Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: 27 April 2026

1. About this policy

MM Social Media Marketing collects and handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why we collect it, who we share it with, and how you can access, correct, or complain about it.

It applies to our website, our marketing services, our communications with prospective and current clients, and any data we hold about individuals connected to clients we work for.

2. Who we are

MM Social Media Marketing operates from 180 Happy Jack Drive, Bellbird Park QLD 4300. ABN 59 649 843 256. We provide social media management, website development, search engine optimisation, paid advertising, branding, and creative services to small and medium businesses across Australia.

Throughout this policy, “we”, “us”, and “our” mean MM Social Media Marketing. “You” means any person whose personal information we hold or collect.

3. What information we collect

We collect personal information that is reasonably necessary for our business activities. Depending on how you interact with us, we may collect:

  • Name, business name, email address, phone number, and postal address
  • Information you provide about your business, marketing goals, target audience, and competitors
  • Login credentials and access tokens for platforms we manage on your behalf, such as Facebook, Instagram, LinkedIn, Google Ads, Google Business Profile, and your website
  • Billing details, including bank account or card details processed through third-party payment providers
  • Website usage data including IP address, device type, browser type, pages viewed, time on page, and referring URL (collected automatically through cookies and analytics)
  • Photos, videos, testimonials, and content you provide for use in marketing materials, with your consent
  • Records of our communications with you, including emails, phone calls, and messages

We do not collect sensitive information (such as health information, religious beliefs, or membership of a political organisation) unless it is directly relevant to a service you have engaged us for and you have given consent.

4. How we collect your information

We collect personal information directly from you when you submit a contact form, request a quote, email or call us, sign a service agreement, share access to a business platform so we can manage it, or attend a meeting with us. We may also collect information from publicly available sources such as your business website or public social media profiles when researching prospective clients or competitors.

5. Why we collect your information

We use personal information to:

  • Respond to enquiries and prepare quotes or proposals
  • Deliver the services we have agreed to provide
  • Manage your account, invoices, and payments
  • Communicate with you about your projects, results, and any changes to our services
  • Improve our website and our service quality
  • Meet our legal obligations under tax, contract, and consumer law
  • Send you marketing communications where you have opted in or where the law allows

6. Anonymity and pseudonymity

Where it is lawful and practical, you can deal with us anonymously or under a pseudonym. For example, you can browse our website, ask general questions about our services, or submit anonymous feedback without identifying yourself. For most service engagements, we need your real name and contact details so we can deliver the service and meet our legal obligations.

7. Cookies and tracking

Our website uses cookies and similar technologies. The categories we use are:

  • Strictly necessary cookies for site functionality, such as form submission and security
  • Analytics cookies through Google Analytics 4 to count visits and understand which content is useful
  • Advertising cookies through Google Ads and Meta (Facebook and Instagram) to measure the performance of campaigns we run for ourselves and our clients

You can disable or delete cookies through your browser settings. Disabling cookies may affect how some parts of our website work.

8. Direct marketing

We may send you marketing emails or messages about our services if you have opted in or where the law allows. Every marketing email we send includes an unsubscribe link, in line with the Spam Act 2003 (Cth). To opt out, click the unsubscribe link, reply to the email asking to be removed, or contact us using the details in section 17.

We do not make telemarketing calls. If we did, we would check the Do Not Call Register first as required under the Do Not Call Register Act 2006 (Cth).

9. Third parties we share information with

We share personal information only when we need to deliver our services or meet a legal obligation. The third parties we use include:

  • SiteGround for website and email hosting
  • Google LLC for Google Analytics 4, Google Ads, Google Business Profile, Google Search Console, and Google Workspace
  • Meta Platforms, Inc. for Facebook and Instagram advertising and business tools
  • Microsoft Corporation for Microsoft 365 and OneDrive file storage and email
  • Payment processors we use to invoice and accept payments
  • Professional advisers such as accountants, bookkeepers, and lawyers, where required
  • Government and regulatory bodies when required by law, such as the Australian Taxation Office

We do not sell or rent personal information to third parties.

10. Information we handle on behalf of clients

As a marketing agency, we sometimes receive, store, or process personal information that belongs to our clients’ customers, leads, or audiences. Examples include ad targeting lists, email subscribers, lead form submissions, and analytics data.

When we handle data on behalf of a client, the client is the entity responsible under the Privacy Act for that data. We act as a service provider. If you are a customer or lead of one of our clients and want to access, correct, or delete information held about you, please contact the client directly. We will assist them in responding to your request.

11. Sending information overseas

Some of the services we use store data outside Australia:

  • Google services (Analytics, Ads, Workspace) may store data in the United States, the European Union, and other countries where Google operates data centres
  • Meta services (Facebook, Instagram) store data primarily in the United States and Ireland
  • Microsoft 365 and OneDrive store data in Australian and international data centres
  • SiteGround hosts our infrastructure on servers in Australia, with backups stored in other regions

Before sending personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs. We remain accountable under Australian law for what overseas recipients do with information we send them, except in narrow circumstances permitted by APP 8.2.

12. How we store and protect your information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include:

  • Encrypted connections (HTTPS) for our website and online portals
  • Strong passwords and multi-factor authentication on accounts that hold personal information
  • Access controls so staff only see information they need for their role
  • Regular software updates and security reviews
  • Backup and recovery procedures

We retain personal information only for as long as we need it to provide our services and meet our legal obligations. Client and financial records are typically kept for seven years to meet Australian Taxation Office requirements. Where the law requires longer retention, we keep the information for that longer period. When we no longer need information, we destroy it or de-identify it.

13. Data breach notification

Australia’s Notifiable Data Breaches scheme requires us to notify affected individuals and the Office of the Australian Information Commissioner if there is an eligible data breach that is likely to result in serious harm. If a breach occurs and meets that threshold, we will notify you as soon as we reasonably can with details of what happened, what information was involved, and steps you can take.

14. Accessing and correcting your information

You have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it is wrong. To make a request, email info@mmsocialmediamarketing.com.au or call 0490 007 277. We may need to verify your identity before responding.

We will respond within 30 days. There is usually no cost. If we refuse access (for example because the law lets us, or because the request would compromise someone else’s privacy), we will explain why and how you can complain.

Australian law gives you the right to request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information. It does not give an unconditional right to deletion in the way overseas laws like the GDPR do. In practice we will delete information we no longer need, on request, where doing so does not breach a legal obligation we have.

15. Children’s privacy

Our services are aimed at businesses and adults. We do not knowingly collect personal information from children under 18. If you think a child has given us personal information, please contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a new “Last updated” date. For material changes, we will let existing clients know by email.

17. Complaints and contact

If you have a question, complaint, or request about how we handle personal information, please contact us first:

We will acknowledge complaints within seven days and aim to resolve them within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):