Privacy Policy · Sally Something

Effective date: 16 October 2026

1. Purpose

This Privacy Policy explains how S Perkins trading as Sally Something collects, uses, stores and shares personal information through sallysomething.com, our forms, products and services.

Contact: hello@sallysomething.com

2. Our Approach to Privacy

We aim to collect only the information we reasonably need and to be clear about what we do with it.

Most Australian small businesses with annual turnover of $3 million or less are not covered by the Privacy Act 1988 (Cth), although some types of small businesses are covered regardless of turnover. Whether or not every provision applies to Sally Something at a particular time, we aim to handle personal information consistently with the Australian Privacy Principles where reasonably practicable.

Where the EU GDPR or UK GDPR applies to our handling of a person’s data, we will handle that data in accordance with the applicable requirements.

3. Personal Information We May Collect

Depending on how you interact with Sally Something, we may collect:

• your name;
• email address;
• information you provide in applications, questionnaires or forms;
• reflective answers provided for The Letter;
• information you voluntarily provide about your family, life, wellbeing or experiences, which may sometimes include sensitive or health-related information;
• information needed to deliver a group or service, such as availability and communication preferences;
• transaction and purchase information;
• payment information processed by our payment provider (we do not receive or store your full card number);
• communications you send to us; and
• basic technical information generated when you use the Site or our service providers.

4. Why We Use Personal Information

We may use personal information to:

• provide the product, Letter, group or service you requested;
• process applications and, where relevant, form suitable Frazzled & Friends groups;
• communicate with you about an application, purchase, service or enquiry;
• process payments and maintain business and tax records;
• send marketing emails where we have the required consent or another lawful basis to do so;
• operate, secure and improve the Site and our services;
• understand broad patterns in what customers need and improve our offers, without treating private customer stories as marketing material; and
• meet legal and regulatory obligations.
• We do not sell personal information.

5. Marketing Communications

We send marketing communications only where permitted by law.

Where we rely on express consent, we keep appropriate records of that consent. For The Letter, receiving the Letter does not depend on agreeing to marketing emails: the optional, unticked checkbox asks whether you would also like occasional emails from Sally Something. If you opt in, we record your choice, the time it was made and the wording version in Firebase. We send your email address and first name to Flodesk and add you to the General Emails and Interest | The Letter segments. We do not send your Letter answers to Flodesk. We check Flodesk for an existing unsubscribe and do not automatically resubscribe unsubscribed contacts. Marketing emails identify the sender and include a working unsubscribe option. You can withdraw from marketing at any time, and we will action unsubscribe requests in accordance with applicable law.

Transactional or service communications needed to deliver something you requested may still be sent even if you are not subscribed to marketing. We aim to keep service messages separate from promotional marketing.

6. Service Providers

We use third-party providers to operate Sally Something. Depending on the service you use, personal information may be processed by providers including:

• Firebase / Google Cloud for structured form and application data;
• Netlify for website hosting and server-side functions;
• Flodesk for email marketing and contact management. We send contact details to Flodesk for marketing only when you have opted in, including through The Letter’s optional marketing checkbox;
• Stripe for payment processing where applicable;
• Resend for automated email delivery;
• Google Workspace for business email and related services;
• Google Analytics 4 (GA4) to understand how visitors use the Site, only after they accept analytics cookies; and
• WhatsApp / Meta for group communications where you choose to participate in a group using WhatsApp.
• Each provider handles information under its own privacy and security terms.

7. Frazzled & Friends and Group Privacy

If you join a group experience, information you choose to share in calls or group chat will be visible to other participants. Depending on your WhatsApp account and privacy settings, other group members may also be able to see information associated with your WhatsApp profile, such as your name, profile image or phone number.

We ask group members to respect one another’s privacy, but Sally Something cannot guarantee the conduct of other participants. Please consider this when deciding what to share.

8. Overseas Processing and Disclosure

Some of our service providers operate, store or process information outside Australia, including in the United States. Their infrastructure may also involve other jurisdictions described in their own privacy documentation.

Where Australian privacy law applies to an overseas disclosure, we will take the steps required of us under that law. Where the GDPR or UK GDPR applies, relevant international-transfer safeguards will be used where required.

9. Data Retention

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, to provide services, maintain appropriate business records, resolve disputes and meet legal, accounting or tax obligations.

Retention periods may differ depending on the type of information.

10. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. We also use established service providers with their own security measures.

No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

11. Access, Correction and Other Privacy Rights

You may contact us to ask what personal information we hold about you or to request correction of inaccurate information.

Where applicable law gives you additional rights, including rights to deletion, restriction, objection, portability or withdrawal of consent, you may ask to exercise those rights.

We may need to verify your identity before acting on a request, and some information may need to be retained where the law requires it.

Email: hello@sallysomething.com

12. Cookies and Similar Technologies

The Site and third-party services embedded in or connected to it may use cookies or similar technologies that are necessary for functionality or provided by the services we use.

With your permission, we use Google Analytics 4 (GA4), provided by Google, to measure visits and selected interactions so we can understand and improve the Site. GA4 may store first-party cookies, including cookies named _ga and _ga_*, to distinguish visitors and sessions. We do not use GA4 for advertising or send form answers, application responses, names or email addresses to it. We configure analytics events to use page paths without query strings or fragments.

GA4 is off unless you select “Accept analytics” in our cookie banner. If you reject analytics, or have not made a choice, the GA4 tag is not loaded. Your choice is saved in this browser so the banner does not need to appear on each page. You can change or withdraw your choice at any time using “Cookie preferences” in the Site footer. Withdrawing permission stops future analytics collection and removes accessible Google Analytics cookies for this Site; you can also clear cookies in your browser settings.

Google may process analytics information on servers outside Australia. Google handles information under its own privacy and security terms. More information is available in Google’s Privacy Policy and GA4 cookie information.

If you continue to a Flodesk-hosted form or checkout, Flodesk’s own analytics and cookie preferences apply on that service. Your choice on this Site is stored separately.

Your browser may also allow you to control or delete cookies.

13. Children

Sally Something is primarily intended for adults. We do not knowingly ask children under 16 to provide personal information directly through our products or services unless a particular service clearly states otherwise and appropriate arrangements are in place.

If you believe a child has provided personal information to us unexpectedly, contact hello@sallysomething.com.

14. Privacy Complaints

If you have a concern about how we have handled your personal information, please contact us first at hello@sallysomething.com so we can investigate and respond.

Where the Privacy Act applies and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner. If EU or UK data protection law applies, you may also have the right to complain to the relevant supervisory authority.

15. Changes to this Policy

We may update this Privacy Policy when our business, technology or legal obligations change. The current version will be published on the Site with an updated effective date.

16. Contact

S Perkins trading as Sally Something Email: hello@sallysomething.com

Prepared as Sally Something’s working website policy. This document is not a substitute for individual legal advice.