CREO Digital Studio creative digital services

Privacy Policy

 

Last updated: July 2026

 

CREO Digital Studio respects your privacy and is committed to protecting the personal information and digital access entrusted to us.

 

1. What information we collect

 

We only collect information that is reasonably necessary to operate our business and provide our services.

This may include:

 

  • your name;
  • business name;
  • email address;
  • telephone number;
  • project information;
  • billing and invoice details;
  • website content and digital assets; and
  • passwords or account access details required to provide our services.

 

We may also collect non-personal and technical information through cookies, analytics and tracking tools, as explained in Section 6.

 

2. How we collect your information

 

We may collect information directly from you when you:

 

  • submit a contact form on our website;
  • request a quotation;
  • contact us by email, telephone or social media;
  • sign up to receive communications;
  • engage CREO to provide services;
  • provide project files or business information; or
  • grant access to a website, social media account or digital platform.

 

We do not collect or store complete payment-card details directly. Payments may be processed by banks, accounting platforms or third-party payment providers under their own privacy policies.

 

3. How we use your information

 

We may use your information to:

 

  • respond to enquiries;
  • prepare quotations and proposals;
  • provide social media, digital design and website services;
  • communicate with you about projects and approvals;
  • administer client accounts;
  • process invoices and payments;
  • provide technical support;
  • improve our website and client experience;
  • maintain business and taxation records; and
  • support marketing and advertising activities where permitted.

 

We do not sell or rent personal information or client databases.

 

4. Client accounts and passwords

 

CREO may require access to client-owned accounts to provide website management, social media management and related digital services.

 

These may include:

 

  • website administration accounts;
  • domain and hosting accounts;
  • social media accounts;
  • Meta Business Manager;
  • Google Business Profile;
  • analytics and advertising accounts;
  • email marketing platforms; and
  • other digital services included in the agreed scope.

 

Where possible, clients should provide CREO with separate user, partner or agency access instead of sharing a primary password.

 

Where a password must be provided, we take reasonable steps to:

 

  • keep it confidential;
  • restrict access to authorised personnel;
  • use it only to provide the agreed services;
  • store it securely;
  • avoid sharing it through unsecured channels; and
  • delete or return it when access is no longer required.

 

Clients are responsible for maintaining ownership of their accounts, using strong and unique passwords, enabling multi-factor authentication where available and notifying CREO immediately of any suspected unauthorised access.

 

When an engagement ends, clients should remove CREO’s account access and change any password previously shared with CREO.

 

5. Third-party services

 

We use trusted third-party platforms to help operate our website and provide digital services.

 

These may include:

 

  • Google Analytics;

  • Google Business Profile;

  • Meta, Facebook and Instagram;

  • Wix or WordPress;

  • website hosting and domain providers;

  • cloud-storage services;

  • email and communication platforms;

  • accounting and payment providers; and

  • design and project-management platforms.

  •  

These providers may collect, store or process information in accordance with their own privacy policies.

 

CREO does not control the independent privacy or security practices of third-party platforms.

 

6. Cookies and tracking

 

Our website may use cookies and similar technologies to:

 

  • analyse website traffic;
  • understand how visitors use our website;
  • improve functionality and performance;
  • measure campaign effectiveness; and
  • support advertising and retargeting.

 

This may include Google Analytics and Meta advertising technologies.

 

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect your experience or some website functions.

 

Where required, we will provide an option to manage non-essential analytics and advertising cookies.

 

7. Marketing and communications

 

We may contact you if you submit an enquiry, request a quotation or engage our services.

 

We may also send marketing communications where you have provided consent or where otherwise permitted by law.

 

Submitting a general enquiry will not automatically subscribe you to ongoing marketing.

 

Any marketing email will include a clear way to unsubscribe. You may opt out at any time by selecting the unsubscribe link or contacting us directly.

 

We may continue to send essential communications relating to an active project, service, account or invoice.

 

8. Client and customer information

 

While managing a client’s website or social media accounts, CREO may have access to information belonging to the client’s customers, followers or website visitors.

 

This may include contact-form submissions, comments, messages, subscriber details, website analytics and customer enquiries.

 

We only access this information as reasonably necessary to provide the agreed services.

 

The client remains responsible for its own privacy policy, customer consents and legal obligations. CREO will not use a client’s customer database for its own marketing.

 

9. Data security

 

We take reasonable steps to protect personal information, passwords and account access details from misuse, loss, interference and unauthorised access or disclosure.

 

These measures may include:

 

  • password protection;
  • multi-factor authentication;
  • access controls;
  • secure cloud storage;
  • limited contractor access; and
  • secure deletion practices.

 

However, no website, online platform or electronic storage system can guarantee complete security.

 

Please do not send passwords or sensitive information through public comments or unsecured social media messages.

 

10. Overseas data processing

 

Some of the digital platforms we use, including website, analytics, social media and cloud-storage providers, may store or process information outside Australia.

 

Where applicable, we take reasonable steps to ensure personal information is handled in accordance with Australian privacy requirements.

 

11. Access, corrections and complaints

 

You may request access to or correction of personal information held by CREO by contacting us.

We may ask you to verify your identity before processing the request.

 

If you have a concern about how your information has been handled, please contact us with details of the issue. We will investigate the matter and aim to respond within 30 days.

 

If you are not satisfied with our response and the Australian Privacy Act applies, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

 

12. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology, business practices or legal obligations.

 

Any changes will be published on this page with the updated date.

 

13. Contact us

If you have questions about this Privacy Policy or how your information is handled, please contact:

 

CREO Digital Studio
Email: admin@creodigitalstudio.com.au
Telephone: +61 423 345 360
Sydney, NSW, Australia
Website: www.creodigitalstudio.com.au