01Who we are
Scale Your Service is operated by ASBUILT AUSTRALIA PTY LTD, ABN 60 620 831 825, trading as Scale Your Service and registered for GST. This policy explains how we handle personal information through our website, enquiries, bookings and client services.
Privacy contact: Joel Farmer, joel@scaleyourservice.com.au. Postal contact: PO Box 529, Mount Ommaney QLD 4074, Australia. You can use either contact for a privacy enquiry, access or correction request, or complaint.
02Information we handle
We collect information reasonably needed for your enquiry, booking or agreed service.
- Your name, business, role and contact details when you contact us or book a session.
- Information you choose to share about your goals, tools and workflows, along with relevant correspondence and agreed project records.
- Appointment details, time zone and meeting arrangements supplied through the booking service.
- Billing and transaction information for client work, including invoice and payment status. Xero supports accounting and invoicing; Stripe processes payments where offered. Please do not send payment-card details by email.
- Technical website-request information processed by hosting providers, such as IP address, requested page, browser information and timestamps.
03Free resources and local answers
The AI-readiness check, Ideal Client Snapshot, message builder, Website First-Impression Check and Next Business Improvement guided tool run in your browser. Their answers are not submitted to Scale Your Service, sent to an AI provider or saved automatically by this website.
A downloaded or printed copy is controlled by you and your device or chosen storage provider. Save your work before leaving the page. Other people using your device may be able to access saved files.
You may share answers in a separate conversation; information you actually share with us then becomes part of our enquiry or client records. Use general examples and avoid unnecessary personal or sensitive information.
04How and why information is collected
We collect information directly when you contact us, book a session or provide information during an engagement. The website enquiry form requires your name, email address, phone number, message and agreement to be contacted about that enquiry. We use these details to respond by email or phone. If you prefer not to use the form, you can contact us directly. Booking and meeting tools may supply relevant appointment information.
We use relevant information to respond, arrange meetings, understand your goals, deliver agreed services, manage accounts, keep appropriate records and meet legal obligations. Using a free worksheet does not subscribe you to marketing.
You may make a general enquiry without identifying yourself where practicable. We may need contact, billing and project information to arrange an appointment or provide paid services. We explain if we cannot fulfil a request without particular information.
05Service providers and overseas handling
We use Google services for email, calendars, video meetings and client-file storage, including Gmail, Google Calendar, Google Meet and Google Drive. Cal.com supports bookings, Xero supports accounting and invoicing, and Stripe processes payments where offered. Vercel hosts this website and processes requests needed to display pages and handle the enquiry form. Resend delivers enquiry notifications to our Google email inbox. Cloudflare Turnstile helps protect the form from automated submissions.
Providers may process information outside Australia. Relevant locations can include Australia, New Zealand, Japan and the United States; Google and other providers also operate internationally. Our Resend sending region is Tokyo, Japan, and the website enquiry function is deployed in the United States. These settings do not mean all provider processing or storage is confined to those countries. Actual locations depend on the service, account configuration and subprocessors. These are not a complete list of every possible processing country. Contact us if you need information about the providers involved in a particular engagement before sharing data.
Your enquiry details are processed by the website server, sent through Resend and delivered to joel@scaleyourservice.com.au. Delivery records may contain message content and delivery information under Resend’s retention arrangements. Our first-stage website does not send enquiries to GoHighLevel, an AI chatbot, SMS or WhatsApp automation.
Cloudflare Turnstile processes technical signals such as IP address, browser and connection information, and the website origin to detect bots and improve its protection. Our integration sends Cloudflare the verification token and configured site information, rather than your enquiry message or worksheet answers. Turnstile runs for form security even if you decline optional analytics. If the check cannot complete, you can email or phone Joel instead.
We share only what is needed for the relevant service, authorised by you or required or permitted by law. Authorised specialists, including Lachlan for creative work, receive only the material needed for their part of an agreed project. Access to other people’s information requires an agreed purpose and appropriate permissions.
Some external links contain referral identifiers, including our Wispr Flow and ServiceM8 links. Those providers handle visits and signups under their own privacy terms. Clicking a referral or booking link does not transfer your worksheet answers.
06AI tools, analytics and marketing
The resource tools and guided suggestions use prepared prompts and local rules; they do not call an AI model. This website does not record microphone audio. If you use Wispr Flow or another external dictation tool, that provider handles your voice and transcription under its own settings. AI-assisted client work is agreed separately, including approved information, tools and human review. Do not send passwords or sensitive customer records through general enquiries or booking notes.
When you allow analytics, Google Analytics 4 measures visits to known website pages, phone and email clicks, booking-link clicks, resource downloads, completed tools and successfully sent enquiry forms. We do not include enquiry contents, contact details or worksheet answers in these events. Query strings and fragments are excluded from the page addresses we send. Google may also process technical information, including browser and device information and network data, under its privacy arrangements. Analytics can use first-party cookies to recognise visits. Advertising storage and personalisation are disabled. No analytics tag loads before you allow it, and declining does not limit access to the website. Your choice is saved in your browser for up to 180 days; change it using Analytics preferences at the foot of any page. Withdrawing consent stops further collection and removes this site’s Google Analytics cookies; it does not erase information previously collected. This website has no newsletter signup or advertising pixel. Essential processing by external booking, payment and hosting providers follows their respective arrangements.
If you choose to receive marketing, we record the relevant consent, identify the sender and provide an unsubscribe method. A booking or resource download is not an automatic marketing subscription.
07Storage, security and retention
The website uses HTTPS, server-side field validation, origin checks, a hidden spam trap and Cloudflare Turnstile verification for enquiries. Email and verification credentials are stored in server-side hosting settings and are not included in browser code. These controls reduce risk; they do not guarantee that every attack or unwanted message will be prevented. Our access rules require business-account access to be limited to people who need it, authorised sharing and two-factor authentication on supported accounts handling client information. Account configuration and recovery settings are being checked as part of launch preparation; this policy is not a claim that a completed security audit has occurred. No internet service can promise absolute security.
Our client-records policy is to keep only what is needed for the work, account administration, legal obligations or a genuine dispute. Company financial records are kept for at least seven years after the relevant transactions are complete, and longer when required by law or a legal hold. That period is not a blanket rule to keep every client file for seven years.
Working files and access permissions are reviewed at project closure and periodically thereafter. When no longer needed, we take reasonable steps to delete or de-identify them and remove unnecessary access. We agree handover and any continuing storage obligation in the plan. Provider-managed backups may retain copies under their deletion cycles; we do not promise immediate deletion from every backup.
If a security incident affects personal information, we assess it, take reasonable containment and response steps, and make notifications required by applicable law.
08Access, correction and complaints
Contact Joel Farmer by email or post to request access or correction, or to raise a privacy concern. Describe the issue and enough information for us to locate relevant records. We may need to verify your identity.
We aim to acknowledge privacy requests and complaints within five business days and respond substantively within 30 calendar days. If more time is reasonably needed, we explain the delay and expected next step. Applicable legal rights and response requirements take priority. If access or correction is refused, we explain the reason and available complaint options where required.
If a complaint remains unresolved, you may contact the Office of the Australian Information Commissioner or another regulator with jurisdiction. The rights and complaint avenues available depend on your circumstances and applicable law.
09Updates and international visitors
We update this policy when our practices change and identify the version date. Where required, we give additional notice or seek consent for a new use rather than relying only on a page update.
We work with service-based businesses worldwide. Additional rights and requirements may apply in particular locations. Country-specific processing and contractual arrangements are assessed for relevant engagements; this policy does not remove mandatory rights or assert an exemption from privacy law.