Your website privacy policy should describe the site you run. We map what your site collects, where it sends it and which scripts run before anyone agrees. Then we bring the policy, the consent banner and the forms into line with the Australian Privacy Principles. It's practical website work, and it isn't legal advice.
Partner badges you can look up, numbers straight from client dashboards, and the businesses whose websites we've built. Here's the scoreboard so far.
What we do
“The entire process was seamless, easy, and incredibly user-friendly. They were patient and flexible with all the changes and back-and-forth... Most importantly, they absolutely nailed the brief.”
5 stars Google review
What is included
Four rules the work follows. They make the way your site behaves and the policy that describes it say the same thing.
We trace every form, cookie and third-party script before we draft a word of the policy. The policy has to describe what's there.
How a build runsTags that track a visitor load only after they agree. Saying no takes exactly as much effort as saying yes.
See the workEvery field on a form has to earn its place. Data you never collect is data you never have to protect.
The proof we showWe write the policy for the person reading it. It names the tools, the purposes and a contact who answers.
Questions people askThe argument
Written from what the site collects
Every field and script accounted for.
Copied from another site
Describes data you never collect.
Held until consent
Analytics and ad tags wait for a yes.
Fires on page load
The banner asks after the fact.
Only what you use
A field nobody acts on comes off.
Every field, just in case
Date of birth on a callback form.
Mapped and disclosed
Every tool, and where it stores data.
Nobody is sure
A plugin sends it offshore quietly.
Flagged where it matters
We say when a lawyer should read it.
Presented as advice
Web copy dressed up as a legal opinion.
How it runs
You see the page plan before design starts, and the design before we build. So there are no nasty surprises at the end.
Data map
We crawl the site and list every form field, cookie and script. Then we note where each one sends what it collects.
What we deliver
What do people search before they call you?
Gap review
We compare the map with the policy you have and the Australian Privacy Principles. Then we write up the gaps plainly.
What we deliver
Monthly searches
Consent
We set up a consent banner and preference centre. Tracking tags wait for a choice, and the site remembers it.
What we deliver
Sentient / Inter
14.05:1Forms
We trim every form to what you use and add a collection notice where people type. Then we check where each form delivers.
What we deliver
Policy
We draft the policy from the data map in plain language. It's ready for your lawyer to review where it needs to be.
What we deliver
Baseline recorded
14 OctThe long read
The law is the Privacy Act and its 13 Australian Privacy Principles. On a website, it comes down to a few things you can check.
A privacy policy is often the last page written and the first one copied. It arrives from a template or another business and names tools you've never used.
That leaves you with a document that promises things the site doesn't do. It also says nothing about the things it does.
We start from the site instead: what it collects, where it sends it, and how long it keeps it.
Plenty of banners ask the question politely while the analytics and ad tags load underneath. By the time a visitor clicks, the tags have already fired.
We put the order right. Scripts that track wait for a yes. A no is as easy to give as a yes, and the site remembers the choice next time.
Every field on a form is a promise to protect what goes into it. A date of birth on a callback form adds risk and rarely adds a lead. So does a street address on a newsletter signup.
So we cut every form to what you act on. Data you never collect can't leak, and it never needs a line in the policy.
Illustrative: the shape an untrimmed set of forms takes, not a measurement of yours.
We know how websites collect and move data, and what the Australian Privacy Principles expect a site to show. But we aren't your lawyer, and nothing we produce is legal advice.
Your business may handle health information, store data overseas or rely on an exemption. If so, we say it plainly and recommend a legal review before the policy goes live. Our job is to make sure the document they review describes the site accurately.
Case studies
Speech Clinic
A search-led structure giving each therapy and each mobile service area its own page to land on.
Scope of work
MedPrescribe
An e-prescribing platform positioned as a product, automating booking through to delivery.
Scope of work
First Class First Aid
A booking site built around the codes employers send, not the course names.
Scope of work
Ovaya
An at-home fertility treatment page answering what arrives, when, and who watches each cycle.
Scope of work
Full Body MRI
A whole-body screening scan surfaced by the organ or condition people actually search for.
Scope of work
Search proof
Shopify Partner
Shopify stores built so search can read the whole catalogue, with tracking on every sale.
Google Partner
Partner status you can look up in Google's own directory. Every result above comes with the screenshot behind it.
Where we work
Engagements
Tracking that waits for a yes
For a site whose policy is sound but whose tags fire before anyone has agreed to them.
Policy, consent and forms
For a new or existing site that collects enquiries, bookings or health details and needs all three in line.
Tools and integrations
We pick the platform that suits your business. Then we connect the site to your booking system, your CRM and your ad accounts, so every enquiry lands where your team already works.
Client results
“Up until working with Casey, we had only had poor to mediocre experiences outsourcing work to agencies... instead of needing babysitting like the other agencies we worked with, he was not only completely dependable but also gave us sound suggestions on how to get better results.”
“Since going with Casey and his team, we have had nothing but wins! They are great communicators, but more importantly, have got awesome results with low lead costs.”
“As an experienced health professional I am a hard sceptic. Casey and his team over delivered on my project with an A+ website design having actively listened to every point I was seeking.”
“Casey has been an absolute standout! His personalised approach has been nothing short of incredible. We have had amazing results from the get-go.”
“Excellent company to deal with and their web design is incredible. Would use them again and again.”
“Casey was so empathetic and patient in listening to my ideas. He asked all the right questions and got me thinking on aspects I hadn't considered. He goes above and beyond.”
“If you're looking for a highly experienced, knowledgeable and ideas-driven marketing agency, look no further... He's helped transform our business from a fairly humble start-up to a fast growing and highly regarded service provider.”
“We have worked with Casey on a number of website projects and are super impressed with his promptness, communication, professionalism, and knowledge of the full suite of digital marketing... You and your team are second to none!”
“[They have] truly exceeded my expectations... They handle every detail with care, addressing any concerns or inquiries I had with remarkable responsiveness and genuine accommodation. The end result was nothing short of fantastic.”
Research & Articles
Conversion tracking breaks when people decline cookies or block scripts. How consent mode and server-side events keep your lead numbers useful and private.
AHPRA advertising guidelines cover every page of a clinic website. What section 133 means for your testimonials, claims, titles and reviews, in plain English.
Product page design for online stores: what to show, in what order, and what Australian Consumer Law expects of your prices, returns and reviews. A checklist.
Questions
What you need to know before we start a conversation.
Not answered here? Ask us directly
No. We're a website team. We map what your site collects, fix how it collects it and draft the policy wording. Some stakes are high, such as health details or data stored overseas. There, we recommend a privacy lawyer reviews the policy before it goes live.
Many small businesses under the turnover threshold are exempt. Some are covered whatever their size, including health service providers. We can show you exactly what your site collects and where it goes. Whether your business is covered is a question for your lawyer.
Australian law doesn't name cookie banners the way European rules do. But tracking that can identify a person still falls under the Australian Privacy Principles. Asking first is the clearest way to show you have a basis for it, and it costs you very little.
You'll see fewer tracked visits from people who decline, and that's the point of asking. Aggregate figures still show overall demand. The data you do keep was collected with permission, so you can use it without wondering who agreed to what.
It depends on how many forms and third-party tools your site runs. Consent setup on its own is the shorter job. A full review with a new policy takes longer. Either way, you get the dates in writing before you commit.
Every privacy job gets a fixed quote with line items after a free 15-minute call. The price follows the forms and third-party tools on your site. If the work takes longer than we planned, that's our problem, not another invoice.
Yes. Health information is sensitive information under the Privacy Act, so intake and booking forms need express consent and a clear collection notice. After the OAIC's 2026 pixel rulings, we keep Meta, TikTok and Google Ads pixels off health pages unless visitors give express opt-in.
