Privacy Policy.

Ryse Media ("we", "us", "our") is a digital marketing agency based in Queensland, Australia, providing search engine optimisation, paid advertising, conversion optimisation, landing pages and lead-generation services to businesses in the industrial sector.

We respect your privacy and are committed to handling personal information lawfully, transparently and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we handle the personal information of individuals located in the European Union or United Kingdom, we also apply the relevant standards of the General Data Protection Regulation (GDPR) and UK GDPR as a matter of best practice.

This policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and the rights you have in relation to it.

Two roles we play with data

It is important to understand that we handle personal information in two distinct capacities, and this policy covers both:

We only collect personal information that is reasonably necessary for our functions and activities. The kinds of information we collect depend on how you interact with us.

We do not seek to collect sensitive information (such as health, racial, political or biometric information) and ask that you do not provide it. We do not knowingly collect personal information from children (see section 16).

We collect personal information in the following ways:

• Directly from you: when you complete a form on our website, request an audit or quote, email or call us, engage us as a client, or otherwise communicate with us.
• Automatically: through cookies, analytics and similar technologies when you use our website (see section 7).
• From third parties: for example, from publicly available business sources, referrals, or platforms you have authorised us to access on your behalf as part of delivering our services.

Where it is reasonable and practicable, we collect personal information directly from you. If we receive information about you that we did not request and could not lawfully have collected, we will deal with it in accordance with the APPs, including destroying or de-identifying it where appropriate.

We collect and use personal information for purposes connected with providing and improving our services, including to:

• Respond to your enquiries and provide quotes, audits and proposals;
• Deliver our marketing services and manage our engagement with you as a client;
• Administer billing, invoicing and our business records;
• Communicate with you about your account, our services, and relevant updates;
• Send you marketing communications where permitted (see section 9);
• Operate, secure, maintain and improve our website and services;
• Comply with our legal, regulatory and contractual obligations.

Where the GDPR applies, our lawful bases for processing are: performance of a contract; your consent (which you may withdraw at any time); our legitimate interests in operating and promoting our business in a way that does not override your rights; and compliance with legal obligations.

We will not use your personal information for an unrelated purpose without your consent unless permitted by law.

Our website uses cookies and similar technologies to function, to remember your preferences, and to understand how the site is used. Some cookies are essential; others (such as analytics and advertising cookies) are only set with your consent through our cookie banner.

Full details of the specific cookies we use, their purpose and duration, and how to manage your preferences are set out in our separate Cookie Policy, which should be read alongside this Privacy Policy.

You can also control cookies through your browser settings; disabling some cookies may affect how the website works.

When we deliver services to a client, we may process personal information relating to that client's customers, leads and website visitors: for example, form submissions captured on a landing page we manage, or data within an advertising or analytics account we operate on the client's behalf.

In these circumstances:

• the client is the controller and determines the purposes and means of processing;
• we act only on the client's documented instructions and as set out in our services agreement;
• we apply appropriate security measures and only retain the data for as long as needed to provide the service or as the client instructs;
• individuals wishing to exercise rights over that data should contact the relevant client, whose own privacy policy governs it.

If you are a client, our services agreement sets out our respective data-protection obligations in more detail.

We may send you marketing communications about our services where you have requested them, where you are an existing client, or where you have otherwise consented and we are permitted to do so under the Privacy Act and the Spam Act 2003 (Cth).

You can opt out at any time by using the unsubscribe link in any marketing email, or by contacting us at hello@rysemedia.com.au. We will action your request promptly.

We do not sell your personal information, and we do not provide it to third parties for their own marketing purposes.

We do not sell personal information. We disclose it only where necessary for the purposes described in this policy, including to the following categories of recipient who help us operate our business and deliver our services:

We require our service providers to handle personal information consistently with the APPs and to use it only for the purposes for which we engaged them. We may also disclose information in connection with a sale or restructure of our business, subject to appropriate confidentiality protections.

Some of the providers we rely on, particularly major technology, advertising and analytics platforms, store or process data outside Australia, including in the United States and other countries where those providers operate data centres.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs, or we rely on another basis permitted under APP 8 (such as your consent). Where the GDPR applies, transfers outside the EU/UK are made under an appropriate safeguard such as Standard Contractual Clauses or an adequacy decision.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include access controls, use of reputable providers, secure passwords, encryption in transit where available, and limiting access to those who need it.

No method of transmission or storage is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

We keep personal information only for as long as it is needed for the purposes for which it was collected, or as required to meet legal, tax and record-keeping obligations. Generally this covers the duration of our relationship with you and a reasonable period afterwards. When information is no longer required, we take reasonable steps to destroy or de-identify it.

You have the right to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading. To make a request, contact us at hello@rysemedia.com.au. We will respond within a reasonable period and may need to verify your identity first.

There is generally no charge for making a request, although we may charge a reasonable cost for providing access in some cases. If we decline a request, we will explain why and how you can complain.

Where the GDPR applies to you, you may also have rights to erasure, restriction of processing, data portability, and to object to certain processing. We will honour these rights as required by law.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first at hello@rysemedia.com.au so we can try to resolve it. We will acknowledge your complaint and aim to respond within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner:

If the GDPR applies to you, you may also lodge a complaint with your local data-protection supervisory authority.

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any website you visit through a link from ours.

Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in our practices or legal obligations. The current version is always available on our website, and the "Last updated" date below shows when it was last revised. Material changes will be made clear on this page.

If you have any questions about this policy or how we handle your personal information, please contact us:

Last updated: 19/06/2026  •  Version 1.0