Privacy policy

Last updated 2 November 2026

1 Who we are and how to contact us

The Social Brand is operated by Sherien Wissa, trading as The Social Brand. This policy explains how we handle personal information in connection with our website, enquiries, bookings and production services. For privacy questions, requests or complaints, email contact@thesocialbrand.com.au.

2 Information we handle

Depending on your interaction with us, information may include your contact and business details; enquiry and booking details; correspondence and project instructions; billing and transaction records; and your image, voice, footage, audio, transcripts and other content associated with a production.

We collect information you provide through our website forms, booking tools, email, project materials and service interactions. Project materials may also contain information about guests or other participants. Production may involve recording image and sound and preparing transcripts as part of the agreed service.

3 Why we use information

We use information to respond to enquiries, manage bookings and client relationships, plan and deliver agreed services, communicate about projects, process and reconcile payments, handle requests or complaints and meet applicable legal obligations. Promotional use of project footage is described separately below.

4 Website forms and service providers

Website enquiry and service request forms store submitted information in our website inbox using a Cloudflare D1 database, together with processing and receipt records. These website forms are stored in our website inbox rather than automatically forwarded to GoHighLevel. The Tabooze “Be a guest” application form is an exception: your name, Instagram handle and story are emailed to Sherien through Resend for review and a possible response through Instagram. Guest application text is not stored in our website inbox. The website keeps limited delivery and duplicate-prevention metadata, including a submission identifier, a hash of the submitted details, submission time, delivery status and the email provider’s message identifier. Application content is processed by Resend and held in our business email records; the absence of website inbox storage does not mean the application is not retained elsewhere.

We use GoHighLevel for discovery booking, Stripe for payments and Dropbox for file delivery. We may also share relevant project information with studios, editors, production contractors and other providers engaged to deliver your agreed service, and with advisers or authorities where required by law.

The information a provider receives depends on the service used. Providers may also collect information directly when you use their services, such as a booking calendar, payment page or file sharing link, under their own privacy information. Using a provider does not remove responsibilities we have under applicable law.

5 Overseas handling

We use international service providers that may process information outside Australia, including in the United States. Provider policies describe other possible locations; actual handling depends on the service and its configuration. You can contact us for information about the providers used for your enquiry or project.

Provider privacy information: Dropbox https://www.dropbox.com/privacy; Stripe https://stripe.com/en-au/privacy; Cloudflare https://www.cloudflare.com/privacypolicy/; HighLevel https://www.gohighlevel.com/privacy-policy.

6 Website analytics and external services

If enabled, our first party analytics feature counts selected page views, clicks and broad scroll levels as daily totals. That feature does not use cookies or session identifiers and does not store IP addresses, user agents, referrers, full URLs or form values in its analytics records. It respects Do Not Track and Global Privacy Control signals and excludes form, discovery and private pages.

Form abuse controls process an IP address into a hashed hourly bucket; the application does not store the raw IP address for that purpose. These limits describe our application features, not all information a hosting or external service provider may collect.

The website uses local fonts, an embedded GoHighLevel booking calendar and links to services such as YouTube and Instagram. External services have their own privacy practices. Review their privacy information before providing information through them.

7 Marketing and promotional footage

You can contact us to ask that we stop marketing communications, or use an unsubscribe option provided in a message. This is separate from communications needed to manage an enquiry, booking or project. An enquiry form is not, by itself, a marketing opt in.

Promotional use of footage and your opt out

Our engagement terms allow footage from your project to be used for The Social Brand’s advertising, social media, social proof and portfolio unless you tell us not to. Opt out by emailing contact@thesocialbrand.com.au, preferably before publication. You can also contact us later about future use or published content.

Existing restrictions and other participants’ rights remain. Additional consent may be needed for children or sensitive content. This policy is not, by itself, consent and does not change permissions for existing footage.

8 Storage and access to footage

Information is held in our business records and the services described above. We will provide client access to footage for two years from the file delivery date and keep our own copy to support that access. This access period is not a general deletion deadline for all personal information or other record types.

Retention of other records depends on their purpose and applicable legal requirements. You can contact us about information we hold and request access, correction or deletion. We take reasonable steps to protect personal information from loss, misuse and unauthorised access, alteration or disclosure. No internet transmission or storage system can be guaranteed completely secure.

Our aggregate analytics use a rolling 90-day reporting window; older aggregate records are removed during routine processing. This is separate from footage access and other business records.

9 Requests and complaints

Email contact@thesocialbrand.com.au to ask about personal information we hold, request access or correction, ask us to consider deletion, or make a privacy complaint. Describe the information or concern and the outcome you seek. We may need to verify your identity before providing information or making a change.

We will consider your request under applicable law and let you know the outcome, including any reason we cannot meet it. A deletion request may be limited by legal obligations or other lawful reasons to retain information. If a concern remains unresolved, you may seek advice from a relevant regulator, including the Office of the Australian Information Commissioner where it has jurisdiction.

10 Updates

We may update this policy to reflect changes to our practices or legal requirements and will show the updated date. A policy update does not, by itself, provide consent for a new use of personal information or change an existing agreement.