Privacy Policy

1. This Privacy Policy explains how Pulse & Flow Haus Pty Ltd (ABN 97 699 360 720) (“PFH”, “we”, “us” or “our”) collects, holds, uses and discloses personal information, and how you may access and correct the personal information we hold about you or make a privacy complaint.
2. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
3. This Privacy Policy applies to personal information we collect through our website at www.pulseandflowhaus.com.au (Website), our social media pages, any apps or online tools we operate, and our dealings with clients, prospective clients, suppliers, subcontractors, job applicants and other people with whom we interact.
4. By providing personal information to us, or by using our Website, you agree to your personal information being handled in accordance with this Privacy Policy.

1. The personal information we collect and hold depends on how you deal with us, and may include:
2. identity and contact information, such as your name, business or company name, position, email address, phone number and address;
3. information about your business and its digital presence that you provide to us, for example when you request a discovery call or a website pulse report, including details of your website, social media accounts, analytics and marketing;
4. booking details when you schedule an appointment through our online booking system;
5. payment and billing information when you purchase our services (payments are processed by our payment providers, such as Stripe, Square or GoCardless, or by bank transfer, and we do not store your full card details);
6. the content of your communications with us, including by email, phone, contact forms, social media and at meetings or networking events;
7. technical and usage information collected when you use our Website, such as your IP address, browser and device information and the pages you visit, collected through cookies and analytics tools (see our Cookies Policy);
8. your marketing preferences, including your subscription to our blog and mailing list (Momentum Notes);
9. testimonials and feedback you agree to provide; and
10. if you apply to work with us as an employee or subcontractor, recruitment information such as your CV, qualifications, work history, referee details and evidence of your right to work in Australia.

1. We do not usually collect sensitive information (such as health information, or information about your racial or ethnic origin, beliefs or criminal record). We will only collect sensitive information with your consent and where it is reasonably necessary for our functions or activities, or where the collection is otherwise required or authorised by law.

1. Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym, for example when browsing our Website or making a general enquiry. However, if you do not provide the personal information we request, we may not be able to provide our services to you, respond to your enquiry or provide you with a website pulse report.

1. We collect personal information:
2. directly from you, including through forms on our Website, our online booking system, discovery calls, meetings, emails, phone calls, social media and networking events;
3. automatically when you use our Website, through cookies and similar technologies (see our Cookies Policy); and
4. from third parties, including people who refer you to us, publicly available sources, and, for job applicants and prospective subcontractors, recruiters and referees (with your consent).

1. We collect, hold and use personal information to:
2. provide our services, including digital strategy advice, website and app design and development, SEO, content services and ongoing care services;
3. respond to your enquiries and provide you with a discovery call, website pulse report, proposal or quote;
4. manage bookings, engagements, payments, invoicing and our client relationships, including through our customer relationship management (CRM) system;
5. deliver our blog and other content you subscribe to;
6. improve our Website, services and client experience;
7. send you direct marketing (see below);
8. assess applications from prospective employees and subcontractors;
9. comply with our legal obligations; and
10. establish, exercise or defend our legal rights.
11. We may also use personal information for other purposes related to the purposes above where you would reasonably expect us to do so, or where you have consented or as otherwise permitted by law.

1. We may send you marketing communications about our services, news and events, including by email, where you have consented, where you have requested information from us, or where you would otherwise reasonably expect to receive them. Our commercial electronic messages comply with the Spam Act 2003 (Cth), identify us as the sender and contain a functional unsubscribe facility.
2. We will only send you marketing by SMS where you have given us your permission to do so.
3. If you use an app we operate, we may send push notifications about promotions and loyalty offers. You can turn off push notifications at any time in your device settings.
4. You may opt out of receiving marketing communications from us at any time by using the unsubscribe link in the message or by contacting us using the details below, and we will action your request promptly.
5. We do not sell personal information, and we do not share your personal information with third parties for their own marketing purposes without your express consent.

1. We may disclose personal information to third parties who assist us to operate our business and provide our services, including:
2. our website and data hosting providers, including Amazon Web Services (AWS);
3. the provider of our licensed business platform and CRM, Eazi Business, which may also provide backup support or subcontracted build services for our clients where required;
4. payment providers, including Stripe, Square and GoCardless;
5. our accounting and bookkeeping providers, including Xero and Sleek Accounting;
6. analytics providers, including Google Analytics;
7. email and marketing platforms, including Mailchimp;
8. our online booking system provider;
9. providers of email, cloud storage, document management, transactional email and other operational business platforms we use to run our business;
10. subcontractors and contractors who assist us to deliver services, who are subject to confidentiality obligations;
11. our professional advisers, including lawyers, accountants and insurers; and
12. government agencies, regulators, courts and law enforcement bodies where required or authorised by law.
13. If we sell or restructure our business, we may disclose personal information to a prospective or actual purchaser and their advisers, subject to appropriate confidentiality protections.
14. We require our service providers to handle personal information securely and only for the purposes for which it was disclosed to them.

1. Some of our service providers store or process information outside Australia, or are related to companies located outside Australia. This is likely to include the United States of America (for example, in connection with services provided by Stripe, Square, Google and Mailchimp) and the United Kingdom (for example, in connection with services provided by GoCardless), and may include other countries in which our providers or their infrastructure are located.
2. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles the information in a manner consistent with the APPs, including through contractual arrangements, or we otherwise act in accordance with the Privacy Act.

1. Our Website uses cookies and analytics tools. For details about the cookies we use and your choices, please see our Cookies Policy, which forms part of our approach to privacy.

1. We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and from unauthorised access, modification or disclosure. These steps include using reputable service providers, access controls and passwords, encryption of information in transit where available, and confidentiality obligations for our personnel and subcontractors.
2. No method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect your personal information, we cannot guarantee its absolute security.
3. We comply with the Notifiable Data Breaches scheme under the Privacy Act. If a data breach occurs that is likely to result in serious harm to individuals, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

1. We keep personal information for as long as it is needed for the purposes for which it was collected, and to comply with our legal, accounting, tax and reporting obligations (for example, business and financial records are generally kept for at least seven years).
2. When personal information is no longer required, we take reasonable steps to destroy it or ensure that it is de-identified.

1. You may request access to the personal information we hold about you, or ask us to correct it, by contacting us using the details below.
2. We will respond to your request within a reasonable period (generally within 30 days). We do not charge for making a request or for correcting your information, although we may charge a reasonable fee for our costs of providing access.
3. In some limited circumstances permitted by the Privacy Act we may refuse a request for access or correction. If we do, we will give you written reasons and information about how you may complain about the refusal.
4. We may need to verify your identity before providing access to personal information.

1. If you apply to work with us, we collect and use your personal information to assess your application, including contacting referees with your consent. If your application is unsuccessful, we may retain your information for a reasonable period in case a suitable role arises, unless you ask us not to.
2. Once a person becomes an employee, the handling of their employee records is largely exempt from the APPs, although we still handle those records carefully and in accordance with applicable workplace laws.
3. We collect personal information about subcontractors and their personnel as needed to engage, manage and pay them.

1. We only publish client testimonials, including your name and business name, with your consent. You may withdraw your consent at any time by contacting us, and we will remove the testimonial from our Website and marketing materials within a reasonable time.

1. If you have a concern or complaint about how we have handled your personal information, please contact us first using the details below. We take complaints seriously and will respond within 30 days.
2. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, by phone on 1300 363 992, or by mail to GPO Box 5288, Sydney NSW 2001.

1. We may update this Privacy Policy from time to time. The current version is the one published on our Website, together with the date it was last updated. We encourage you to review this Privacy Policy periodically.

1. If you have any questions about this Privacy Policy or your personal information, please contact us:
2. by email: hello@pulseandflowhaus.com.au;
3. by phone: +61 401 270 316; or
4. by mail: Pulse & Flow Haus Pty Ltd, Suite 302, 13-15 Wentworth Avenue, Sydney NSW 2000.
   

Last updated: August 2026