Privacy policy

Last updated 29 October 2026

Who we are

Snowball Productions Pty Ltd (ABN 55 678 719 312), trading as Snowball Productions, is a digital agency based in Barangaroo, Sydney. In this policy, “we”, “us” and “our” mean Snowball Productions.

This policy explains how we handle personal information and connected account data across two things we run:

• this website, www.snowball.productions; and
• our Snowball SEO client portal and platform, which our clients use to see their search, website and content performance in one place (“Snowball SEO”).

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect on this website

Enquiries and project briefs

When you send an enquiry or start a project, we collect the details you enter: usually your name, email address, phone number, business name and your message. The form is sent through Cloudflare, emailed to our team and stored in our customer relationship system (HubSpot) so we can reply and keep a record of our conversation.

Spam protection

Our forms use Cloudflare Turnstile to check that a real person is sending them. Turnstile looks at technical signals from your browser, not the content of your message.

Analytics

We use Google Analytics 4, loaded through Google Tag Manager, to understand how people find and use the site, such as which pages are visited and how visitors arrive. We use Microsoft Clarity to see how pages are used through heatmaps and session recordings. Clarity masks the text you type into form fields so it is not recorded.

Voice assistant

The site offers an optional voice assistant. If you choose to talk to it, what you say is processed by our provider, ElevenLabs, to produce a reply. Please do not share sensitive information with the assistant.

Cookies

Analytics and spam protection use cookies and similar browser storage. You can block or delete cookies in your browser settings, and Google offers a browser add-on to opt out of Google Analytics. The site still works without them.

Snowball SEO: our client portal and platform

Signing in

Our team and our clients’ authorised users sign in to the portal with their email address through Cloudflare Access. We record who signed in and which account they can see.

Connecting your accounts

A client can connect the accounts that hold their own performance data. Every connection is read only. We cannot change, post to or delete anything in a connected account.

Through Google sign-in, a client can connect:

• Google Search Console: clicks, impressions, average positions, and the searches and pages they relate to;
• Google Analytics: website visits, engagement and key events (such as enquiries), with their source, device, location by city and landing page;
• Google Business Profile: profile views, calls, website clicks and direction requests; and
• YouTube (through the YouTube Analytics and YouTube Data APIs): the client’s channel and video titles, views, watch time, subscribers and engagement, where viewers come from, the YouTube searches that led to views, and views by country.

Clients can also connect Bing Webmaster Tools, Microsoft Clarity and HubSpot with a key they create in those products.

How we use connected data

We use connected data only to give that client their reports, monitoring and recommendations inside the portal, and to deliver the services they engage us for. Each client sees only their own data. Our team sees it so we can do that work.

Google user data

Snowball SEO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In line with those requirements:

• we use Google user data only to provide and improve the features the client can see in the portal;
• we do not sell it;
• we do not use it, or let anyone use it, for advertising;
• we do not use it to develop, improve or train generalised artificial intelligence or machine learning models;
• people at Snowball read it only with the client’s consent, when needed for security, to comply with the law, or as part of operating the service; and
• we transfer it to others only when needed to provide the service, to comply with the law, or as part of a merger, acquisition or sale of assets, with notice to the client.

YouTube data

When a client connects YouTube, they agree to the YouTube Terms of Service, and their YouTube data is also covered by the Google Privacy Policy. A client can remove our access at any time from their Google Account security settings at security.google.com/settings/security/permissions, or by disconnecting YouTube in the portal.

Search and market data

To show demand and competition, we buy public search data from specialist data providers: for example, how often a phrase is searched, which websites appear in public search results, and search interest over time. This data is about searches and websites, not about individual people.

Storage and security

The portal runs on Cloudflare. The access tokens and keys that link a client’s accounts are encrypted when stored and are never shown back in the portal, even to our team. Access to the portal is limited to our team and each client’s authorised users, and every sign-in goes through Cloudflare Access.

How long we keep information

When a client disconnects an account in the portal, we delete its stored access token straight away. Performance history we have already collected stays in the client’s portal for the life of our relationship, so they can see progress over time.

A client can ask us to delete their stored data at any time, and we will do so within 30 days, except where the law requires us to keep it.

Enquiry details are kept for as long as we need them to respond to you and manage our relationship with you, and to meet our legal and tax obligations.

Information stored outside Australia

Some of our providers store or process information outside Australia, including in the United States. These include Google, Microsoft, HubSpot, Cloudflare and ElevenLabs. We use providers that protect information to a standard consistent with the Australian Privacy Principles.

Access, correction and complaints

You can ask to see the personal information we hold about you, or ask us to correct it, by emailing [email protected] or calling 1300 007 669. We will reply within 30 days.

If you have a concern about how we have handled your information, please contact us first so we can put it right. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this policy when our services or the law change. The date at the top shows when it last changed. If a change affects how we use connected account data, we will tell our clients before it takes effect.