· PRIVACY POLICY ·

Privacy Policy

Effective Date: September 2026 | Last Updated: September 2026

  1. Introduction

Welcome to HITTO Agency. We are a digital marketing agency based in Perth, Western Australia, Australia, operating globally. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (hittoagency.com), use our services, or contact us through any channel.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

  1. Who we are

Business name: HITTO Agency

Location: Perth, Western Australia, Australia

Contact: hello@hittoagency.com

Website: www.hittoagency.com

Business name: HITTO Agency

Location: Perth, Western Australia, Australia

Contact: hello@hittoagency.com

Website: www.hittoagency.com

  1. What Information We Collect

3.1 Information You Provide Directly

When you contact us through our website contact form or email, we may collect:

• Full name

• Email address

• Phone number (if provided)

• Business name (if provided)

• The content of your message or enquiry


When you book a call through Calendly, we collect:

• Full name

• Email address

• Phone number (optional)

• Meeting preferences and any notes you provide


3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Pages visited and time spent on each page

• Referring website

• Device type and operating system

This information is collected through Google Analytics and similar tools to help us understand how visitors use our website and improve our services.


3.3 WhatsApp Communications

If you contact us via WhatsApp, we will receive the information you share in that conversation, including your name (as it appears on WhatsApp), phone number, and the content of your messages.

3.1 Information You Provide Directly

When you contact us through our website contact form or email, we may collect:

• Full name

• Email address

• Phone number (if provided)

• Business name (if provided)

• The content of your message or enquiry


When you book a call through Calendly, we collect:

• Full name

• Email address

• Phone number (optional)

• Meeting preferences and any notes you provide


3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Pages visited and time spent on each page

• Referring website

• Device type and operating system

This information is collected through Google Analytics and similar tools to help us understand how visitors use our website and improve our services.


3.3 WhatsApp Communications

If you contact us via WhatsApp, we will receive the information you share in that conversation, including your name (as it appears on WhatsApp), phone number, and the content of your messages.

3.1 Information You Provide Directly

When you contact us through our website contact form or email, we may collect:

• Full name

• Email address

• Phone number (if provided)

• Business name (if provided)

• The content of your message or enquiry


When you book a call through Calendly, we collect:

• Full name

• Email address

• Phone number (optional)

• Meeting preferences and any notes you provide


3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Pages visited and time spent on each page

• Referring website

• Device type and operating system

This information is collected through Google Analytics and similar tools to help us understand how visitors use our website and improve our services.


3.3 WhatsApp Communications

If you contact us via WhatsApp, we will receive the information you share in that conversation, including your name (as it appears on WhatsApp), phone number, and the content of your messages.

  1. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and provide the services you request

• To schedule and manage calls and meetings

• To send you information relevant to our services (only with your consent)

• To improve our website and user experience

• To comply with our legal obligations

• To protect our legitimate business interests

We use your personal information for the following purposes:

• To respond to your enquiries and provide the services you request

• To schedule and manage calls and meetings

• To send you information relevant to our services (only with your consent)

• To improve our website and user experience

• To comply with our legal obligations

• To protect our legitimate business interests

  1. Legal Basis for Processing (GDPR — EU/EEA Users)

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent: when you voluntarily submit your information through our contact form or booking system

• Legitimate interests: to improve our website, respond to enquiries, and grow our business

• Contract: when processing is necessary to deliver the services you have engaged us for

• Legal obligation: when required by applicable law

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent: when you voluntarily submit your information through our contact form or booking system

• Legitimate interests: to improve our website, respond to enquiries, and grow our business

• Contract: when processing is necessary to deliver the services you have engaged us for

• Legal obligation: when required by applicable law

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent: when you voluntarily submit your information through our contact form or booking system

• Legitimate interests: to improve our website, respond to enquiries, and grow our business

• Contract: when processing is necessary to deliver the services you have engaged us for

• Legal obligation: when required by applicable law

  1. Third-Party Services We Use

We use the following third-party tools that may process your personal data:

Google Analytics — Website analytics. Data may be stored on Google servers. Google's Privacy

Policy applies: policies.google.com/privacy

Calendly — Appointment scheduling. Data is stored on Calendly's servers. Calendly's Privacy Policy

applies: calendly.com/privacy

WhatsApp (Meta) — Communications. Meta's Privacy Policy applies: whatsapp.com/legal/privacy-

policy

Google Workspace — Email and document management. Google's Privacy Policy applies:

policies.google.com/privacy

We do not sell your personal data to any third party.

We use the following third-party tools that may process your personal data:

Google Analytics — Website analytics. Data may be stored on Google servers. Google's Privacy

Policy applies: policies.google.com/privacy

Calendly — Appointment scheduling. Data is stored on Calendly's servers. Calendly's Privacy Policy

applies: calendly.com/privacy

WhatsApp (Meta) — Communications. Meta's Privacy Policy applies: whatsapp.com/legal/privacy-

policy

Google Workspace — Email and document management. Google's Privacy Policy applies:

policies.google.com/privacy

We do not sell your personal data to any third party.

  1. Data Storage and Security

We store your personal data on secure servers and take reasonable measures to protect it from

unauthorised access, loss, or disclosure. These measures include:

• Secure email communications via Google Workspace

• Password-protected systems and tools

• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we

strive to protect your personal information, we cannot guarantee its absolute security.

We store your personal data on secure servers and take reasonable measures to protect it from

unauthorised access, loss, or disclosure. These measures include:

• Secure email communications via Google Workspace

• Password-protected systems and tools

• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we

strive to protect your personal information, we cannot guarantee its absolute security.

  1. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in

this policy, or as required by law:

• Contact form enquiries: up to 2 years

• Client project data: up to 5 years after project completion

• Booking and scheduling data: managed by Calendly per their retention policy

• Analytics data: as per Google Analytics retention settings (default: 26 months)

We retain your personal information only for as long as necessary to fulfil the purposes described in

this policy, or as required by law:

• Contact form enquiries: up to 2 years

• Client project data: up to 5 years after project completion

• Booking and scheduling data: managed by Calendly per their retention policy

• Analytics data: as per Google Analytics retention settings (default: 26 months)

  1. Your Rights

9.1 Australian Users (Privacy Act 1988)

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Make a complaint about how we handle your personal information

To exercise these rights, contact us at hello@hittoagency.com.

9.2 EU/EEA Users (GDPR)

If you are located in the EU/EEA, you have the following rights under the GDPR:

• Right of access: request a copy of your personal data

• Right to rectification: request correction of inaccurate data

• Right to erasure: request deletion of your personal data ('right to be forgotten')

• Right to restriction: request that we limit how we use your data

• Right to data portability: receive your data in a structured, machine-readable format

• Right to object: object to processing based on legitimate interests

• Right to withdraw consent: at any time, where processing is based on consent

To exercise any of these rights, contact us at hello@hittoagency.com. We will respond within 30 days.

9.1 Australian Users (Privacy Act 1988)

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Make a complaint about how we handle your personal information

To exercise these rights, contact us at hello@hittoagency.com.

9.2 EU/EEA Users (GDPR)

If you are located in the EU/EEA, you have the following rights under the GDPR:

• Right of access: request a copy of your personal data

• Right to rectification: request correction of inaccurate data

• Right to erasure: request deletion of your personal data ('right to be forgotten')

• Right to restriction: request that we limit how we use your data

• Right to data portability: receive your data in a structured, machine-readable format

• Right to object: object to processing based on legitimate interests

• Right to withdraw consent: at any time, where processing is based on consent

To exercise any of these rights, contact us at hello@hittoagency.com. We will respond within 30 days.

  1. Your Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience

and analyse website traffic. These include:

• Essential cookies: necessary for the website to function properly

• Analytics cookies: used by Google Analytics to understand how visitors use our site

You can control cookies through your browser settings. Disabling certain cookies may affect your

experience on our website.

Our website may use cookies and similar tracking technologies to improve your browsing experience

and analyse website traffic. These include:

• Essential cookies: necessary for the website to function properly

• Analytics cookies: used by Google Analytics to understand how visitors use our site

You can control cookies through your browser settings. Disabling certain cookies may affect your

experience on our website.

  1. International Data Transfers

As we use third-party services (Google, Calendly, Meta/WhatsApp), your data may be transferred to

and processed in countries outside Australia and the EU/EEA. We ensure that any such transfers are

covered by appropriate safeguards, including Standard Contractual Clauses where required by

GDPR.

As we use third-party services (Google, Calendly, Meta/WhatsApp), your data may be transferred to

and processed in countries outside Australia and the EU/EEA. We ensure that any such transfers are

covered by appropriate safeguards, including Standard Contractual Clauses where required by

GDPR.

  1. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly

collect personal information from children. If you believe we have inadvertently collected information

from a child, please contact us immediately at hello@hittoagency.com.

Our website and services are not directed at children under the age of 16. We do not knowingly

collect personal information from children. If you believe we have inadvertently collected information

from a child, please contact us immediately at hello@hittoagency.com.

  1. Change to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal

requirements. We will notify you of any significant changes by updating the 'Last Updated' date at the

top of this page. We encourage you to review this policy periodically.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal

requirements. We will notify you of any significant changes by updating the 'Last Updated' date at the

top of this page. We encourage you to review this policy periodically.

  1. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your

personal data, please contact us:

HITTO Agency

  • Email: hello@hittoagency.com

  • Website: hittoagency.com

  • Location: Perth, Western Australia, Australia

For EU/EEA users: if you are not satisfied with our response, you have the right to lodge a complaint

with your local data protection authority.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your

personal data, please contact us:

HITTO Agency

  • Email: hello@hittoagency.com

  • Website: hittoagency.com

  • Location: Perth, Western Australia, Australia

For EU/EEA users: if you are not satisfied with our response, you have the right to lodge a complaint

with your local data protection authority.