Privacy policy
Last updated 7 October 2026
This policy explains how Design Box Digital Pty Ltd (ABN 51 657 551 169), 16 Daley Ct, Beaconsfield VIC 3807, Australia (“findseo”, “we”) handles personal information under the Australian Privacy Principles. Where the GDPR or UK GDPR applies to you, you have the rights it gives you too.
What we collect
- Agency details that agencies publish themselves, such as business name, website, business phone and email, and office location.
- Account details when you claim a listing or sign in: your name, role and work email.
- Reviews: your name, email, role, a description of your company and your review. Only your first name and the description are shown publicly.
- Briefs and enquiries: your contact details and what you tell us about your project.
- Payments: Stripe processes card details. We receive the billing name, email, address, tax ID if given, and payment status, never full card numbers.
- Technical data: IP address (stored as a one-way hash for anti-spam purposes), browser type and security logs.
Why we use it
To run the directory, verify claims and reviews, prevent fraud and spam, introduce buyers to agencies when asked, process payments, and respond to you. We don't sell personal information, and we don't use advertising trackers on findseo.
Who we share it with
- Agencies: when you send an enquiry, or when you submit a Get matched brief (up to three Featured agencies).
- Service providers who host or help run findseo: Cloudflare (hosting, security), Stripe (payments), SendGrid (email), Google (live ratings on some profiles, loaded by our server). Some of these store data outside Australia, including in the United States.
- Authorities, where the law requires it.
How long we keep it
Account and listing data for as long as the account or listing exists. Reviews while they're published, and for a reasonable period afterwards to deal with disputes. Briefs for up to 24 months. Payment records for as long as tax law requires.
Your choices and rights
You can ask to access, correct or delete your personal information, or complain about how we've handled it, by contacting us. We'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Cookies
We use only essential cookies: to keep you signed in and to complete a claim. Cloudflare Turnstile may set a cookie to check you're not a bot.