Legal
Privacy Policy
Last updated: 2 November 2026
How Hedgehog Marketing collects, uses, and protects your personal information.
Last updated: 2 November 2026
How Hedgehog Marketing collects, uses, and protects your personal information.
Personal Information refers to data identifying an individual, such as names, addresses, email addresses, and phone numbers.
We collect information through interviews, correspondence, telephone, email, social media, websites, cookies, and third parties - including through our website (hedgehogmarketing.com.au), client websites, media sources, and public materials.
Primary purpose: Delivering services, informing clients, and marketing activities.
Secondary purposes: Uses closely related to primary purposes where recipients would reasonably anticipate such use.
You can unsubscribe from marketing lists by written request at any time.
Our website uses cookies and third-party tracking tools to measure how people find and use the site. These tools are:
You can limit or block cookies at any time through your browser settings. Note that disabling cookies may affect the functionality of some parts of this site.
For privacy enquiries relating to tracking, contact us at [email protected].
When you book a training program at book.hedgehogmarketing.com.au, we collect your name, business name, ABN, email address and phone number. When you accept our terms and conditions, we also collect your drawn signature, your typed name, and the IP address and time of that acceptance - this is kept as evidence the agreement was made.
Payments are handled by Airwallex. Your card details go directly to Airwallex and never reach our servers. If you're on an instalment plan, Airwallex stores your card against a payment consent so the remaining instalments can be charged automatically on their due dates.
Booking data is stored with Supabase, our database provider. Transactional emails, such as booking confirmations, are sent through Resend. The site itself runs on Cloudflare. Each of these providers processes your information on our behalf.
Once you accept the terms, a signed copy is emailed to you and kept on our records. To access or correct any of this information, contact us at [email protected].
Hedgehog Ads Connector is a hosted connector that lets Hedgehog staff and individually approved Hedgehog training clients work on their own Google Ads account from inside Claude. This section applies to information we receive from Google when you sign in to the connector with your Google account.
When you sign in, you give the connector the Google Ads permission (https://www.googleapis.com/auth/adwords). Google offers no narrower permission for the Google Ads API. We use it to list the Google Ads accounts you already have access to, to run read-only reporting queries (such as campaign names, statuses, budgets and performance), and, only when you confirm, to apply changes you have asked for to your own account. You can only reach accounts you already have access to. Reporting results are shown only to you, in your Claude conversation.
Every change is previewed first and does not apply until you confirm it with a single-use code that expires after ten minutes. New campaigns, ad groups, ads and keywords are always created paused, daily budgets have maximums per campaign and per account, budget increases are capped at 20 percent per change, and the connector cannot remove anything.
What we keep, and for how long:
We do not sell Google user data, share it with third parties, use it for advertising, or use it to train AI models. Hedgehog Ads Connector's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove the connector's access to your Google account at any time at https://myaccount.google.com/permissions. To have your approved entry, audit rows and stored credentials deleted, email [email protected].
For Google user data handled by the connector, the retention periods in this section apply instead of the general retention statement under "Security of Personal Information".
Sensitive information includes racial or ethnic origin, political opinions, political association membership, religious or philosophical beliefs, trade union membership, professional body membership, criminal records, or health information.
Sensitive information is used only for:
We collect Personal Information directly from individuals where reasonable and practicable. When third parties provide information, we take reasonable steps to inform individuals of such disclosure.
Personal Information may be disclosed when:
If you are a Hedgehog training or Hedgehog Studio client, you can choose to connect your own Meta (Facebook) ad account to our Hedgehog Studio. You do this by signing in with your own Facebook login and choosing which ad account to share with us. We only access the ad account you choose. Hedgehog Australia Pty Ltd (ABN 44 616 230 516), trading as Hedgehog Agency, is responsible for the data we collect through this connection.
What we read. With your connection, we read your ad account's performance data, such as campaigns, ad sets, ads, spend, impressions, clicks and conversions, so we can show you your own results. We also read the names and IDs of the Facebook Pages you can use with that ad account, so you can choose the Page for a draft ad.
What we create. Only if you approve it, your AI assistant can create draft campaigns in your ad account. Anything created is always set to paused. You switch ads on yourself in Ads Manager. We do not change your budgets or turn ads on or off.
How we use it. We use this data only to show you your own account's results and to build the drafts you approve. We do not sell or share it. We do not use one client's data for another client.
Who processes it. Two providers process this data on our behalf. Cloudflare hosts Hedgehog Studio and the connection. Supabase stores the connection record and your encrypted access token. The AI assistant you use receives the results you ask for in your conversation, under your own agreement with its provider.
Disconnecting and deletion. You can disconnect at any time, either from Studio or from your Facebook settings (Settings, Business Integrations, remove the app). Disconnecting from Studio deletes your stored access token straight away. Removing the app in Facebook cuts off our access straight away. Then email [email protected] so we can delete the data we stored, and we will confirm by reply. We do not keep copies of your ad account data: results are shown to you in your Claude conversation and are not saved by us. We keep a log of changes made through the connector: the time, the ad account, what was created or changed, and its ID. We keep it for 12 months, and delete it sooner if you ask us to. You can also ask us to delete your data at any time by emailing [email protected].
For step by step instructions, see Delete your Meta data. The terms for the connection are in the Hedgehog Studio and Meta connection terms.
Personal Information is stored securely against misuse, loss, unauthorised access, modification, or disclosure.
When no longer required, reasonable steps are taken to destroy or permanently de-identify data. Client files are retained for a minimum of 7 years.
You may access, update, and correct held Personal Information, subject to exceptions. Written requests are required. No fee applies to access requests, though administrative charges may apply for copies. Identification verification may be required for protection purposes.
We maintain current and accurate data. Please notify us promptly of inaccuracies or outdated information so we can update our records in a timely manner.
This policy may change and remains available on our website.
Contact us at [email protected]