices).
• With your consent, to send marketing communications you may unsubscribe from at any time.
• To improve our website, services and security.
• To meet legal, tax and regulatory obligations in Australia.

5. Direct marketing and the Spam Act 2003

We only send commercial electronic messages where you have consented (expressly or through an existing business relationship). Every marketing email includes clear sender identification and a functional unsubscribe link that we honour within 5 business days.

6. Disclosure to third parties

We share personal information only with trusted service providers who help us operate, including:

• Hosting, database and authentication (Lovable Cloud / Supabase, hosted in the EU/US).
• Transactional email delivery (Resend, via our verified sender domain notify.oseo.com.au).
• Analytics (Google Analytics 4, with IP anonymisation) — only if you accept analytics cookies.
• Scheduling (Calendly) — only when you choose to book a consultation.
• Legal or regulatory bodies where required by Australian law.

We do not sell your personal information.

7. Overseas disclosure (APP 8)

Some of our service providers store or process data outside Australia, including in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs, including through contractual protections.

8. Data security and retention

We use encryption in transit (TLS), access controls and role-based permissions to protect your information. We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Audit lead records are retained for 24 months from last activity unless you request earlier deletion.

9. Your rights under the Australian Privacy Principles

You may, at no cost:

• Request access to the personal information we hold about you (APP 12).
• Request correction of inaccurate or out-of-date information (APP 13).
• Withdraw consent to marketing or optional cookies at any time.
• Request deletion where we are not required to retain the information.

Send requests to privacy@oseo.com.au. We aim to respond within 30 days.

10. Notifiable Data Breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

11. Cookies

For details on the cookies we use and how to manage them, see our Cookie Policy.

12. Making a complaint

If you believe we have breached the APPs, please contact our Privacy Officer first. If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au or on 1300 363 992.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be notified on our website.