Privacy Policy.

Who we are

Spice of Life Media is based in Adelaide, South Australia. This policy applies to this website and the project enquiries sent through it.

Information we collect

When you use our “Start a project” form, we collect the information you choose to provide: your name, work email, business or company, current website address (if supplied), services of interest, project budget, desired timing, details about the problem you want to solve and how you heard about us (if supplied).

If you submit the short 72-Hour Website lead form on Facebook or Instagram, Meta provides SOL with the four details entered there: your name, business name, email address and mobile number. Meta also provides technical campaign details such as the lead, Page and form identifiers and the time the lead was created. We do not ask Meta to send the answers from the later detailed website brief through that lead form.

When you use the 72-Hour Website brief, we collect the contact, business and project information you provide. This may include your existing website, goals, services, prices, page choices, visual references, copy, uploaded logo or photo files, links to shared brand or photo files, the labels and intended page placement you add to photos, the named approver and the offer acknowledgements you accept. Direct files are stored in private SOL storage; a Drive or Dropbox link remains available if you prefer to share a larger collection that way.

A direct logo or photo upload attached to an unsubmitted brief expires 7 days after SOL prepares the upload. At that point its saved browser reference is removed and the private file is queued for automatic deletion; your other saved draft answers remain. If SOL accepts your submitted brief before that limit, the selected files are attached to the project and the 7-day unsubmitted-upload limit no longer applies to them.

The Ask Sam panel on the 72-Hour Website brief is optional. If you choose Open Message Centre, SOL loads Crisp's direct chat inside a separate Crisp-hosted frame so it can show the live availability and maintain the chat session. Crisp may process technical connection, device and session information, a functional cookie or similar session identifier, and the address of the brief page. SOL passes only the name, email and mobile number already typed in the brief so Sam can recognise and reply to you. Your saved brief answers and any private project link are not passed to Crisp. You type and send your message inside Crisp, or you can use the email option instead.

Before submission, the website brief is saved in this browser so you can return to it. After a confirmed submission, that saved draft—including safe metadata for any private files you already uploaded—is removed from local storage. The file contents are not copied into browser storage. If a send attempt does not return a confirmed receipt, the exact attempted brief is also retained in local storage so the same submission can be recovered without creating a duplicate or restarting its clock; it is removed after a confirmed receipt or a definitive rejection. For the current browser-tab session, the submitted answers, receipt and private project link remain in session storage so refreshing the page does not lose the confirmation or downloaded brief. We also store the brief, its SOL reference, receipt and preview-deadline times, the accepted terms version and time, and one-way security identifiers used to protect the private project link and limit duplicate or abusive submissions. As the project progresses, we also store its preview and delivery status, email-delivery status, questions, consolidated change rounds, approval, payment, hosting and launch status, and the final live address where applicable.

When you submit a custom CD order, we collect the contact, delivery, music-link, artwork, product and shipping information required to prepare the order. We also store the SOL reference, checkout channel and payment status. Uploaded artwork is stored privately for order production.

We also save one minimal, versioned choice in essential browser storage so the site can remember whether you selected essential storage only or allowed analytics. This normally uses local storage, with a first-party cookie as a fail-closed fallback. That preference does not contain your contact details.

If you allow analytics, we may also keep campaign parameters from the address you arrived on (such as UTM parameters, GCLID, GBRAID or WBRAID) and the landing-page path in this tab’s session storage. We use these details to understand which campaign led to an enquiry. They do not include the information typed into the enquiry form.

How we use information

We use enquiry information to review your request, respond to you, discuss possible work and manage any business relationship that follows.

We use a 72-Hour Website Meta lead to send one service email inviting you to complete the detailed website brief and to prevent duplicate invitations. A Meta lead does not create a website project, start the 72-hour clock, accept the offer terms or create a payment obligation. Providing those four details does not add you to a marketing list. The invitation may contain a private, expiring code that lets the detailed brief securely fill those same four details for you. The code does not place your name, email address or mobile number in the link, and the brief removes it from the browser address before requesting your details. After that check, the code is kept in a browser-hidden cookie so a submitted Blueprint can be linked to the original Meta lead for campaign measurement. The cookie is cleared after a confirmed submission or expires after 14 days.

If you later tell Sam you want to go ahead with a website, or you approve and pay for one, SOL may tell Meta that this happened, using the reference Meta gave this enquiry. That is so we can measure which ads bring real work. We never send Meta your Blueprint answers, your uploaded files, your private project link, your project messages or your card details.

We use website-brief and private-project information to confirm receipt, calculate and communicate the 72-hour preview deadline, prepare and deliver the preview, record your questions and decisions, complete included change rounds, and coordinate an approved website’s launch and managed hosting. Project emails are service messages about a brief you submitted; submitting a brief does not add you to a marketing list.

We use information you choose to place in Crisp to answer your service question and continue the conversation. Opening or using Ask Sam does not submit the website brief, start the 72-hour clock or use a change round.

We use custom CD order information to validate, price, produce, deliver and support the order. If you choose website checkout, Stripe processes the payment and returns its status to us.

For the 72-Hour Website offer, no payment details are requested with the brief. If you approve a website, Stripe separately processes the one-time website payment. If you later activate SOL Managed Hosting when the paid website is ready to launch, Stripe separately processes that monthly subscription. Stripe returns transaction, customer and subscription identifiers and payment status so we can accurately show what has and has not been paid. Spice of Life Media does not receive or store your full card number.

We use Google Analytics 4 through Google Tag Manager on a consent basis to understand how people find and use the website and to improve it. Neither service loads until you choose “Allow analytics”. If allowed, we measure page views and non-personal interactions such as starting or successfully submitting the project form and selecting project or email links. We do not send the name, email, business name, website address or message entered into the enquiry form to Google Analytics.

Analytics consent is denied by default. Choosing analytics does not grant consent for advertising storage, advertising user data or advertising personalisation; those settings remain denied.

If analytics is allowed and you submit the project form, the saved campaign parameters and landing-page path are included in the enquiry email Spice of Life Media receives. This helps us attribute the enquiry without adding your form answers to Google Analytics.

Service providers and overseas processing

Meta operates the Facebook or Instagram lead form and makes the submitted lead details available to SOL. Vercel hosts this website and its form endpoints. Supabase stores the restricted Meta lead-delivery record, custom CD order records, private artwork files, private website-brief logo and photo files, website briefs and private website-project records. Crisp provides the optional Ask Sam live-chat service on the detailed website brief and processes the session, contact details and messages described above when you choose to use it. Resend delivers the single website-brief invitation, project enquiries, website-brief and project updates, and order messages by email. For the Meta website-brief invitation, we retain Resend's provider message identifier and signed delivery events so we can distinguish acceptance for sending from delivery, delay, failure, bounce, complaint or suppression. A delivered event means the recipient's mail server accepted the message; it does not prove the message was opened or read. Stripe processes payments made through the custom CD website checkout, the one-time approved-website checkout and the separately activated managed-hosting subscription. The site also loads its Archivo typeface from Google Fonts, so your browser connects to Google’s font service when rendering the site. When you allow analytics, Google processes related usage, device and campaign information through Google Tag Manager and Google Analytics.

These providers may process or store information outside Australia, depending on where their services and infrastructure operate. We only share information with service providers where it is needed to host and render the website, deliver an enquiry or order, process a payment, fulfil a custom CD or provide analytics you have allowed, or return the limited Meta lead outcome described above for campaign measurement.

We do not sell personal information.

How long we keep information

We keep personal information only for as long as it is reasonably needed to respond to your enquiry, manage a possible or active working relationship, maintain appropriate business records, protect our services and meet applicable obligations. When information is no longer reasonably needed, we will delete or de-identify it where practical.

A website-brief draft remains in that browser until the brief receives a confirmed submission, you clear the browser’s storage or you remove it. If you use a shared device or browser profile, another person with access to it may be able to see the draft. A confirmed receipt, the submitted answers and the private project link remain only in that browser-tab session and are removed when the tab session ends or you clear its storage; keep the tab and link secure on a shared device. Submitted briefs, project decisions and transaction records may need to be retained while the project or hosting is active and afterwards for reasonable business, accounting, dispute-resolution, security and legal purposes.

A Meta lead and its invitation-delivery record are retained only while reasonably needed to send or retry the requested brief invitation, prevent duplicates, respond to you and keep appropriate security and business records. If you do not provide the required lead details, we cannot email that invitation; you may still open the detailed brief directly on the SOL website.

Crisp chat information is retained only while reasonably needed to answer and continue the conversation, maintain appropriate service and security records, and meet applicable obligations. You can ask SOL to access, correct or delete the information we control, subject to information we reasonably need to retain.

The site uses this preference until you change it, clear your browser storage or a later version asks you to choose again. Campaign attribution saved in session storage normally lasts only for the current browser-tab session and is also removed if you return to essential storage only.

Private website-project links

Your private project link provides access without a password, so keep it secure and do not forward it unnecessarily. We store a one-way version of its security token rather than the token shown in the link. Contact Sam promptly if you think the link has been exposed so we can help protect the project.

When you open a private project or Stripe return link, its security token is removed from the address bar before the page starts. The active project or return credential then remains only in that browser-tab session for secure refreshes and navigation. Opening a new private link replaces it, and closing or clearing the tab session removes it.

Google Tag Manager and Google Analytics do not initialise on the private project or project-contact pages, even if you previously allowed analytics. They also remain disabled on other pages opened in that tab while the private credential is retained.

Your choices

You can reopen “Privacy choices” in the footer at any time to allow analytics or return to essential storage only. Returning to essential storage stops future analytics loading and reloads the page when needed to stop an already loaded analytics session.

You can also ask to access, correct or delete personal information we hold about you. Some information may need to be retained where it remains reasonably necessary for business records or applicable obligations.

You do not have to use live chat. You can choose the email option in Ask Sam or contact SOL directly using the address below.

Contact us

For a privacy request or question, email info@spiceoflifemedia.com.au. Please include enough detail for us to understand and respond to your request.

We may update this policy when our website or information practices change. The date at the top shows the latest version.