PRIVACY POLICY

This Application collects some Personal Data from its Users.
This document can be printed for reference by using the print command in the settings of any browser.

Owner and Data Controller
 Chazz Marketing – 3/4 McCormack Street, Newcastle, NSW, 2300]

Owner contact email: enquiries@chazz.digital

Types of Data Collected:
 Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Tracker; Usage Data; email address; Data communicated while using the service; device information; Email; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); User ID; first name; last name; gender; date of birth; phone number; physical address; company name; profession; country; state; username; various types of Data; purchase history; city; geographic position; language; password; picture; screenshots; ZIP/Postal code; workplace.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.

Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available. Users are responsible for any third-party Personal Data obtained, published or shared through this Application and confirm that they have the third party's consent to provide the Data to the Owner.

Mode and Place of Processing the Data

METHODS OF PROCESSING
 The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

LEGAL BASIS OF PROCESSING
 The Owner may process Personal Data relating to Users if one of the following applies:

  • Users have given their consent for one or more specific purposes. (Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply whenever the processing of Personal Data is subject to European data protection law.)

  • Provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof.

  • Processing is necessary for compliance with a legal obligation to which the Owner is subject.

  • Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner.

  • Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

PLACE
 The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data. Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.

RETENTION TIME
 Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.

  • Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfil such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

  • The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

THE PURPOSES OF PROCESSING
 The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes:

  • Access to third-party accounts

  • Analytics

  • Remarketing and behavioural targeting

  • Managing data collection and online surveys

  • Advertising

  • Tag Management

  • Registration and authentication

  • Managing contacts and sending messages

  • User database management

  • Content performance and features testing (A/B testing)

  • Traffic optimisation and distribution

  • Connecting Data

For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed Information on the Processing of Personal Data.”

Facebook Permissions Asked by this Application
 This Application may ask for some Facebook permissions allowing it to perform actions with the User's Facebook account and to retrieve information, including Personal Data, from it. This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook Inc. For more information about the following permissions, refer to the Facebook permissions documentation and to the Facebook privacy policy.

The permissions asked are the following:

  • BASIC INFORMATION:
     By default, this includes certain User Data such as id, name, picture, gender, and locale. Certain connections of the User, such as Friends, are also available. If the User has made more of their Data public, more information will be available.

  • ACCESS PRIVATE DATA:
     Access the User's and friends' private data.

  • ACCESS REQUESTS:
     Provides read access to the User's friend requests.

  • ACTIVITIES:
     Provides access to the User's list of activities.

  • CONTACT EMAIL:
     Access the User's contact email address.

  • CREATE EVENTS:
     Enables the application to create and modify events on the User's behalf.

  • EMAIL:
     Provides access to the User's primary email address.

  • GENDER:
     Provides access to the User's gender.

  • INSIGHTS:
     Provides read access to the Insights data for pages, applications, and domains the User owns.

  • INSTAGRAM BASIC:
     Allows reading an Instagram account profile information and media.

  • INTERESTS:
     Provides access to the User's list of interests.

  • MANAGE PAGES:
     Enables the application to retrieve access_tokens for Pages and Applications that the User administrates.

  • TRACKER:
     Tracker indicates any technology – e.g., Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that enables the tracking of Users, for example by accessing or storing information on the User’s device.

Detailed Information on the Processing of Personal Data
 Personal Data is collected for the following purposes and using the following services:

  • ACCESS TO THIRD-PARTY ACCOUNTS:
     This type of service allows this Application to access Data from your account on a third-party service and perform actions with it. These services are not activated automatically but require explicit authorisation by the User.

    Example – Facebook account access (Meta Platforms, Inc.):
     This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook, Inc.
    Permissions asked: Access private data; Access Requests; Activities; Contact email; Create Events; Email; Gender; Insights; Instagram basic; Interests; Manage Pages; Tracker.
    Place of processing: United States – Privacy Policy.

    Example – Pinterest account access (Pinterest, Inc.):
     This service allows this Application to connect with the User's account on Pinterest, provided by Pinterest, Inc.
    Personal Data processed: device information; Email; Tracker; unique device identifiers for advertising; Usage Data; User ID.
    Place of processing: United States – Privacy Policy.

  • ADVERTISING:
     This type of service allows User Data to be utilised for advertising purposes, such as displaying banners and other advertisements, possibly based on User interests. Some services use Trackers to identify Users or may employ behavioural retargeting techniques. Users may opt out of such tracking as described in this document and in the relevant third-party privacy policies.

    Examples include:

    • Facebook Lookalike Audience

    • Google Ad Manager

    • Google Ads Similar Audiences

    • Google AdSense

    • Pinterest Ads

    • Google DV360

    • Adobe Advertising Cloud

  • ANALYTICS:
     The services contained in this section enable the Owner to monitor and analyse web traffic and keep track of User behaviour.

    Examples include:

    • Facebook Ads conversion tracking (Facebook Pixel)

    • Meta Events Manager

    • Google Ads conversion tracking

    • Google Analytics

    • Pinterest Conversion Tag

    • TikTok conversion tracking

    • Adobe Analytics

  • CONNECTING DATA:
     This service allows the Owner to connect Data with third-party services, resulting in Data flowing between these services.
    Example – Zapier (Zapier, Inc.):
     Personal Data processed: city; company name; country; Data communicated while using the service; date of birth; device information; email address; first name; gender; last name; password; phone number; picture; profession; screenshots; Usage Data; User ID; various types of Data.
    Place of processing: United States – Privacy Policy.

  • CONTENT PERFORMANCE AND FEATURES TESTING (A/B TESTING):
     This service allows the Owner to track and analyse the User response regarding changes to the Application's content or design.

    Example – Adobe Test&Target (Adobe Systems Incorporated):
     Personal Data processed: Tracker; Usage Data.
    Place of processing: United States – Privacy Policy.

  • MANAGING CONTACTS AND SENDING MESSAGES:
     This service allows the Owner to manage a database of contacts and communicate with Users.

    Example – Klaviyo (Klaviyo Inc.):
     Personal Data processed: company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Tracker; Usage Data; username; various types of Data.
    Place of processing: United States – Privacy Policy.

  • MANAGING DATA COLLECTION AND ONLINE SURVEYS:
     This service allows the Owner to administer online forms and surveys for data collection.

    Examples include Facebook lead ads and Klaviyo Forms.

  • REGISTRATION AND AUTHENTICATION:
     By registering or authenticating, Users allow this Application to identify them and provide access to dedicated services.

    Example – Pinterest OAuth (Pinterest, Inc.):
     Personal Data processed: as specified in the privacy policy of the service.
    Place of processing: United States – Privacy Policy.

  • REMARKETING AND BEHAVIORAL TARGETING:
     This service enables the Owner and its partners to display ads based on the User’s past interactions with this Application.

    Examples include:

    • Facebook Custom Audience

    • Facebook Remarketing

    • Google Ad Manager Audience Extension

    • Google Ads Remarketing

    • TikTok Remarketing

    • Klaviyo segmentation and social advertising

  • TAG MANAGEMENT:
     This service allows the Owner to centrally manage tags or scripts on the Application.

    Examples include:

    • Google Tag Manager

    • Adobe DTM

  • TRAFFIC OPTIMISATION AND DISTRIBUTION:
     This service allows the Owner to distribute content via servers in different regions to optimize performance.

    Example – Cloudflare (Cloudflare Inc.):
     Personal Data processed: Tracker; various types of Data as specified in the privacy policy of the service.
    Place of processing: United States – Privacy Policy.

  • USER DATABASE MANAGEMENT:
     This service allows the Owner to build user profiles for improving the Application’s functionality and User experience.

    Example – Klaviyo CRM (Klaviyo Inc.):
     Personal Data processed: city; company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Tracker; Usage Data; username; various types of Data.
    Place of processing: United States – Privacy Policy.

Information on Opting Out of Interest-Based Advertising:
 In addition to any opt-out feature provided by the services listed, Users may follow the instructions provided by initiatives such as YourOnlineChoices (EU), the Network Advertising Initiative (US), and others. Users may also opt out via their device settings. The Owner recommends using these resources along with the information provided in this document.

The Rights of Users:
 Users may exercise the following rights regarding their Data:

  • Withdraw consent at any time.

  • Object to the processing of their Data.

  • Access their Data and obtain disclosure on processing details.

  • Request rectification of inaccurate Data.

  • Request restriction of processing.

  • Request deletion of their Data under certain circumstances.

  • Receive their Data in a portable format and transmit it to another controller.

  • Lodge a complaint with their data protection authority.

How to Exercise These Rights:
 Requests to exercise User rights can be directed to the Owner using the contact details provided above. Requests will be addressed free of charge and resolved as early as possible, typically within one month.

Additional Information About Data Collection and Processing:
 Users may request further details regarding the collection and processing of their Personal Data at any time by contacting the Owner.

SYSTEM LOGS AND MAINTENANCE:
 For operational purposes, this Application and third-party services may collect log files and other Personal Data (such as IP addresses) for system maintenance and troubleshooting.

INFORMATION NOT CONTAINED IN THIS POLICY:
 Further details about Personal Data processing can be requested from the Owner at any time. Please refer to the contact information above.

HOW “DO NOT TRACK” REQUESTS ARE HANDLED:
 This Application does not support “Do Not Track” requests. To understand the handling of such requests by third-party services, please refer to their privacy policies.

CHANGES TO THIS PRIVACY POLICY:
 The Owner reserves the right to update this Privacy Policy at any time. Any changes will be posted on this page and, where technically feasible, communicated directly to Users. We encourage you to review this page periodically for any updates. If changes affect processing activities based on your consent, the Owner will request new consent as required.

DEFINITIONS AND LEGAL REFERENCES:

  • Personal Data (or Data): Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

  • Usage Data: Information collected automatically through this Application, including but not limited to IP addresses, browser type, pages visited, and time spent on each page.

  • User: The individual using this Application, who, unless otherwise specified, is the Data Subject.

  • Data Processor (or Data Supervisor): A natural or legal person processing Personal Data on behalf of the Controller.

  • Data Controller (or Owner): The entity that determines the purposes and means of the processing of Personal Data. In this document, the Data Controller is Chazz Marketing.

  • Cookie: Small sets of data stored in the User's browser.

  • Tracker: Any technology (e.g., cookies, web beacons, unique identifiers, embedded scripts) that enables the tracking of Users.

LEGAL INFORMATION:
 This privacy statement has been prepared based on multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation). This policy relates solely to this Application unless stated otherwise.

Latest update: 5/2/25