Privacy, in plain English.

Last updated 8 October 2026

What we collect

When you run the free audit

Your name, email address, your website address, and the answers you give in the form. Nothing else. We do not ask for a phone number and we do not ask for payment details.

When you answer a research survey

Your answers. Your name and email only if you tick the box asking for them. If you do not tick it, your answers are anonymous and we have no way to connect them back to you.

When you buy something

Your name, email address and billing country. Your card details go straight to Stripe and never touch our servers. We can see the last four digits and the card brand, the same as you would see on a receipt.

When you buy, we tell Meta a sale happened so we can see which ads work. That message carries the amount and a scrambled (hashed) copy of your email, name and billing location, plus the browser details the Meta pixel already reads. Meta uses it to match the sale to an ad.

If you have bought from us, we may give Meta a scrambled (hashed) copy of your email so our ads reach people similar to our customers, and so we can avoid advertising to you something you already own. Meta matches the scrambled copy to its own accounts and then discards it. Email hello@birdcagegroup.com and we will leave you out.

When you send an enquiry from our Local Leads page, we tell Google and Meta an enquiry happened so we can see which ads work. Your browser scrambles (hashes) your email and phone number before Google receives them, and Google uses that copy only to match the enquiry to an ad.

When you send an enquiry

Your name, phone number, and anything else you put in the form: email, business name, what you do, your suburb and your message. Also how you found the page, such as the ad you clicked, so we know which ads work. We use it to reply to you, and for nothing else. It is kept in our own lead system. We may tell Meta that an enquiry happened, in the same way as a sale, so we can see which ads work.

Automatically, when you browse

Standard analytics: pages viewed, roughly where in the world you are, what device you used, and how you arrived. Google Analytics, the Google Ads tag and the Meta pixel run on this site.

When your business connects its Shopify store

If you are a client and you connect your Shopify store to our app, Birdcage Local Leads, we get your store’s name and address and permission to do one thing: make pages on your online store. We use it to build your landing page. Our enquiry form goes on that page as an app block you add in your theme editor. The app never reads or changes your theme files. Nothing else.

Enquiries sent through that form are handled as described under “When you send an enquiry” above. The app cannot see payments, and it cannot read or change your orders, products or customer records. We keep no Shopify customer records of our own.

The access key Shopify gives us is stored securely and only our server can read it. Remove the app from your Shopify settings and we delete the key straight away, and everything else we hold about your store within 48 hours, when Shopify tells us to. Questions to hello@birdcagegroup.com.

Why we collect it

• To send you the thing you asked for, whether that is an audit, a survey result, or something you bought.
• To follow up by email if you asked us to.
• To publish research findings. Individual survey responses are never identified in anything we publish.
• To work out which pages and ads are doing anything useful.

Who else sees it

We use other companies to run parts of this. They only get what they need to do their job.

• Vercel hosts the site.
• Upstash stores leads, buyers and survey responses.
• Supabase stores enquiries sent from our Local Leads page, in our own lead system.
• Resend sends our email.
• Stripe takes payments. They are the ones who see your card.
• Anthropic powers the free audit. When you run one, your website address and your answers are sent to their API so it can write the findings. It is not used to train their models.
• Google and Meta receive analytics and advertising data.

Some of these companies are outside Australia, mostly in the United States. We do not sell your information to anyone, and we never will.

Email, and how to stop it

We only email you if you asked us to, or if you bought something and we are sending it to you. Every marketing email we send has a working unsubscribe link and identifies us as the sender. Unsubscribing stops every sequence immediately, not just the one you clicked from.

Transactional email is different. If you buy something, we will send you the product and a tax invoice whether you are subscribed or not, because that is the thing you paid for.

How long we keep it

• Leads and survey responses: until you ask us to delete them.
• Purchase records: five years, because Australian tax law requires it.

Getting a copy, or getting it deleted

Email hello@birdcagegroup.com and ask. We will send you what we hold, correct it, or delete it. There is no form and no process. One caveat: we cannot delete purchase records we are legally required to keep, and we cannot delete anonymous survey answers because we cannot tell which ones are yours.

Cookies

Google Analytics, the Google Ads tag and the Meta pixel set cookies. Your browser can block them and the site will still work. We do not set cookies of our own for tracking.

Who we are

Birdcage Group Pty Ltd, ABN 79 629 184 210. You can reach us at hello@birdcagegroup.com.