Privacy Policy
This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us, offline or online, including through our website (Site).
In this Privacy Policy, 'we', 'us', or 'our' means:
Entity: XLR8 Media, operated by XLR8 Media Holdings Pty Ltd ATF Llewellin Family Trust, ABN 75 533 606 065, Level 17/9 Castlereagh St, Sydney NSW 2000.
We are committed to complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act.
2. Related Entity Disclosure
XLR8 Media operates BestRealEstateAgent.com.au (BREA Platform) through the same legal entity. The BREA Platform has its own separate Privacy Policy available at bestrealestateagent.com.au/privacy-policy.
Where a person interacts with both XLR8 Media and the BREA Platform, each interaction is governed by the applicable Privacy Policy for that platform. Data collected under this Policy will not be shared with the BREA Platform without your express consent, except where you are a registered agent on both platforms and the data is necessary to administer that dual relationship.
XLR8 Media operates BestRealEstateAgent.com.au (BREA Platform) through the same legal entity. The BREA Platform has its own separate Privacy Policy available at bestrealestateagent.com.au/privacy-policy.
Where a person interacts with both XLR8 Media and the BREA Platform, each interaction is governed by the applicable Privacy Policy for that platform. Data collected under this Policy will not be shared with the BREA Platform without your express consent, except where you are a registered agent on both platforms and the data is necessary to administer that dual relationship.
3. Personal Information We Collect
3.1 Information from Clients
When you engage our Google Ads services, we may collect:
Your name and the name of your business or agency
Your email address and phone number
Your business address and ABN
Credit card details for payment processing (handled via PCI DSS compliant processors)
Campaign preferences, target suburbs, and service requirements
Website URLs and digital assets used in advertising campaigns
Performance data from your advertising campaigns (impressions, clicks, conversions, leads)
Communications between you and our team
3.2 Information from Lead Recipients
Where we manage lead generation campaigns on your behalf, we may collect personal information about individuals who respond to those campaigns (prospective leads), including:
Name, email, and phone number
Enquiry details and property information
This information is collected for the purpose of delivering it to you as the campaign client and is handled in accordance with our standard data security practices.
3.3 Information Collected Automatically
When you visit our Site, we may automatically collect:
Your IP address and browser type
Device and operating system information
Pages visited and time spent on our Site
Referring website and clickstream data
Location data (at suburb or city level, where permitted)
4. How We Use Personal Information
We collect, hold, use, and disclose personal information for the following purposes:
To provide Google Ads campaign management services to you
To contact and communicate with you about your campaigns and account
For internal record keeping, invoicing, and administrative purposes
To deliver lead contact details to you as the campaign client
For analytics, platform improvement, and business development
To send you service updates, performance reports, and renewal communications
For advertising and marketing, including promotional information about our services
To comply with our legal obligations and resolve disputes
To consider employment applications where relevant
5. Disclosure of Personal Information to Third Parties
We may disclose personal information to:
Google LLC, for the purpose of creating, managing, and optimising your Google Ads campaigns
Payment processors, for the purpose of processing campaign fees and invoices
Our employees, contractors, and related entities for the purpose of providing services to you
BestRealEstateAgent.com.au (our related entity under the same ABN), only where you have consented or are a registered participant on both platforms
Credit reporting agencies, courts, tribunals, and regulatory authorities in the event of payment default or legal proceedings
Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law
Analytics and advertising platforms (such as Google Analytics) for Site performance measurement
We do not sell personal information to third parties.
6. Overseas Disclosure
Some of our service providers may store or process data outside Australia, including in the United States and Singapore (primarily via cloud infrastructure providers such as Google Cloud). Where data is transferred overseas, we take reasonable steps to ensure the recipient complies with the Australian Privacy Principles or is subject to a comparable privacy regime.
7. Data Security
We are committed to ensuring that personal information we collect is secure. We implement suitable physical, electronic, and managerial procedures to safeguard personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure.
Despite these measures, no system is completely secure. We cannot guarantee the security of information transmitted over the internet. Transmission is carried out at your own risk.
8. Notifiable Data Breaches
In the event of a data breach that is likely to result in serious harm to any individual whose information is involved, we will:
Assess the breach promptly and take steps to contain it
Notify affected individuals as soon as practicable
Report the breach to the Office of the Australian Information Commissioner (OAIC) where required under the NDB scheme
Take remedial action to prevent future breaches
If you become aware of any actual or suspected security breach involving your information, please contact us immediately at info@xlr8.media.
9. Data Retention
We retain personal information for the following periods:
Client contact information - Duration of relationship plus 7 years
3.1 Information from Clients
When you engage our Google Ads services, we may collect:
Your name and the name of your business or agency
Your email address and phone number
Your business address and ABN
Credit card details for payment processing (handled via PCI DSS compliant processors)
Campaign preferences, target suburbs, and service requirements
Website URLs and digital assets used in advertising campaigns
Performance data from your advertising campaigns (impressions, clicks, conversions, leads)
Communications between you and our team
3.2 Information from Lead Recipients
Where we manage lead generation campaigns on your behalf, we may collect personal information about individuals who respond to those campaigns (prospective leads), including:
Name, email, and phone number
Enquiry details and property information
This information is collected for the purpose of delivering it to you as the campaign client and is handled in accordance with our standard data security practices.
3.3 Information Collected Automatically
When you visit our Site, we may automatically collect:
Your IP address and browser type
Device and operating system information
Pages visited and time spent on our Site
Referring website and clickstream data
Location data (at suburb or city level, where permitted)
4. How We Use Personal Information
We collect, hold, use, and disclose personal information for the following purposes:
To provide Google Ads campaign management services to you
To contact and communicate with you about your campaigns and account
For internal record keeping, invoicing, and administrative purposes
To deliver lead contact details to you as the campaign client
For analytics, platform improvement, and business development
To send you service updates, performance reports, and renewal communications
For advertising and marketing, including promotional information about our services
To comply with our legal obligations and resolve disputes
To consider employment applications where relevant
5. Disclosure of Personal Information to Third Parties
We may disclose personal information to:
Google LLC, for the purpose of creating, managing, and optimising your Google Ads campaigns
Payment processors, for the purpose of processing campaign fees and invoices
Our employees, contractors, and related entities for the purpose of providing services to you
BestRealEstateAgent.com.au (our related entity under the same ABN), only where you have consented or are a registered participant on both platforms
Credit reporting agencies, courts, tribunals, and regulatory authorities in the event of payment default or legal proceedings
Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law
Analytics and advertising platforms (such as Google Analytics) for Site performance measurement
We do not sell personal information to third parties.
6. Overseas Disclosure
Some of our service providers may store or process data outside Australia, including in the United States and Singapore (primarily via cloud infrastructure providers such as Google Cloud). Where data is transferred overseas, we take reasonable steps to ensure the recipient complies with the Australian Privacy Principles or is subject to a comparable privacy regime.
7. Data Security
We are committed to ensuring that personal information we collect is secure. We implement suitable physical, electronic, and managerial procedures to safeguard personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure.
Despite these measures, no system is completely secure. We cannot guarantee the security of information transmitted over the internet. Transmission is carried out at your own risk.
8. Notifiable Data Breaches
In the event of a data breach that is likely to result in serious harm to any individual whose information is involved, we will:
Assess the breach promptly and take steps to contain it
Notify affected individuals as soon as practicable
Report the breach to the Office of the Australian Information Commissioner (OAIC) where required under the NDB scheme
Take remedial action to prevent future breaches
If you become aware of any actual or suspected security breach involving your information, please contact us immediately at info@xlr8.media.
9. Data Retention
We retain personal information for the following periods:
Client contact information - Duration of relationship plus 7 years
Campaign and performance data - Duration of relationship plus 7 years
Financial records and invoices - 7 years (as required by Australian tax law)
Lead recipient contact details - 12 months from campaign end, unless earlier deletion is requested
Communications (email, phone records) - 3 years unless longer retention is required
Site analytics data - 26 months (standard Google Analytics retention)
10. Cookies and Web Beacons
We may use cookies on our Site from time to time. Cookies are text files placed in your browser to store preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. However, they do allow third parties such as Google and Facebook to cause our advertisements to appear on your social media and online media feeds as part of retargeting campaigns.
We may also use web beacons (clear GIFs) to monitor visitor behaviour, count page visits, and deliver cookies. You can control cookies through your browser settings, though disabling them may affect Site functionality.
11. Your Rights
11.1 Access
You may request details of the personal information we hold about you. An administrative fee may be payable. In certain circumstances permitted by the Privacy Act 1988, we may decline access requests.
11.2 Correction
If you believe any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us. We will take reasonable steps to correct it.
11.3 Deletion
You may request deletion of your personal information, subject to legal retention requirements. Where deletion is not possible (e.g., financial records required by law), we will advise you accordingly.
11.4 Opt-Out of Marketing
To unsubscribe from our email database or marketing communications, contact us using the details below or use the unsubscribe facility in any marketing email.
12. Privacy Complaints
If you believe we have breached the Australian Privacy Principles or this Privacy Policy, please contact us:
We may use cookies on our Site from time to time. Cookies are text files placed in your browser to store preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. However, they do allow third parties such as Google and Facebook to cause our advertisements to appear on your social media and online media feeds as part of retargeting campaigns.
We may also use web beacons (clear GIFs) to monitor visitor behaviour, count page visits, and deliver cookies. You can control cookies through your browser settings, though disabling them may affect Site functionality.
11. Your Rights
11.1 Access
You may request details of the personal information we hold about you. An administrative fee may be payable. In certain circumstances permitted by the Privacy Act 1988, we may decline access requests.
11.2 Correction
If you believe any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us. We will take reasonable steps to correct it.
11.3 Deletion
You may request deletion of your personal information, subject to legal retention requirements. Where deletion is not possible (e.g., financial records required by law), we will advise you accordingly.
11.4 Opt-Out of Marketing
To unsubscribe from our email database or marketing communications, contact us using the details below or use the unsubscribe facility in any marketing email.
12. Privacy Complaints
If you believe we have breached the Australian Privacy Principles or this Privacy Policy, please contact us:
Contact: Email: info@xlr8.media | Phone: 02 8287 3333 | Post: Level 17/9 Castlereagh St, Sydney NSW 2000
We will acknowledge complaints within 2 business days and respond within 30 days with an outcome or progress update.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
13. Amendments
We may, at any time and at our discretion, vary this Privacy Policy by publishing the amended version on our Site with a new 'Last Updated' date. We recommend you check our Site regularly. For material changes, we will notify active clients by email.
14. Contact Us
Email - info@xlr8.media
We will acknowledge complaints within 2 business days and respond within 30 days with an outcome or progress update.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
13. Amendments
We may, at any time and at our discretion, vary this Privacy Policy by publishing the amended version on our Site with a new 'Last Updated' date. We recommend you check our Site regularly. For material changes, we will notify active clients by email.
14. Contact Us
Email - info@xlr8.media
Phone - 02 8287 3333
Address - Level 17/9 Castlereagh St, Sydney NSW 2000
Website - xlr8.media
ABN - 75 533 606 065
Last Updated: 14/02/2026 | Version 2.0 | Replaces version dated 07/06/21
© XLR8 Media Holdings Pty Ltd ATF Llewellin Family Trust. All rights reserved.
© XLR8 Media Holdings Pty Ltd ATF Llewellin Family Trust. All rights reserved.