Romero is operated by the company above ("Romero", "we", "us"). We build and run customer acquisition systems for service businesses: video content, advertising and lead tracking. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
You do not have to give us any of this. If you would rather not use the form, you can email us instead.
We do not sell personal information, and we do not add you to marketing lists you did not ask for.
Every SMS and email we send identifies Romero and offers a way to opt out. Reply STOP to any text, use the unsubscribe link in any email, or write to us. We comply with the Spam Act 2003 (Cth).
When we run advertising and lead tracking for a business, we hold the enquiries that come in for that business and, where the business gives us access, its ad account and customer records so we can track leads through to the sale. In that work we act as the business's service provider and follow its instructions. The business's own privacy policy covers its customer records; we delete our copy when the business asks us to or when the engagement ends. Footage we film for a client belongs to the client, and we only publish it with their approval.
Only the services we need to run Romero: Supabase (our database, hosted in Sydney), Vercel (website hosting), Calendly (bookings), GoHighLevel (customer records and messaging) and Meta (advertising measurement, through the Meta Pixel). You can limit ad tracking in your browser or in your Meta ad settings. Some of these providers store data in the United States. We choose providers that commit to protecting the information they hold for us, and we share only what each one needs. We may also disclose information if the law requires it.
Information is encrypted in transit, access is limited to the people who need it, and each client's data is separated in our database. No system is perfectly secure, but we take reasonable steps to protect information from misuse, loss and unauthorised access, and we will tell you if a breach is likely to cause you serious harm.
We keep enquiry details while we are in contact with you and for up to two years after our last contact, unless you ask us to delete them sooner. Client data is kept for the length of the engagement and as our services agreement sets out.
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email harley@romero-org.com and we will respond within 30 days. If you are unhappy with how we handle your information, tell us first so we can fix it. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.
If we change this policy we will post the new version here with a new date.