Privacy Policy
Last updated: 21 July 2026
Corewave Solutions — ABN 25 470 771 824
Last updated: 21 July 2026
Effective date: 21 July 2026
Corewave Solutions ("Company", "we", "our", "us") respects your privacy and is committed to protecting your personal information.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, and disclose personal information when you visit our website, engage with our funnels, use our services, or receive outreach from us.
By using our website or services, you consent to the handling of your personal information as described in this policy.
1. Who We Are
Corewave Solutions
ABN 25 470 771 824
Unit 228, 8 Confectioners Way, Rosebery NSW 2018, Australia
Email: ben@corewavesolutions.com
We are the entity responsible for the personal information described in this policy. Where we handle personal information on behalf of a client as part of delivering services, we do so under that client's instructions, and that client is responsible for their own privacy obligations.
2. Anonymity and Pseudonymity
Where it is lawful and practicable, you have the option of dealing with us anonymously or using a pseudonym. In most cases, we will need your name and contact details to provide services, respond to enquiries, or process payments.
3. Information We Collect
3.1 Information you give us
We collect personal information when you visit our website, opt in to resources, book a call, complete a form or survey, apply for services, or make a purchase. This may include:
- Name
- Email address
- Phone number
- Business name, role, and business contact details
- Application, survey, onboarding, or form responses
- Messages, documents, or files you choose to submit
- Billing and transaction information
3.2 Information collected automatically
When you visit our website or funnels, we may automatically collect:
- IP address and approximate location
- Device, browser, and operating system information
- Pages viewed, time on page, referral source, and click behaviour
- Cookie and tracking pixel identifiers
3.3 Information we collect from third parties
We may collect business contact information from publicly available sources and third-party data providers, including professional networking platforms, business directories, company websites, and data enrichment services. This is described further in clause 5.
3.4 Payment information
Payments are processed securely by Stripe. We do not store or have access to your full card details. Stripe stores your payment method on our behalf where you have authorised recurring or automatic charges. See our Terms of Service for how payment authorisation works.
3.5 Sensitive information
We do not seek to collect sensitive information (such as health, racial or ethnic origin, political opinions, or religious beliefs) and ask that you do not provide it to us. If you do, we will handle it in accordance with the APPs and delete it where it is not required.
4. How We Use Information
We use personal information to:
- Deliver the resources, products, and services you have requested
- Set up, manage, and deliver client campaigns and engagements
- Process payments, issue invoices, and manage billing
- Communicate with you about your engagement, updates, and support
- Send marketing emails or SMS messages, where permitted (see clause 8)
- Analyse and improve our website, funnels, campaigns, and user experience
- Conduct advertising and audience targeting, including on third-party platforms
- Meet our legal, tax, and regulatory obligations
- Detect, prevent, and address fraud, security issues, or misuse
We will only use your personal information for the purpose it was collected, a directly related purpose you would reasonably expect, or where you have consented or the law permits.
5. Lead Generation and Outbound Marketing Data
This clause explains how we handle personal information used in outbound lead generation campaigns, whether for our own business or on behalf of our clients.
What we collect. We collect business contact information such as name, job title, employer, business email address, business phone number, and public professional profile information. We collect this from publicly available sources and third-party data providers.
Why we collect it. We use this information to contact individuals in a business capacity, about services relevant to their professional role, by email and professional networking platforms.
Notification. Where we collect personal information about you from a source other than you, we take reasonable steps to notify you of the matters required by APP 5, including by identifying ourselves and the purpose of contact in our first communication with you.
Our compliance. We conduct outbound marketing in accordance with the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth). Every commercial electronic message we send identifies the sender, includes accurate contact details, and contains a functional unsubscribe facility.
Opting out. You may opt out of receiving further communications at any time by using the unsubscribe link in any message, or by emailing ben@corewavesolutions.com. We will action opt-out requests within 5 business days and will retain a minimal suppression record to ensure we do not contact you again.
Removal. You may request that we delete your information entirely rather than suppress it. Where we hold the information on behalf of a client, we will pass the request to that client and act on their instructions.
Client responsibilities. Where we deliver leads to a client, that client becomes responsible for their handling of that information, including their own compliance with the Privacy Act and the Spam Act.
6. Disclosure of Your Information
We do not sell your personal information.
We may disclose personal information to:
- Service providers who help us operate our business (see clause 7)
- Our clients, where you have engaged with a campaign we run on their behalf
- Professional advisers, including lawyers and accountants
- Government or regulatory bodies, where required or authorised by law
- A purchaser, in connection with a sale or transfer of our business
7. Service Providers and Overseas Disclosure
We use third-party service providers to operate our business. These include:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | United States, Australia |
| GoHighLevel | CRM, funnels, forms, email/SMS, automations, scheduling | United States |
| HubSpot | CRM and contact management | United States |
| Google (Analytics, Ads, Workspace) | Analytics, advertising, email | United States |
| Meta Platforms | Advertising and audience targeting | United States |
| Outreach and advertising | United States | |
| Apollo and similar data providers | Business contact data and enrichment | United States |
| Email infrastructure and deliverability providers | Sending and managing outbound email | United States |
Stripe
Purpose: Payment processing
Location: United States, Australia
GoHighLevel
Purpose: CRM, funnels, forms, email/SMS, automations, scheduling
Location: United States
HubSpot
Purpose: CRM and contact management
Location: United States
Google (Analytics, Ads, Workspace)
Purpose: Analytics, advertising, email
Location: United States
Meta Platforms
Purpose: Advertising and audience targeting
Location: United States
LinkedIn
Purpose: Outreach and advertising
Location: United States
Apollo and similar data providers
Purpose: Business contact data and enrichment
Location: United States
Email infrastructure and deliverability providers
Purpose: Sending and managing outbound email
Location: United States
Overseas disclosure (APP 8). Some of these providers store or process personal information outside Australia, principally in the United States and the European Union. By providing your personal information to us, you consent to this disclosure.
We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs, including through contractual terms. However, you acknowledge that once information is disclosed overseas, we may not be able to ensure the recipient complies with the APPs, and you may not be able to seek redress under the Privacy Act in respect of that recipient.
8. Marketing and Communications
We may send you marketing communications by email or SMS where you have consented, or where you are an existing client or have an existing business relationship with us and the communication is relevant to that relationship.
Every marketing message includes an unsubscribe facility. You may opt out at any time by clicking unsubscribe or emailing ben@corewavesolutions.com. We will action your request within 5 business days.
Opting out of marketing does not stop us sending you necessary communications about an active engagement, such as invoices, service updates, or account notices.
9. Cookies, Pixels and Tracking
We use cookies, tracking pixels, and similar technologies on our website and funnels, including:
- Essential cookies, required for the site to function
- Analytics cookies, such as Google Analytics, to understand how the site is used
- Advertising and retargeting pixels, including the Meta Pixel, Google Ads tags, and LinkedIn Insight Tag, which allow us to measure campaign performance and show you ads on those platforms
These technologies may collect your IP address, device information, and browsing behaviour, and may allow third-party platforms to recognise you across sites.
You can manage or disable cookies through your browser settings. Disabling cookies may affect how the site functions. You can also manage ad personalisation directly through Google and Meta account settings.
10. Data Security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include access controls, use of reputable service providers, encrypted transmission, and restricting access to those who need it.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk.
11. Data Breaches
We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).
If we become aware of an eligible data breach that is likely to result in serious harm to any individual whose personal information is involved, we will:
- Contain and assess the breach as soon as practicable
- Notify affected individuals as soon as practicable
- Notify the Office of the Australian Information Commissioner (OAIC)
12. Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to operate our business, and to meet our legal, tax, and record-keeping obligations.
As a general guide:
- Client records and transaction data: at least 7 years, to meet Australian tax and record-keeping requirements
- Marketing and prospect data: until you opt out or request deletion, after which we retain a minimal suppression record
- Website analytics data: in line with the retention settings of the relevant analytics provider
When personal information is no longer needed, we take reasonable steps to destroy it or de-identify it.
13. Your Rights
You may:
- Access the personal information we hold about you
- Correct information that is inaccurate, out of date, incomplete, or misleading
- Request deletion of your personal information, subject to our legal retention obligations
- Opt out of marketing communications at any time
- Complain about how we have handled your personal information (see clause 14)
To exercise any of these rights, email ben@corewavesolutions.com. We will respond within 30 days. We may need to verify your identity before acting on a request. We do not charge for making a request, though we may charge a reasonable fee for providing access in certain circumstances.
If you are in the EU or UK, you may also have rights to data portability, restriction of processing, and objection to processing, and to lodge a complaint with your local supervisory authority. Where we process your data, we rely on your consent, the performance of a contract, or our legitimate interests in operating and marketing our business.
If you are a California resident, you may have rights to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell personal information.
14. Complaints
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, contact us at ben@corewavesolutions.com with the details of your complaint.
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. We will tell you the outcome and the reasons for our decision.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
15. Children's Privacy
Our website and services are directed at businesses and are not intended for individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.
16. Third-Party Links
Our website and communications may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.
17. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Where changes are material, we will take reasonable steps to notify you.
18. Contact Us
Corewave Solutions
ABN 25 470 771 824
Unit 228, 8 Confectioners Way, Rosebery NSW 2018, Australia
Email: ben@corewavesolutions.com
Website: https://www.corewavesolutions.com/
