Privacy Policy

1. Information We Collect

We collect the following categories of information:

Personal Information you provide directly

• Name, email address, phone number, and company/organisation details when you book a strategy session, submit a contact form, or correspond with us.
• Any additional information you voluntarily include in messages, session booking notes, or attachments.

Automatically Collected Information

• IP address, browser type, device information, operating system, and referring URL.
• Usage data such as pages visited, time spent on the Website, and clickstream data (via cookies and similar technologies).

Cookies and Tracking Technologies

We use essential cookies to enable core Website functionality (e.g., session management). On the production site (macleodglba.com) we use Google Analytics 4, measurement ID G-H64NWNDMYZ. Google Analytics sets analytics cookies (including cookies whose names start with _ga) to understand which pages visitors open and how the site is used. The tag is not loaded in local development or on preview deployments. You can block or delete these cookies in your browser settings. We do not sell your personal information to third parties.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our services, including responding to enquiries and delivering Brand Systems Strategy Sessions.
• Communicate with you about consultations, follow-ups, or relevant brand and packaging architecture insights.
• Analyse Website usage and improve user experience.
• Comply with legal obligations and protect our rights.
• Send occasional updates about Macleod GLBA services (you may opt out at any time).

3. Legal Basis for Processing (GDPR where applicable)

For visitors in the EU/EEA, our processing is based on:

• Your consent (where required).
• Performance of a contract (e.g., delivering a booked strategy session).
• Legitimate interests (e.g., improving our services and communicating with you).
• Compliance with legal obligations.

4. Sharing Your Information

We may share your information with:

• Service providers who assist us (e.g., email service providers, website hosting, analytics providers, calendar booking tools). These providers are contractually required to protect your data.
• Professional advisers (legal, accounting) where necessary.
• Law enforcement or regulators when required by law.

Sharing with TheAgencyIQ

We do not share your information with TheAgencyIQ or any other third-party product unless you explicitly request a connection between the two services.

5. Data Security

We implement reasonable technical and organisational measures to protect your personal information, including encryption in transit, secure servers, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Session booking data is typically retained for 24 months after the session date unless you request earlier deletion.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information (subject to legal exceptions).
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Data portability (where applicable).

How to Exercise Your Rights

To exercise these rights, contact us using the details below. We will respond within 30 days (or sooner where required by law). Australian residents also have rights under the APPs, including the right to complain to the Office of the Australian Information Commissioner (OAIC).

8. International Transfers

Your data may be processed in Australia and other countries where our service providers operate. We ensure appropriate safeguards are in place for any cross-border transfers.

9. Children's Privacy

Our Website is not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated effective date. We encourage you to review it periodically.