Privacy Policy

1. Introduction

This Privacy Policy explains how Conversion Booster (ABN 78630438911) ("ConversionBooster", "we", "us", "our") collects, holds, uses, discloses, stores, and otherwise handles personal information in connection with our website, app, dashboard, tracking tools, analytics platform, and related services (collectively, the "Services").

This Privacy Policy is intended to provide a clear explanation of our information handling practices. By accessing or using our Services, you acknowledge that you have read this Privacy Policy.

2. Scope

This Privacy Policy applies to personal information we collect from or about:

• Visitors to our websites;
• Account holders, customers, and prospective customers;
• Users of our dashboard and SaaS platform;
• People who contact us or subscribe to our communications; and
• Website visitors whose data is collected through our customers’ implementation of our tracking technology.

If you are a website visitor interacting with a website that uses our technology, that website operator may also have its own privacy policy governing its collection and use of your information.

IMPORTANT: THIS POLICY COVERS TWO DIFFERENT TYPES OF DATA

• CUSTOMER DATA (OUR CUSTOMERS): personal information we collect directly from our customers, account holders, and users of our platform;
• WEBSITE VISITOR DATA (YOUR WEBSITE USERS): aggregated, non-identifying data collected through our customers’ use of our tracking technology on their websites.

These categories are handled differently and are explained separately below.

3. What Personal Information We Collect

SECTION 3 — CUSTOMER DATA (OUR CUSTOMERS ONLY)
This section describes the personal information we collect directly from our customers, account holders, and users of our Services.

• Name;
• Email address;
• Phone number;
• Company or business name;
• Job title or role;
• Billing and payment information;
• Account credentials and authentication details;
• Login timestamps and login history associated with your account;
• Communications you send to us;
• Support requests and customer service interactions;
• Website, device, browser, and usage data;
• In-app click and interaction data;
• In-app usage, feature, and analytics event data collected through our Services; and
• Any other information you voluntarily provide to us.

The information above relates only to Customer Data. It does not describe the data collected through our tracking technology on customer websites, which is addressed separately in Section 4.

For signed-in customers, we may track login times and events such as clicks and feature interactions within the app or dashboard for analytics, security, support, and service improvement.

In limited cases, we may process technical information such as IP addresses strictly for security, fraud prevention, abuse detection, or coarse geographic derivation. We do not use such information to track or identify individuals for analytics purposes.

IP addresses may be processed for security, fraud prevention, abuse detection, and coarse geographic derivation. IP addresses are not stored for analytics purposes and are discarded once these limited functions are completed.

4. Information Collected Through Tracking Technology

SECTION 4 — WEBSITE VISITOR DATA (YOUR WEBSITE USERS)
This section describes data collected through our customers’ implementation of our tracking technology on their websites. This data is fundamentally different from Customer Data and is designed to be non-identifying.

We collect only aggregated, non-identifying behavioural data to understand how websites perform and how pages contribute to conversions.

This may include:

• Page views and page paths;
• Referrer information (such as the previous page or source);
• UTM and campaign parameters;
• Device type and browser category (in a non-identifying form);
• Approximate country-level location derived from IP address (with IP discarded immediately);
• Clicks, form interactions, scroll depth (in coarse buckets), or conversion-related events; and
• Timestamps and related event metadata.

We do not use this data to identify individuals and do not attempt to re-identify any user.

Website Visitor Data is not linked to Customer Data and is not used to identify or profile any individual person.

Importantly, Conversion Booster does NOT:

• Set tracking cookies or similar identifiers for analytics purposes;
• Store or persist unique user identifiers across pages or sessions;
• Track users across websites;
• Create behavioural profiles of individuals;
• Use fingerprinting techniques or attempt to uniquely identify devices;
• Store raw IP addresses for analytics purposes; or
• Combine data in a way that would allow identification of a specific person.

IP addresses may be received transiently by our servers solely to derive coarse geographic information (such as country). The raw IP address is not stored or used as an identifier and is discarded immediately after this processing.

All analytics provided through our Services are based on aggregated patterns of behaviour rather than tracking of individual users.

5. How We Collect Personal Information

THIS SECTION RELATES TO CUSTOMER DATA (OUR CUSTOMERS)

We collect Customer Data when:

• You create an account or use our Services;
• You contact us by email, form, chat, phone, or other means;
• You subscribe to updates, newsletters, or marketing communications;
• You purchase or enquire about our Services;
• You sign in to and interact with the app or dashboard;
• Website Visitor Data is collected automatically when users interact with websites or digital properties that implement our tracking technology;
• You connect third-party integrations;
• You participate in surveys, promotions, or product research; or
• Information is collected automatically through cookies and similar technologies.

We may also collect information from third parties such as payment providers, authentication providers, analytics tools, integration partners, resellers, or publicly available sources where permitted by law.

6. Why We Collect, Hold, Use, and Disclose Personal Information

THIS SECTION RELATES TO CUSTOMER DATA (OUR CUSTOMERS)

We collect, hold, use, and disclose Customer Data for purposes including:

• Providing, operating, maintaining, and improving our Services;
• Setting up and managing user accounts;
• Processing payments and subscriptions;
• Providing analytics, reports, recommendations, and product features;
• Responding to enquiries, support requests, and customer service matters;
• Communicating with you about the Services, updates, billing, and operational notices;
• Analysing customer app usage, login activity, clicks, and feature events for internal analytics, product improvement, usage analysis, and service optimisation;
• Sending marketing communications where permitted by law;
• Monitoring, securing, troubleshooting, and protecting our Services;
• Preventing fraud, abuse, or misuse;
• Complying with legal and regulatory obligations;
• Enforcing our terms, agreements, and legal rights; and
• Conducting internal analytics, service development, and business operations.

6A. Privacy-First Analytics Approach

THIS SECTION RELATES TO WEBSITE VISITOR DATA (YOUR WEBSITE USERS)
Conversion Booster is built on a privacy-first analytics model.

This section applies specifically to Website Visitor Data collected through our tracking technology, not Customer Data.

Our Services are designed to provide meaningful insights into website performance without tracking individuals.

This means:

• We analyse how pages perform, not who specific users are;
• We focus on aggregated behaviour patterns rather than individual journeys;
• We do not rely on persistent identifiers or cross-session tracking;
• We do not attempt to identify, profile, or monitor individuals; and
• We design our systems to minimise personal data processing wherever possible.

Our analytics does not rely on storing or accessing information on a user’s device for the purpose of identifying or tracking users.

Because our analytics operates on aggregated, non-identifying data and does not rely on tracking technologies that identify individuals, our Services are designed to reduce or eliminate the need for intrusive tracking mechanisms.

Customers remain responsible for determining their own legal obligations, including whether consent mechanisms are required for their specific implementation.

7. Legal and Compliance Responsibilities of Our Customers

Customers who deploy our tracking technology are responsible for ensuring they comply with applicable privacy, consent, cookie, surveillance, and marketing laws.

This includes, where required by law, providing appropriate privacy notices and obtaining valid consent from end users before personal information is collected or transmitted through our platform.

We do not provide legal advice, and use of our Services does not remove a customer’s independent legal obligations.

While our platform is designed to operate in a privacy-safe, non-identifying manner, customers are responsible for determining whether their overall website implementation (including any additional tools or technologies they use) requires consent under applicable laws.

8. Cookies and Similar Technologies

Conversion Booster is designed to operate without relying on cookies or similar tracking technologies for analytics.

We do not use cookies, local storage, or similar technologies to:

• Track users across sessions;
• Identify individual users; or
• Build behavioural profiles of individuals.

Some limited use of cookies or similar technologies may occur for strictly necessary purposes, such as maintaining account authentication within the dashboard or ensuring core service functionality.

Our analytics tracking does not rely on cookies or persistent identifiers and is designed to function in a privacy-safe, aggregate manner.

Users may still control cookies through their browser settings. However, because our analytics does not depend on cookies, disabling cookies will not prevent core analytics functionality from operating.

9. Direct Marketing

We may send you marketing or promotional communications about our Services where permitted by law. You can opt out of receiving marketing communications at any time by using the unsubscribe link in the message or contacting us.

Even if you opt out of marketing messages, we may still send you service-related, transactional, security, or account communications where necessary.

10. Disclosure of Personal Information

We may disclose personal information to:

• Our related companies and affiliates;
• Cloud and infrastructure providers;
• Payment processors and billing providers;
• Authentication and identity providers;
• Analytics, email, communications, and support service providers;
• Professional advisers such as lawyers, accountants, and insurers;
• Regulators, law enforcement bodies, courts, or government agencies where required or authorised by law;
• Potential acquirers or investors in connection with a merger, acquisition, financing, or asset sale; and
• Other third parties where you direct us to do so or consent to the disclosure.

We do not sell personal information in the ordinary sense of selling customer lists for money. However, we may disclose personal information to service providers and subprocessors as necessary to operate the Services.

11. Overseas Disclosure

Some of our service providers, partners, subprocessors, or infrastructure providers may be located outside Australia. As a result, personal information may be disclosed to or stored in countries outside Australia.

These countries may include, without limitation, the United States, countries in the European Economic Area, the United Kingdom, and other countries where our providers operate infrastructure or support services.

By using our Services, you acknowledge that overseas recipients may handle personal information in accordance with the laws of the country in which they are located, and those laws may differ from Australian privacy laws.

12. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.

These steps may include:

• Access controls and authentication measures;
• Encryption in transit and, where appropriate, at rest;
• Logging, monitoring, and security review processes;
• Secure cloud infrastructure and vendor controls; and
• Internal policies and restricted access to information.

No method of transmission over the internet and no method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate business records.

Retention periods may vary depending on the type of information, the nature of the Services, legal or regulatory requirements, and operational needs.

14. Deletion on Request

We delete customer data on the customer’s request, subject to limited exceptions required by law or reasonably necessary for legitimate operational purposes such as billing records, fraud prevention, dispute resolution, enforcement of agreements, or backup cycling.

If you are an authorised account holder and would like us to delete your customer data, you may contact us using the details below. Once we have verified the request, we will delete the requested customer data from our active systems within a commercially reasonable period.

Please note that:

• Deleted data may be permanently unrecoverable;
• Some information may remain in backups or disaster recovery systems until those systems are overwritten in the ordinary course;
• We may retain limited information where required by law or reasonably necessary to protect our legal rights; and
• You are responsible for exporting any data you wish to retain before requesting deletion.

15. Access and Correction

You may request access to personal information we hold about you and request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information.

We may need to verify your identity before responding to such a request. In some circumstances, we may refuse access or correction where permitted by law, in which case we will provide reasons where required.

16. Complaints

If you have a complaint about how we handle personal information, you may contact us using the details below. Please include enough detail for us to understand and investigate the issue.

We will review your complaint and respond within a reasonable time. If you are not satisfied with our response, you may be able to refer your complaint to the Office of the Australian Information Commissioner or another relevant regulator.

17. Third-Party Websites and Services

Our Services may contain links to third-party websites, products, or services. We are not responsible for the privacy practices of those third parties. You should review their privacy policies separately.

18. Children

Our Services are not directed to children, and we do not knowingly collect personal information directly from children unless expressly permitted and lawfully authorised. If you believe a child has provided personal information to us in appropriately, please contact us.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “Last Updated” date. Your continued use of the Services after any change takes effect indicates your acceptance of the updated Privacy Policy.

20. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our handling of personal information, please contact us at:

Conversion Booster (ABN 78630438911)
Email: support@conversionbooster.co