Legal
Privacy policy.
LAST UPDATED · 27 AUGUST 2026SSJC Media Group ("SSJC", "I", "we") is a sole-trader business operated by Craig Cullen on the Gold Coast, Queensland. This policy explains how personal information is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including the reforms that progressively apply from 2024 to 2026. Compliance with these rules is also part of what we sell, so we hold ourselves to them first.
What we collect
- Enquiry details you submit through the contact form or the guided enquiry steps: name, phone number, email address, business name, industry, your answers to the enquiry questions, how you heard about us if you choose to say, and anything you write in the message field.
- A first-party arrival note sent with your enquiry: the link or site that referred you (or the tag on the link you clicked) and the time you landed. It lives in one hidden form field, uses no cookies and no third-party analytics, and is sent only if you press send.
- Correspondence, emails, calls and messages you exchange with us afterwards, including notes from discovery calls.
This website itself makes zero third-party requests: no analytics trackers, no advertising pixels, no embedded fonts or scripts from other companies. We may review anonymous, server-side traffic counts provided by our hosting provider, which involve no cookies and no profiling.
Why we collect it
- To respond to your enquiry and hold the calls you've asked for.
- To prepare and deliver services you engage us for.
- To keep basic business records we're legally required to keep.
We do not send marketing newsletters unless you explicitly ask for them, and we never sell or trade personal information.
Where it lives
Form submissions are delivered to our email inbox and stored by our website host (Netlify) and, once we're in contact, in our CRM (HubSpot). These providers store data on servers that may be located overseas (including the United States); we take reasonable steps to ensure they handle personal information consistently with the APPs, including relying on their contractual privacy and security commitments.
How long we keep it
Enquiry details that don't become client work are reviewed at least annually and deleted when no longer needed (across the inbox, the website host's form store and the CRM). Client records are kept for the periods required by Australian tax and business record-keeping law, then deleted.
Security
Access to the inbox, CRM and hosting accounts is limited to Craig Cullen, protected by strong unique passwords and multi-factor authentication. If a data breach occurs that is likely to result in serious harm, we will notify affected people and the OAIC as required by the Notifiable Data Breaches scheme.
AI disclosure
Nothing we install talks to anyone on its own. Where a system we install generates text, it is presented to a person at the client's business, who reads it and sends it from their own account under their own name. No message reaches a customer without a human approving it first. Where we use AI tools to help prepare work, a human (Craig) reviews it and remains accountable for the output. If any part of our service ever does communicate with you directly, it will say so.
Access, correction and complaints
You can ask at any time to see the personal information we hold about you, have it corrected, or have it deleted (where the law doesn't require us to keep it). We respond to access, correction and deletion requests within 30 days. Email admin@ssjcmediagroup.com. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.