Privacy policy

Who we are

Commerly is an Australian business based on the Sunshine Coast, Queensland. We help businesses with digital marketing, digital systems and websites, and AI assistants. In this policy, “we”, “us” and “our” mean Commerly.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy covers our website, commerly.co, our emails and calls, and the work we do for clients.

What we collect

We collect personal information when you give it to us, and some information automatically when you use our website.

When you book a call

Your name and email address and, if you add them, your company and a note about the job you’d like to discuss. We also keep the time you chose, your time zone and language, the page you booked from and, if you arrived through a campaign link such as a Google ad, that campaign’s details.

When you send us your details

Your name and email address and, if you add them, your company and the help you’re looking for.

When you subscribe to our monthly notes

Your email address.

When you email or call us

Your contact details and whatever you choose to tell us.

When you browse our website

Details of your visit: the pages you view, the links and buttons you use, how far you scroll, what you search for on our site, the website or campaign that sent you, and your device, browser and approximate location (city or country). None of this includes your name, email address or phone number. See Analytics and cookies.

When you’re our client

The contact details of the people we work with, billing details, and the information in your systems we need to access to do the work. See When we work for you.

You can read our website without telling us who you are. To book a call or get a reply, we need a name to call you by and an email address.

How we use it

We use personal information to:

• Arrange, hold and follow up on the calls you book.
• Reply to your enquiries.
• Send our monthly notes, if you subscribed.
• Deliver and manage our work for clients, including invoicing.
• Understand how our website is used, and improve it and our marketing.
• Keep our website, our systems and the information we hold secure.
• Meet our legal obligations.

We only send you marketing emails if you asked for them, and every one includes a way to unsubscribe. We don’t use your personal information to make automated decisions that significantly affect you.

Analytics and cookies

We use Google Analytics 4 to see how people use our website: which pages they visit, what they click, how far they scroll and what they search for. It tells us what’s useful and what isn’t.

• It never receives your name, email address or phone number. We remove them from page addresses, and mask anything that looks like an email address or phone number in what you search for.
• Google signals and advertising features are off, so your visit isn’t used to build advertising profiles.
• Google Analytics doesn’t store your IP address. It uses it to estimate your city or country, then discards it.
• We keep analytics data for 14 months, and may copy it to our own Google Cloud project to analyse it.

Google Analytics recognises your browser between visits with cookies on our own domain, and we set a few of our own:

_ga

Google Analytics · 2 years

Tells one browser from another, so we can count visitors.

_ga_Y6WLHF3FPB

Google Analytics · 2 years

Keeps track of your current visit.

commerly_notes

Commerly · 1 year

Remembers that you subscribed to our monthly notes, so we don’t ask again.

commerly_lang

Commerly · 1 year

Remembers the language you picked (English or Spanish), so we don’t switch it for you.

commerly_lang_auto

Commerly · 1 minute

Lets the page tell you, once, that we showed it in your language.

When you arrive from another website or type our address, we use the country of your internet address, as our hosting provider reports it, to show you the site in English or Spanish. We don’t store your address or your country, and you can switch language at the bottom of any page.

We also use your browser’s session storage, which is cleared when you close the tab. Our booking page keeps the campaign link you arrived through, so a booking is credited to the right campaign, and our analytics keeps events that haven’t been sent yet.

Your choices

You can block or delete cookies in your browser settings, or install Google’s opt-out add-on. Our website works the same without them. Read how Google uses information from sites that use its services.

Videos and share buttons

Some articles include YouTube or Vimeo videos. We use YouTube’s privacy-enhanced mode and Vimeo’s do-not-track setting. When a player loads, YouTube (Google) or Vimeo receives technical details such as your IP address, and their own privacy policies apply when you play a video.

Our share buttons are plain links: LinkedIn, X and Facebook receive nothing from us unless you click one.

Who we share it with

We don’t sell or rent personal information. We share it only with service providers that help us run our business, and only what they need to do their job:

• Cal.com, which runs our booking calendar and sends your invitation, and the calendar and video-call services that invitation uses.
• Google, for website analytics and data analysis (Google’s privacy policy).
• Our email newsletter platform, which sends our monthly notes.
• Our customer relationship management (CRM) and email services, which hold your enquiries and our conversations with you.
• Our website hosting and content providers, including Sanity, which serves our website’s images. They process technical details such as your IP address when you visit.
• Professional advisers, such as our accountant or lawyer, when needed.

We may also disclose personal information when the law requires it, or to protect our rights or someone’s safety.

Information stored overseas

Some of our service providers store or process information outside Australia, mainly in the United States and the European Union. We take reasonable steps to make sure they handle it in line with the Australian Privacy Principles.

When we work for you

When you engage us, we may need access to personal information in your systems, such as your customers’ or staff’s details, to build and run what we’ve agreed. When we do:

• We use it only to deliver the agreed work, following your instructions and our agreement.
• Only your team and the Commerly people on your project can see it.
• It’s never used to train public AI models. The AI tools we set up for you run on business accounts that don’t train on your data.
• We’ll only name you as a client, or describe your project publicly, with your permission.
• When the work ends, we return or delete your information as our agreement sets out.

You remain responsible for collecting that information lawfully and for telling the people it’s about how you use it. We’re happy to sign a non-disclosure agreement, and our contract can set out more detailed data terms.

Security and how long we keep it

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, change or disclosure. That includes giving access only to the people who need it, encrypting information in transit and at rest, and choosing providers with strong security practices.

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires:

• Booking and enquiry details: up to two years after we last spoke, unless we go on to work together.
• Client records: while we work together, then as long as the law requires us to keep business records (usually five to seven years).
• Your newsletter subscription: until you unsubscribe.
• Website analytics: 14 months.

After that, we delete it or remove anything that identifies you. If a data breach is likely to cause you serious harm, we’ll tell you and, where the law requires, the Office of the Australian Information Commissioner (OAIC).

Your rights and choices

You can:

• Ask what personal information we hold about you, and get a copy.
• Ask us to correct it if it’s wrong, out of date or incomplete.
• Ask us to delete it, unless the law requires us to keep it.
• Unsubscribe from our emails at any time, with the link in each one.
• Opt out of analytics, as described in Analytics and cookies.

To make a request, email hello@commerly.co. We’ll check it’s you before we share or change anything, and reply within 30 days, free of charge. If we can’t do what you ask, we’ll explain why.

If you live outside Australia, your local law may give you more rights, such as objecting to how we use your information. Contact us and we’ll help.

Complaints

If you’re unhappy with how we’ve handled your personal information, please tell us first at hello@commerly.co. We’ll look into it and reply within 30 days.

If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992 (+61 2 9942 4099 from outside Australia).

Changes to this policy

We’ll update this policy when the way we handle personal information changes. The date at the top shows when it last changed. If a change significantly affects you, we’ll tell you by email or on our website.

Contact us

Questions about this policy or your personal information? Get in touch: