Your details. Our end of the bargain.

We're a small agency, and we treat the little information this site collects the way we'd want ours treated: take only what the job needs, keep it to ourselves, and tell you plainly what happens to it. This policy covers cartercarter.com.au. Last updated 16 October 2026.

Who we are

Cartercarter, Sydney.

Cartercarter is a boutique brand, web, customer experience, creative, marketing, AI and audio agency at 24 Chard Rd, Brookvale NSW 2100, Australia. We run this website and we're responsible for the personal information it collects.

We handle that information under the Australian Privacy Act 1988 and the Australian Privacy Principles. If anything here is unclear, or you'd like to know something this page doesn't say, email (mailto:hello@cartercarter.com.au) and a person will answer.

What we collect

Only what you give us, and a little about how the site is used.

When you send us an enquiry. The contact form asks for your name and email address, and optionally your company, phone number, the service you're interested in and your message. We also record the time the form was opened and the IP address it was sent from, which we use to tell people from bots. A clean enquiry is also recorded in Get Carter, our own customer system, so we can keep track of the conversation.

When you ask to be notified. Some service pages aren't finished yet. If you leave your email to hear when one is ready, we store that address, which page you were on and your IP address.

When you visit. Our own first-party analytics, Get Carter, records page views, the page you landed on, where you came from (the referring site and any campaign tags in the link), clicks on things we've marked for tracking, the approximate country and device type, and a random visitor ID so we can tell two visits by the same browser apart. It does not know who you are unless you later send us an enquiry, and we don't use it to build advertising profiles or share it with ad networks.

The usual server records. Like every website, our hosting keeps short-lived logs of requests, including IP addresses and browser types, for security and to keep the site running.

We don't collect payment details, government identifiers or anything sensitive through this site, and we'd rather you didn't put them in the message box.

Why we collect it

To reply to you, and to make the site better.

We use your enquiry details to answer you, work out whether and how we can help, and follow up on that conversation. We use notify-me addresses for exactly one thing: telling you when the page you asked about is live.

We use the analytics to see which pages people read, where visitors come from and whether the site is doing its job, so we can improve it. We use IP addresses and the bot checks described below to keep spam out of our inbox.

We don't sell personal information, rent it, or add you to a mailing list you didn't ask for.

Who else sees it

A short list, and no advertisers on it.

A few services help us run the site. Each sees only what it needs to do its job.

Our content system. Enquiries and notify-me sign-ups are stored in the database behind this site, which only the Cartercarter team can log in to.

Resend delivers the email that tells us an enquiry or sign-up has arrived. That email carries the details you typed, so Resend processes them in transit. Resend is based in the United States.

Cloudflare Turnstile checks that the contact form was sent by a person. It may look at your browser and connection to decide, and it only shows a challenge if it isn't sure. Cloudflare operates globally. We also add our own quiet checks: a hidden field bots tend to fill, a limit on how many messages one connection can send, and a look at the message itself. None of those checks block a genuine message; at worst it waits for a human to read it.

Get Carter is our own analytics and customer system, built and operated by Cartercarter Pty Ltd. Visits and enquiries are held in Australia, in a database only our team can read, and nothing is passed to any third-party analytics or advertising company. Its own (https://getcarter.com.au/privacy) spells out exactly what the tracker records and how it's handled.

Our hosting provider stores the site and its database on servers it manages for us.

Beyond that, we'd only disclose personal information if the law required it, or to protect our rights or someone's safety. We will never sell it.

Cookies and local storage

No cookie banner, because there's nothing to consent to.

This site sets no advertising or third-party tracking cookies, so you won't be asked to accept any.

Our analytics keeps a few small values in your browser's local storage rather than in cookies: a random visitor ID, a note of the page you first arrived on and where you came from, and a short outbox so a page view isn't lost if our server is briefly unreachable. None of it identifies you, and nothing is sent to anyone but us.

To opt out, add ?gc_ignore=1 to the end of any page address on this site and load it once. That browser is then ignored, every visit, until you load a page with ?gc_ignore=0. Clearing your browser's site data has the same effect. Cloudflare Turnstile may set its own short-lived cookie on the contact page while it checks the form.

Overseas

Some of it crosses a border.

We're in Sydney, but email delivery and bot checks are handled by Resend and Cloudflare, which operate in the United States and around the world. When your enquiry passes through them it is briefly handled outside Australia. We only use providers who publish their own privacy commitments and we don't send your details anywhere else.

How long we keep it

As long as it's useful, and no longer.

Enquiries stay in our system while we're talking to you and for a reasonable time afterwards so we can pick the conversation up again; we clear old ones out periodically. Messages our checks flag as spam are kept briefly for review, then deleted. Notify-me addresses are removed once we've sent the one email they were for, or sooner if you ask. Visit records in Get Carter are kept for as long as we hold the account; they're joined to a name only once that browser sends us an enquiry, and if we delete your contact record, your earlier visits go back to being anonymous. The detail is in (https://getcarter.com.au/privacy). You can ask us to delete anything about you at any time, and we will, unless we're legally required to keep it.

Your rights

Ask, and we'll show you.

You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Email (mailto:hello@cartercarter.com.au) and we'll come back to you within a few business days. We don't charge for this. We may ask you to confirm you are who you say you are before we hand anything over.

If you think we've handled your information badly, tell us first and we'll do our best to put it right. If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at (https://www.oaic.gov.au).

Links and embeds

Other people's sites follow other people's rules.

Our work pages and news posts link to clients' websites and occasionally embed content hosted elsewhere, such as a video. Once you follow a link or play an embed, that site's privacy policy applies, not ours, and it may set its own cookies or collect its own data. We choose carefully, but we don't control them.

Changes

If this changes, so does the date at the top.

We'll update this page if what we collect or how we use it changes, and the date in the introduction will move with it. Anything significant, like a new analytics tool, will be spelled out here before it starts.

Questions, requests or complaints: (mailto:hello@cartercarter.com.au), +61 (0) 2 7200 2545, or write to Cartercarter, 24 Chard Rd, Brookvale NSW 2100, Australia.