Legal

Privacy policy.

SSJC Media Group ("SSJC", "I", "we") is a sole-trader business operated by Craig Cullen on the Gold Coast, Queensland. This policy explains how personal information is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including the reforms that progressively apply from 2024 to 2026. Because the systems I install handle other people's customer data, I hold myself to these rules first.

What we collect

• Enquiry details you submit through the contact form or the guided enquiry steps: name, phone number, email address, business name, industry, your answers to the enquiry questions, how you heard about us if you choose to say, and anything you write in the message field.
• Build request details you submit through the build request form at /build.html: see the build request form below.
• A first-party arrival note sent with your enquiry: the link or site that referred you (or the tag on the link you clicked) and the time you landed. It lives in one hidden form field, uses no cookies and no third-party analytics, and is sent only if you press send.
• Correspondence, emails, calls and messages you exchange with us afterwards, including notes from discovery calls.

This website itself makes zero third-party requests: no analytics trackers, no advertising pixels, no embedded fonts or scripts from other companies.

The build request form

The form at /build.html is for people asking about a website or a custom AI system. It collects:

• what you want built (a website, a custom AI system, both, or not sure yet) and the description you write;
• your business name if you give one, your industry, a rough budget band and when you need it;
• your name, email address and phone number;
• the times you ask for the call, stored as readable text and as a date and time in Brisbane time, or whatever you write in the times box instead;
• which of the optional boxes, if any, you ticked.

The times you can pick are worked out in your own browser from the current Brisbane time. Nothing about them, and nothing you type, leaves the page until you press send.

When you send it, the form is stored by Netlify Forms (the service that hosts this website) and emailed to Craig. Once we are in contact, your details may be copied into Craig’s CRM (HubSpot). It is used to reply to you, to hold the call you asked for, and to scope and quote the work. It is not used for marketing unless you tick one of the optional boxes (see Marketing, and how to stop it).

To have a build request deleted, email me and say which request it was. It is then deleted from Netlify Forms, the inbox and the CRM, except anything the law requires us to keep.

Marketing, and how to stop it

Every form on this site has two unticked boxes. Leaving them blank changes nothing about your enquiry or the reply.

• The email box reads: “Yes, Craig can email me now and then about SSJC's services, until I say stop. Every email says who sent it and has a stop line.” If you tick it, Craig may email you about SSJC's services. Each email names SSJC Media Group and its ABN. Reply stop, or email me, and no further marketing email is sent after five business days at most.^S26
• The call-or-text box reads: “Yes, Craig can call or text me about other SSJC services, not only this enquiry, until I say stop. Reply STOP to a text, or say so on the call, and all contact stops.” If you tick it, Craig may call or text this number about SSJC's services. Calls and texts stay inside these hours: weekdays 9am to 8pm, Saturdays 9am to 5pm, never on Sundays or national public holidays, in your local time.^S29 Every text names Craig and SSJC Media Group and says how to stop. Reply STOP to any text, or say so on a call, and your details go on my do-not-contact list, which I check before every block of calls.

What happens with your enquiry. Without a tick, Craig replies about your enquiry on the channel you gave. If you gave a number, he may ring it about your enquiry, inside the calling hours above. He sends the Free read, scope or quote you asked for. Each reply says who sent it and how to stop. If you do not answer, the follow-up ends after a few tries on separate days, and nothing further is sent.

The record. Each submission is stored by Netlify with an id and a time. A hidden field records the version of the wording you saw, and every version is kept word for word. The same details go into my call log and, once we are talking, my CRM. If you ask to stop, that is logged too, and kept, so it is not undone by mistake.

Withdrawing. Reply stop to any message, say so on a call, or email me. One stop, on any channel, stops all contact from us: marketing emails, texts and calls, and the reply thread about your enquiry. If you want to hear from us again after that, send a new enquiry.

The “Email me” buttons

The “Email me” buttons open your own email app addressed to our business inbox (admin@). If your browser does not run scripts, the button takes you to an enquiry form on this site instead, which reaches Craig.

Why we collect it

• To respond to your enquiry and hold the calls you've asked for.
• To prepare and deliver services you engage us for.
• To keep basic business records we're legally required to keep.

We send no marketing unless you tick a box asking for it, and we never sell or trade personal information.

Where it lives

Netlify passes each submission through a spam filter (Akismet) before it reaches us.

Form submissions are delivered to our email inbox and stored by our website host (Netlify) and, once we're in contact, in our CRM (HubSpot). These providers store data on servers that may be located overseas (including the United States); we take reasonable steps to ensure they handle personal information consistently with the APPs, including relying on their contractual privacy and security commitments.

How long we keep it

Enquiry details that don't become client work are reviewed at least annually and deleted when no longer needed (across the inbox, the website host's form store and the CRM). Client records are kept for the periods required by Australian tax and business record-keeping law, then deleted.

Records of consent, and of any request to stop, are kept for as long as they are needed to show what you asked for and to honour it.

Security

Access to the inbox, CRM and hosting accounts is limited to Craig Cullen, protected by strong unique passwords and multi-factor authentication. If a data breach occurs that is likely to result in serious harm, we will notify affected people and the OAIC as required by the Notifiable Data Breaches scheme.

AI disclosure

Nothing we install talks to anyone on its own. Where a system we install generates text, it is presented to a person at the client's business, who reads it and sends it from their own account under their own name. No message reaches a customer without a human approving it first. Where we use AI tools to help prepare work, a human (Craig) reviews it and remains accountable for the output. If any part of our service ever does communicate with you directly, it will say so.

Access, correction and complaints

You can ask at any time to see the personal information we hold about you, have it corrected, or have it deleted (where the law doesn't require us to keep it). We respond to access, correction and deletion requests within 30 days. Email me. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Complaints about marketing emails or texts can also go to the Australian Communications and Media Authority (acma.gov.au).

← Back to the site