Privacy Policy

Reputation Management Australia Pty Ltd, trading as ORMA. ABN 53 619 289 208. We provide online reputation management services to individuals and businesses in Australia. You can contact us at info@orma.com.au.

We collect personal information in three ways:

• Information you provide. When you submit our Get Started or Contact form, we collect your name, email address, phone number, and any details you choose to share about your situation, including links or descriptions of online content you'd like assessed.
• Information collected automatically. When you visit our website we collect standard analytics data: pages viewed, time on page, approximate location (city level), device and browser type, and referrer. This is collected through cookies and similar technologies (see §6).
• Information from engagement. If you proceed with an engagement, we may collect additional information necessary to provide the service, for example, identification for verification, supporting evidence for removal requests, or correspondence with third parties on your behalf.

We use personal information to:

• Respond to your enquiry and assess your situation
• Provide our reputation management services if you engage us
• Communicate with you about your enquiry, engagement, or matters that materially affect either
• Maintain our records and meet our legal obligations
• Improve our website, content, and services based on aggregate analytics

We do not sell or rent your personal information. We do not use your information for marketing by third parties.

We use a small number of trusted third-party processors to operate the website and manage enquiries. Each is bound by their own privacy obligations.

• Vercel Inc. hosts our website and serves pages to your browser. Servers may be located outside Australia.
• Vercel Postgres stores enquiry submissions as a backup audit record.
• HubSpot, Inc. provides our customer relationship management. Enquiry form data is sent to HubSpot for our team to triage and respond. HubSpot is US-based and stores data in the US and EU.
• Discord, Inc. receives an internal webhook notification so our team is alerted to new enquiries in real time.
• Google LLC provides Google Analytics 4 and Google Tag Manager for website analytics.
• Microsoft Corporation provides Microsoft Clarity heatmap and session analytics, used in aggregate to understand how visitors use the site.
• Cloudflare, Inc. handles DNS, content delivery, and Turnstile (spam protection) on our forms.

We do not disclose personal information to any third party other than as described above, except where required by law, or where you have given express consent (for example, instructing us to engage a third party such as legal counsel on your behalf during a service engagement).

Some of our processors (HubSpot, Google, Microsoft, Cloudflare, Discord, Vercel) are based outside Australia. Your information may be transferred to and stored in the United States, the European Union, or other countries where these providers operate infrastructure. We rely on the contractual protections each provider offers and on their own privacy commitments to ensure your information is appropriately handled. By submitting information to us, you consent to these transfers as necessary to provide our services.

Our website uses cookies and similar technologies for the following purposes:

• Functional. Required for the site to work (e.g. remembering your progress through the multi-step form before submit).
• Analytics. Google Analytics 4 / Tag Manager and Microsoft Clarity collect aggregate usage data so we can improve the site.
• Security. Cloudflare Turnstile may set cookies as part of its bot detection.

Most browsers allow you to refuse or delete cookies. Disabling cookies may affect some site functionality but will not prevent you from contacting us.

We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification, and disclosure. These steps include encrypted transport (HTTPS), restricted access controls on our internal systems, and regular audits of who has access to enquiry data.

We retain enquiry information for as long as it is reasonably needed for the purposes described in this policy or to comply with our legal obligations. Typically that means we retain enquiry records for at least 7 years to meet Australian record-keeping requirements. After that period we securely delete or de-identify the records.

You have the right to:

• Request access to the personal information we hold about you
• Request correction of personal information that is inaccurate
• Request deletion of personal information we hold, subject to legal exceptions
• Withdraw consent to ongoing communications from us at any time
• Make a privacy complaint and have it investigated (see §10)

To exercise any of these rights, email info@orma.com.au. We may need to verify your identity before acting on the request.

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information about a child, contact us and we will delete it promptly.

If you believe we have mishandled your personal information, please contact us first at info@orma.com.au. We will investigate and respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. Changes take effect when posted on this page. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted at the top of the page for at least 30 days.

For any privacy questions or to exercise your rights under this policy, contact:

Reputation Management Australia Pty Ltd
Trading as ORMA · ABN 53 619 289 208
info@orma.com.au