1. Who we are
VAS Enterprise (ABN: 99 476 213 056, "we", "us", "our") is a conversion rate optimisation and Shopify development business based in Brisbane, Queensland, Australia. This policy explains what personal information we collect through [vasenterprise.com.au], why we collect it, who we share it with, and how you can access, correct or delete it.
We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
If you have any questions about this policy, email us at [ryan@vasenterprise.com.au].
2. What personal information we collect
We only collect information that is reasonably necessary to run our business. That's mostly contact details.
Information you give us directly:
Name
Email address
Business or brand name and website URL
Phone number (only if you choose to give it)
Anything you write to us in a form, email or booking note
Information collected automatically when you visit the site:
IP address and approximate location
Browser type, device type and operating system
Pages viewed, time on page, referring website
Cookie and similar identifiers
Information from public sources:
If we contact you first, we may have collected your business name, business email address, website URL and publicly visible social media details from publicly available sources. We collect this only where it relates to your role in a business and is relevant to the services we offer. If you'd rather we didn't hold it, tell us and we'll delete it.
We do not collect sensitive information (such as health, racial or ethnic origin, religious or political information), and we don't ask for it. Please don't send it to us.
We don't take payment details through this website.
3. How we collect it
Contact and enquiry forms on the site
Sign-up forms for free resources, guides, teardowns and project breakdowns
Booking a call or consultation
Email, DM or phone conversations with us
Cookies and analytics tools on the site
Publicly available business listings and websites
4. Why we use it
We use your personal information to:
Reply to your enquiry
Send you the free resource, guide, teardown or project breakdown you asked for
Send you follow-up emails about our services, including more than one email over time
Send occasional marketing emails, case studies, project breakdowns and other content we think is useful to brands like yours
Quote for, deliver and support the work we do for clients
Understand how people use our website so we can improve it
Meet our legal and record-keeping obligations
Being upfront about the follow-ups: if you give us your email address, expect more than one email from us. We'll follow up, and we'll keep sending you content and offers until you tell us to stop. Every email has a one-click unsubscribe link, and we act on unsubscribes promptly, as required by the Spam Act 2003 (Cth). You can also reply "unsubscribe" or email us and we'll take you off the list.
We do not sell, rent or trade your personal information to anyone. Ever.
We don't use automated decision-making or AI systems to make decisions about you that have a legal or similarly significant effect.
5. Who we share it with
We use third-party service providers to run the business. They only get what they need, and only to provide their service to us. These fall into the following categories:
Website hosting and forms [e.g. Framer]
Email marketing and sending [e.g. Instantly, Klaviyo]
CRM and lead management [e.g. Clay, Notion, Notion Calendar]
Analytics [e.g. Google Analytics, Hotjar]
Scheduling [e.g. Calendly, Cal.com, Notion Calendar]
Cloud storage and productivity [e.g. Google Workspace, Notion]
We may also disclose personal information where we're required to by law, or where it's necessary to protect our legal rights.
Overseas disclosure: some of these providers store data outside Australia, most commonly in the United States and the European Union. By submitting your details, you consent to that disclosure. We take reasonable steps to use providers with appropriate data protection commitments, but overseas recipients may not be subject to the Australian Privacy Principles.
6. Cookies and analytics
Our website uses cookies and similar technologies to make the site work, remember your preferences and measure traffic.
You can block or delete cookies in your browser settings. Some parts of the site may not work properly if you do.
7. How we store and protect it
We store personal information in secure, access-controlled cloud services. We use measures including password protection and limited access to reduce the risk of misuse, loss or unauthorised access.
No system is completely secure. If a data breach happens that is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC), as required under the Notifiable Data Breaches scheme.
8. How long we keep it
We keep your information for as long as we need it for the purposes above, plus any period required by law (for example, financial records for seven years). If you unsubscribe, we keep a minimal record of your email address so we don't contact you again. If you ask us to delete your details entirely, we will, unless we're legally required to keep them, in which case we will inform you.
9. Accessing, correcting or deleting your information
You can ask us to:
Tell you what personal information we hold about you
Correct anything that's wrong or out of date
Delete your information
Stop sending you marketing emails
Email [ryan@vasenterprise.com.au] and we'll respond within 30 days.
10. Complaints
If you think we've mishandled your personal information, email [ryan@vasenterprise.com.au] with the details. We'll investigate and respond within 30 days.
UK and EU visitors (UK GDPR / GDPR): where GDPR applies, our lawful bases for processing are your consent (for marketing emails), our legitimate interests (running and marketing a B2B service to relevant businesses) and performance of a contract (for client work). You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your local supervisory authority, such as the UK Information Commissioner's Office.
California visitors (CCPA/CPRA): we do not sell or share your personal information for cross-context behavioural advertising. You have the right to know what we collect, to request deletion and to not be discriminated against for exercising those rights.
To exercise any of these rights, email [ryan@vasenterprise.com.au].
12. Changes to this policy
We may update this policy from time to time. The current version is always on this page with the date it was last updated. If we make a significant change, we'll let you know by email or a notice on the site.