CHLOE GROWS · POLICIES

Privacy Policy

For website visitors, freebie applicants, prospective clients, paid clients and business contacts.

Last updated: 1 August 2026

1. Who we are

Chloe Grows is operated by Chloe D'Aprile, a sole trader trading as Chloe Grows (ABN 57 564 697 181) (we, us or our). Chloe Grows provides practical small-business audits, strategy, content, copywriting, Shopify, website, SEO and related support.

This Privacy Policy explains how we collect, hold, use and disclose personal information through our websites, landing pages, forms, emails, social media, free resources, client projects and third-party platforms such as Airtasker.

Some small businesses may be exempt from parts of the Privacy Act 1988 (Cth). We have nevertheless chosen to publish this policy and aim to handle personal information transparently and consistently with the Australian Privacy Principles where they apply.

2. Personal information we may collect

• Identity and contact details, such as your name, email address, telephone number and preferred contact method.
• Business information, such as your business name, role, website, social media handles, industry, location and audience.
• Enquiry and project information, such as your goals, challenges, questionnaire responses, messages, instructions, approvals, feedback and files you choose to provide.
• Public business content needed for an audit or review, such as publicly available website pages, social profiles, posts, reviews or search results.
• Transaction and administration information, such as quotes, invoices, payment status, tax records and service history. We do not intentionally store full card details when payment is handled by a payment or platform provider.
• Technical and usage information, such as IP address, device and browser information, referral source, page interactions, form events, cookies and consent preferences where those tools are enabled.
• Marketing preferences, subscription status and interactions with emails or resources.
• Feedback, reviews, testimonials and case-study material, but we will seek permission before identifying you publicly.

3. How we collect information

• Directly from you through forms, emails, messages, calls, social media, meetings, questionnaires, file sharing and project delivery.
• From platforms you use to contact or engage us, such as Airtasker, HubSpot or social media.
• From public business sources where reasonably necessary to complete an audit, review or agreed service.
• From a person referring you or acting for your business, where they have authority to provide the information.
• Automatically through cookies, server logs or analytics tools, if enabled and subject to the available consent controls.

4. Why we use personal information

• Respond to enquiries and confirm whether a service or free resource is suitable.
• Prepare and deliver free mini audits, paid audits, strategies, copy, documents and other agreed work.
• Create quotes, invoices, project records, handovers, reminders and follow-ups.
• Communicate about scope, access, progress, revisions, payments, complaints and support.
• Maintain CRM, project, financial, quality and compliance records.
• Improve our services, forms, resources, website flow and client experience using aggregated or de-identified insights where practical.
• Protect our systems, prevent spam or misuse and meet legal or regulatory obligations.
• Send practical tips, offers or promotional follow-up only where we have consent or another lawful basis, with an unsubscribe option.

5. AI-assisted and digital tools

We may use reputable digital and AI-enabled tools to assist with tasks such as drafting, summarising, research support, categorisation, document formatting, workflow automation and quality checks. AI-assisted outputs are reviewed by a person before client-facing use where appropriate and are not treated as a substitute for professional legal, financial, tax, accounting or regulated advice.

We aim to minimise, redact or de-identify personal information before using AI tools where practical and do not intentionally provide passwords or highly sensitive information. These providers may process information in Australia, the United States and other countries under their own terms and privacy practices.

Chloe Grows does not currently use personal information to make solely automated decisions that significantly affect a person's rights or interests. If that changes, this policy and the relevant notices will be updated before the change is introduced.

6. When we may disclose information

We may disclose personal information only where reasonably necessary to:

• Technology and service providers that host, store, organise, automate, analyse, design, communicate or process information on our behalf. These may include HubSpot, Google Workspace, Notion, Make, OpenAI/ChatGPT, Canva, Airtasker and accounting, invoicing or payment providers.
• Professional advisers such as a lawyer, accountant, insurer or IT/security adviser where needed.
• A regulator, court, law-enforcement body or other person where required or authorised by law.
• A purchaser or successor if the business is restructured or sold, subject to appropriate confidentiality and privacy steps.

We do not rent or sell contact lists or personal information to third parties.

7. Overseas processing and disclosure

Some service providers and their subprocessors operate outside Australia. Personal information may therefore be processed or disclosed in the United States and other countries where those providers or subprocessors operate. We take reasonable steps when selecting and using providers and review their available privacy, security and data-processing information.

8. Cookies and tracking

Our pages may use essential cookies and, if enabled, analytics, functionality or marketing cookies. Tracking tools can collect technical and interaction information and may connect activity with a contact record. See our Cookie & Tracking Notice and use the available cookie settings to manage non-essential cookies.

9. Marketing communications

Submitting an enquiry or requesting a free resource does not automatically subscribe you to ongoing promotional emails. Where marketing consent is requested, it will be presented separately from the information needed to process your request.

You can unsubscribe at any time using the link in a marketing email or by contacting us. We will action unsubscribe requests within the time required by the Spam Act 2003 (Cth). We may still send non-promotional messages needed to deliver a requested resource, manage an active service or respond to you.

10. How we protect and retain information

We take reasonable administrative and technical steps to protect personal information, including access controls, secure service providers, strong account security, limited sharing and data minimisation. No online system can be guaranteed completely secure.

We retain information only for as long as reasonably needed for the purpose collected, to maintain records, resolve disputes and meet legal obligations. Most relevant business and tax records are generally kept for at least five years. As an operational starting point, inactive enquiry and freebie records should be reviewed after 24 months and deleted or de-identified where no longer needed. A minimal suppression record may be retained to honour an unsubscribe request.

11. Access, correction and deletion requests

You may ask what personal information we hold about you, request a correction or ask us to delete information that is no longer needed. We may need to verify your identity and may retain information where required by law or reasonably needed for legal, accounting, dispute or security purposes. Contact us using the details below.

12. Anonymity and pseudonyms

You may browse public pages without identifying yourself and may use a pseudonym for a general question where practical. We may need accurate identity, business and contact details to personalise an audit, enter a contract, provide secure access, invoice you or meet legal obligations.

13. Privacy complaints and data incidents

If you have a privacy concern, contact us with enough detail to understand the issue. We aim to acknowledge a complaint within five business days and provide an outcome or progress update within 30 days. If the Privacy Act applies and you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

If a data incident occurs, we will assess it, take reasonable containment and remediation steps, and notify affected people and regulators where required by law.

14. Changes to this policy

We may update this policy when our services, tools or legal obligations change. The current version will be posted on our website with the updated date. Material changes will apply from the date stated and will not retrospectively remove rights that have already accrued.

15. Contact

If you have a question about this policy or how Chloe Grows handles your information, please get in touch.

Privacy contact: Chloe Grows
Email: hello@chloegrows.com
Operator: Chloe D'Aprile, sole trader trading as Chloe Grows
ABN: 57 564 697 181
Location: South Australia