This Privacy Policy explains how In Cahoots Group Pty Ltd ("In Cahoots", "we", "us") handles personal information you share with us. We work in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This policy sits alongside our Code of Conduct, which sets out the values and conduct standards we work to.
What we collect
From clients we work with. Contact details (name, email, phone, business name), brand and audience data shared during a campaign, and access credentials you grant to platform accounts (Meta, Google, Klaviyo and similar). We collect only what we need to deliver the work scoped in your Client Services Agreement.
From visitors to our website. Standard analytics data, including IP address, browser type, pages visited, and time spent on the site. This helps us understand how the site is used and improve it.
From people who contact us. Whatever you choose to share when you fill in a contact form, send an email, or subscribe to our mailing list.
What we use it for
Delivering the marketing services agreed in your Client Services Agreement
Responding to enquiries, questions, and requests
Sending updates and marketing communications, only if you have opted in
Improving the website and our service
Meeting our obligations under Australian privacy law
Who has access
In Cahoots is a small studio. Access to client data is limited to Caitlin Reilly and any subcontractors engaged on a specific project. All subcontractors are bound by the same confidentiality obligations as In Cahoots and are listed in your Client Services Agreement where relevant.
We do not sell client data, share it with third parties for marketing purposes, or use it across other client engagements.
How we store it
Client data is stored in the platforms required to deliver the work (for example, your own Meta Business Manager, your own Klaviyo account, your own Google Ads account) plus our internal working systems (Dropbox, Slack, Google Workspace). All systems use industry-standard security and access controls.
We do not export client audience data, customer lists, or campaign data to systems outside the engagement.
AI tools
We use AI tools in our work, including AI meeting assistants that transcribe and summarise calls, and AI assistants that help with drafting, research and analysis. We work to an internal AI use policy with one rule at its centre: your data stays yours. Client data handled through these tools is kept within our own secured business accounts, used only to deliver your work, and never used to train public AI models. Where a tool offers the choice, we turn off any setting that would use your data for model training, and we will tell you if a specific engagement needs an AI tool we have not covered here.
How long we keep it
Client data shared during a campaign is retained for the duration of the engagement and for a reasonable period afterwards for reporting, dispute resolution, and tax record purposes. On request, we will delete or return client data held in our working systems within thirty (30) days, subject to any legal retention requirements.
Cookies
Our website uses cookies and similar technologies to enhance your browsing experience and provide basic analytics. You can disable cookies in your browser settings, but parts of the site may not function as expected.
Third-party links
Our website may link to other sites. We are not responsible for the content, security, or privacy practices of those sites. Review their policies before sharing personal information.
Your rights
Under Australian Privacy Principles, you can:
Ask what personal information we hold about you
Ask us to correct information that is inaccurate or out of date
Ask us to delete information we no longer need
Make a complaint about how we have handled your information
Contact us
For any privacy questions or requests, contact Caitlin at caitlin@incahoots.marketing. We respond within five business days.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
