Privacy Policy

Last updated: 6 Febuary 2026

This Privacy Policy (Policy) applies to BIG LITTLE MARKETING SOLUTIONS PTY LTD (ACN 668 437 698) trading as R3 Marketing. The business address is Suite 3, Level 7, 221 London Circuit, Canberra ACT 2601. For privacy enquiries the Privacy Officer may be contacted at privacy@r3marketing.com.au. This Policy is prepared with regard to the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Purpose and application

This Policy explains how personal information is collected, held, used and disclosed by BIG LITTLE MARKETING SOLUTIONS PTY LTD (ACN 668 437 698) trading as R3 Marketing in the course of its business in Australia, including through its websites, mobile applications, marketing activities, client engagements and employment and contractor relationships. The Policy applies to personal information about clients, prospective clients, suppliers, contractors, job applicants and visitors to R3 Marketing’s digital properties and does not apply to the handling of information by third parties to whom users are directed.

Definitions and interpretation

“Personal information” has the meaning given by the Privacy Act 1988 (Cth) and includes information or an opinion about an identified individual or an individual who is reasonably identifiable. “Sensitive information” is a subset of personal information that includes, for example, health information, criminal record information and other categories identified in the Privacy Act. References in this Policy to “we”, “us” and “our” are to BIG LITTLE MARKETING SOLUTIONS PTY LTD trading as R3 Marketing.

Collection of personal information

We collect personal information where it is reasonably necessary for, or directly related to, our functions and activities. Personal information is collected directly from individuals, including by means of forms, contracts, emails, telephone calls, recruitment processes and meetings; from authorised representatives or third parties such as referees and suppliers; automatically when individuals access our websites or online services through cookies and analytics; and from publicly available sources where permitted by law. Sensitive information is collected only where necessary, with consent, or as otherwise permitted or required by law.

Kinds of information collected

The kinds of personal information we collect include identity and contact details (such as name, postal and email addresses, telephone numbers, company name and job title), commercial and transactional information (including invoices, billing and contract records), communications records, online and device information (including IP addresses, cookie identifiers and analytics), recruitment and employment information, and in limited circumstances sensitive information required for specific purposes.

Use and disclosure of personal information

Personal information is used to provide and manage our marketing, creative, branding and web development services, to perform contractual obligations, to manage supplier and contractor arrangements, to administer recruitment and employment matters, to communicate with clients and prospective clients, to conduct billing and debt recovery, to manage and secure our systems and to comply with legal obligations. Personal information will be disclosed to our employees, contractors and related entities for these purposes and to service providers engaged to provide IT, hosting, cloud and CRM services, payment processing, analytics, professional advice and other business services. Personal information may also be disclosed to government agencies, regulators or law enforcement where required by law and to potential purchasers or advisers in connection with a sale, merger or restructure of the business. Third parties engaged to handle personal information are contractually obliged to protect that information and to use it only for the purposes specified by us.

Cross-border disclosure and overseas recipients

Some of our service providers, and therefore some recipients of personal information, are located outside Australia. Where personal information is disclosed overseas we take reasonable steps to ensure that the overseas recipient will handle the personal information in a manner that provides comparable protection to the Australian Privacy Principles or we obtain the individual’s consent. Where appropriate, the countries or categories of overseas recipients will be identified on request.

Security and storage of personal information

We hold personal information in electronic and physical records and apply administrative, technical and physical safeguards proportionate to the sensitivity of the information to protect against misuse, interference, unauthorised access, modification or disclosure, and against loss. These safeguards include access controls, secure development practices, encryption where practicable and staff training. While we take reasonable steps to protect personal information, no method of transmission over the internet or method of electronic storage is completely secure and absolute security cannot be guaranteed.

Retention and destruction of personal information

Personal information will be retained only for as long as necessary for the purposes for which it was collected, to satisfy legal or regulatory obligations, to enable the establishment, exercise or defence of legal claims or as otherwise required by law. When personal information is no longer required it will be securely destroyed or de-identified.

Access, correction and complaints

Individuals may request access to or correction of the personal information we hold about them by contacting the Privacy Officer at the addresses above. We will consider such requests and respond within a reasonable period. We may refuse access or correction in certain circumstances permitted by law, in which case we will provide reasons where required. Any privacy related complaint should be directed to the Privacy Officer. We will investigate complaints and respond promptly. If an individual remains dissatisfied after our internal process, the individual may refer the matter to the Office of the Australian Information Commissioner.

Notifiable data breaches

We will comply with the Notifiable Data Breaches scheme under the Privacy Act. If we become aware of an eligible data breach that is likely to result in serious harm to any individual, we will take steps required by law, which may include notifying affected individuals and the Office of the Australian Information Commissioner and taking remedial action.

Direct marketing and opt-out

We may use personal information to send marketing communications about our services where the individual has consented or where there is an existing business relationship and it is lawful to do so. Individuals may opt out of receiving marketing communications by following the unsubscribe instructions in the communication or by contacting the Privacy Officer.

Cookies, analytics and third-party technologies

Our websites use cookies and similar technologies for functionality, analytics and to improve user experience. Individuals may configure their browser settings to disable cookies, noting that some site features may not operate if cookies are disabled. Our websites may contain links to third-party sites; this Policy does not apply to those sites and we recommend review of the privacy terms of any third party before providing personal information.

Third-party websites and social media

When individuals interact with third-party websites or social media platforms that we operate or use, those platforms may collect personal information independently. Individuals should consult the privacy settings and policies of those platforms. We do not accept responsibility for the privacy practices of third parties.

Changes to this Policy

We may amend this Policy from time to time. Revised versions will be published on our website with a revised “Last updated” date and will apply from the date of publication. Continued use of our services after publication of changes constitutes acceptance of the revised Policy.

Contact and further information

The Privacy Officer of BIG LITTLE MARKETING SOLUTIONS PTY LTD trading as R3 Marketing Essentials may be contacted at privacy@r3marketing.com. The business address is 221 London Circuit, Canberra ACT 2601. For additional information about privacy rights and obligations under Australian law, see the Office of the Australian Information Commissioner.