PRIVACY POLICY
Effective Date: 28 April 2026
Last Updated: 28 April 2026
1. Introduction and Scope
This Privacy Policy applies to personal information collected and handled by Bedrok Services Pty Ltd (ABN: 19 697 470 661) (“Bedrok Services”, “we”, “us”, or “our”), an Australian company operating the website at bedrok.com.au (the “Site”).
Bedrok Services is the client-facing Australian entity responsible for sales, client onboarding, compliance, administration, and local support. Bedrok Services acts as a reseller and contractual intermediary for services fulfilled by Bedrok Media LLC (“Bedrok Media”), which owns all intellectual property and conducts media buying and campaign management on our behalf.
This policy explains how we collect, use, disclose, and protect personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as amended by the 2026 privacy reforms.
“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Following the 2026 reforms, this explicitly includes technical data such as IP addresses and device identifiers.
This policy should be read with our Website Terms of Use. If you are a client under a Client Services Agreement (CSA) with Bedrok Services, additional privacy terms may apply as set out in that agreement.
2. Legal Structure & Relationship with Bedrok Media
Our group operates under a two-entity structure, which determines how your data is handled:
Bedrok Services (Australia): The APP entity and primary data controller for Australian clients. We are responsible for client acquisition, contracting, billing in AUD, compliance with Australian law, and handling privacy requests and complaints. We act as a reseller and contractual intermediary for services delivered by Bedrok Media. We are the entity you contract with and the entity accountable under the Privacy Act.
Bedrok Media (United States): Owns all intellectual property, including the “Bedrok Methodology”, platforms, software, funnels, and creative assets. Bedrok Media is responsible for campaign execution, media buying, platform operation, and technical service delivery. Bedrok Media receives personal information from us solely for the purpose of delivering the contracted services and is contractually required to handle it in a manner consistent with this policy and the Australian Privacy Principles (APPs).
In APP terms, Bedrok Services is the entity that determines the purposes for which Australian client data is collected and used. Bedrok Media acts as a service provider and data recipient for campaign execution and IP-related processing.
Bedrok Services Pty Ltd does not itself perform advertising, media buying, or campaign execution activities. These services are performed by Bedrok Media. Our role is limited to facilitating access to these services, managing the client relationship, and ensuring compliance with Australian legal and privacy requirements.
3. Kinds of Personal Information We Collect
We collect only the information reasonably necessary for our functions and activities, including:
Contact data: name, business email, phone number, company name, position, and physical or billing address.
Technical data: IP address, cookie identifiers, browser type, operating system, and device information.
Lead data: information submitted by you or by prospects interacting with campaigns operated by Bedrok Media for clients, such as enquiry details, preferences, and form responses.
Usage data: pages visited, time on site, referral sources, and similar analytics.
Voice and audio data: call recordings and audio metadata from tracking numbers and automated voice systems.
Commercial data: billing details, transaction records, and correspondence relating to your CSA.
We do not collect sensitive information (for example, health, racial, or political information) unless it is reasonably necessary for a specific service and you have consented. Voice data is not used for automated biometric identification unless that use is specifically disclosed to you and you consent. We do not knowingly collect personal information from individuals under 18.
4. How We Collect and Hold Information
We collect information directly from you through online forms on the Site, email, phone and video calls, meetings, contracts, and CRM interactions. We may also collect information indirectly through third-party platforms we use to deliver services, such as analytics providers, advertising platforms, and call-tracking systems.
Information is held in secure cloud environments managed by Bedrok Services and/or authorised vendors engaged by us or Bedrok Media. We take reasonable steps under APP 11 to protect information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include encryption in transit and at rest, multi-factor authentication, access controls, vendor due diligence, periodic security reviews, and staff training.
Call recordings are generally retained for 90 days before secure destruction. Other personal information is retained only for as long as necessary for the purposes described below or as required by law (typically up to 7 years for tax and financial records), after which it is securely deleted or de-identified.
5. Purposes of Collection and Use
We collect, hold, and use personal information for purposes including:
- Responding to sales enquiries and providing quotes.
- Facilitating client onboarding and administration under applicable service agreements.
- Instructing Bedrok Media to execute media buying and campaign services on behalf of clients.
- Facilitating the delivery of inbound leads and call flow generated and delivered by Bedrok Media.
- Operating automated answering, triage, and support via Voice AI.
- Providing Australian-based client support and administrative account management.
- Verifying lead quality and training staff through review of call recordings.
- Billing, invoicing, and collecting payments in AUD.
- Meeting our legal, regulatory, and tax obligations in Australia.
- Investigating and resolving complaints and disputes.
- Improving the Site, our services, and our methodology.
- Direct marketing, where you have opted in or where permitted by law (you can opt out at any time).
- Detecting and preventing fraud, and maintaining the security of our systems.
We will not use your personal information for an unrelated secondary purpose without your consent, unless an exception under the APPs applies.
6. Disclosure of Personal Information
We may disclose personal information to:
Bedrok Media: for all campaign execution, media buying, platform operation, and technical service delivery using its proprietary systems and intellectual property.
Our global fulfillment team (including in the Philippines): for campaign optimisation, data entry, and technical support, engaged under confidentiality obligations.
Third-party service providers: including cloud hosting, CRM, analytics, call tracking, Voice AI (for example, Retell AI), advertising platforms (for example, Google and Meta), payment processors, and professional advisers, each under contract and engaged only to the extent necessary.
Government, regulators, and law enforcement: where required or authorised by law.
A successor entity: in connection with a sale, merger, or restructure of our business, with appropriate protections.
We do not sell personal information.
To the extent permitted by law, Bedrok Services does not independently provide digital advertising, media buying, or campaign execution services. All such services are performed by Bedrok Media. Bedrok Services Pty Ltd’s role is limited to facilitation, resale, administration, and compliance within Australia.
7. Cross-Border Disclosure (APP 8)
Because Bedrok Media performs all campaign execution, media buying, and platform operations from the United States, and because we use global vendors, your personal information will typically be disclosed to recipients located overseas, including in the United States and the Philippines, and occasionally other jurisdictions where our cloud and advertising vendors operate.
We take reasonable steps under APP 8.1 to ensure overseas recipients handle personal information consistently with the APPs, including through written contracts imposing privacy obligations substantially similar to Australian standards.
By providing personal information to us and using our services, you acknowledge these overseas disclosures. Where you give express, informed consent under APP 8.2(b), section 16C of the Privacy Act will not apply to those disclosures. Overseas recipients may be subject to foreign laws (for example, US legal process) that differ from Australian law, and we cannot guarantee absolute protection against such laws.
You may withdraw consent to overseas disclosure at any time by contacting our Privacy Officer, but this is likely to limit or prevent our ability to continue providing services to you.
8. Automated Decision-Making and Artificial Intelligence
We and Bedrok Media use AI and automated systems, including Voice AI, to handle inbound communications, score and prioritise leads, and route enquiries. These tools are used to improve speed and efficiency. When you interact with our automated voice systems, you acknowledge that your speech is processed by AI in real time.
You have the right to request information about how significant automated decisions affecting you are made, including the general logic involved, and to request manual review by our Australian team where you believe a decision is inaccurate or unfair. Contact our Privacy Officer to make such a request.
9. Your Rights: Access, Correction, and More
Under the APPs and the 2026 reforms, you have rights regarding your personal information, including:
Access: to request a copy of the personal information we hold about you.
Correction: to request correction of information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
Erasure: to request deletion of your personal information, subject to legal retention obligations and other lawful grounds we may have to keep it.
Opt-out: of direct marketing and, where applicable, other data uses at any time.
Portability: to receive your personal information in a structured, commonly used format where reasonably practicable.
To exercise any of these rights, contact our Privacy Officer at admin (@) bedrok.com.au. We will respond within 30 days. We may need to verify your identity before responding. Access or correction may be refused in limited circumstances permitted by the Privacy Act, in which case we will give you written reasons. A reasonable fee may apply to unusually complex access requests.
10. Data Breaches
We maintain a data breach response plan. Where an eligible data breach occurs under the Notifiable Data Breaches scheme, we will assess the breach and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.
11. Cookies and Tracking
The Site uses cookies, pixels, and similar technologies for analytics, functionality, personalisation, advertising, and lead tracking. You can control or block cookies through your browser settings; some features of the Site may not work correctly if cookies are disabled.
12. Direct Marketing
We may send marketing communications about our services where you have opted in or where otherwise permitted by law. Every marketing email includes an unsubscribe mechanism. You can also opt out at any time by contacting us. Opting out of marketing does not affect service-related communications (for example, billing notices).
13. Complaints
If you have a complaint about how we handle your personal information, please contact our Privacy Officer first. We will investigate and respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our corporate structure, or legal requirements. The “Last Updated” date at the top of this policy shows when it was last changed. Material changes will be notified via the Site or by email where we hold your contact details. Your continued use of the Site or our services after changes take effect constitutes acceptance of the updated policy.
15. Governing Law
This Privacy Policy is governed by the laws of the Commonwealth of Australia and the State of Queensland. Any dispute relating to privacy or this policy will be subject to the non-exclusive jurisdiction of the courts of Queensland, Australia.
16. Contact Us
Privacy Officer
Bedrok Services Pty Ltd
ABN: 19 697 470 661
Email: admin (@) bedrok.com.au