Privacy, in plain English.

Who we are

This policy explains how SkyM8 Pty Ltd T/A McKee Creative (ABN 15 147 301 951, ACN 147 301 951) handles personal information. We aim to follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Our privacy contact is Jo McKee: grow@mckeecreative.store, or PO Box 2119, Cannonvale Qld 4802.

What we collect

We only collect what we need.

• When you email us: your name, email address, business name and whatever you choose to tell us.
• When you buy: your name, email, business details and what you bought. Stripe processes card payments. We never see or store your full card number.
• When you fill in an intake form or brief: your store's website, the platforms you use, and your answers about your business.
• When you give us access to your accounts: see the next section.
• When you visit this website: our host, SiteGround, processes technical data such as your IP address, browser and the pages requested, to deliver and protect the site.

We don't collect sensitive information (such as health or political information) and ask that you don't send it.

If you use a form on this site (the AI setups enquiry or the Profit Check intake form), what you type is emailed to us so we can reply and do the work. We don't add it to a mailing list unless you tick the box asking for that. This site doesn't use analytics or advertising cookies. Our web host may set a short-lived security cookie to keep out bots.

Your customers' data in your accounts

To do a Profit Check, a fix, a partnership or a Partner Desk job, we may access your store, analytics, ad and email accounts. Those accounts can contain personal information about your customers. For that data:

• you're responsible for it and for your own privacy policy, and we handle it on your behalf;
• we use read-only or limited access wherever the platform allows;
• we only look at what's needed for the job, and we don't export customer lists or contact your customers, except as part of email work you've asked for and approved;
• we don't use it for our own marketing, sell it, or share it with anyone else; and
• we delete working files that contain customer-level data within 30 days of delivering the job, or within 30 days of a partnership ending.

How we use personal information

• To do the work you asked for, deliver reports and reply to your questions.
• To send invoices, receipts and service emails.
• To keep business, tax and legal records.
• To improve our services, using information that doesn't identify you.
• To send you marketing emails, but only if you've agreed (Spam Act 2003). Every one says it's from McKee Creative and has an unsubscribe link, and we act on unsubscribes within 5 business days.

We don't sell personal information, and we don't share it for anyone else's marketing.

Who we share it with

We use a small number of service providers to run the business. They only receive what they need:

We may also disclose information if the law requires it, or to protect our legal rights. If we sell the business, personal information may transfer to the buyer, who must handle it under this policy.

Some providers store data overseas, mainly in the United States, and also in the European Union and other countries where they run data centres. We choose providers with strong security and privacy commitments, but we can't control the laws of other countries.

AI tools and automated decisions

We use the AI tools listed above to help check accounts, draft and keep records. A person (Jo) reviews the work before it reaches you or anyone else.

• No training on your data. We use business or API accounts, where the provider's terms say inputs and outputs aren't used to train their models (including xAI and OpenAI), and we turn model training off in any account where it's a setting.
• As little customer data as possible. Wherever the job allows, we work with totals rather than your customers' names, emails or order details. Where a job does need customer-level data (for example, sorting enquiries in an inbox you've asked us to manage), we only use the tools above, under their no-training terms.
• Automated decisions. We don't use computer programs to make decisions that could reasonably be expected to significantly affect an individual's rights or interests, such as whether someone gets a service, a price or a refund. Those decisions are always made by Jo. If that ever changes, we'll update this policy first to say what kinds of personal information are used and what kinds of decisions are made.

Agent-Ready Shop plugin

If you buy an Agent-Ready Shop licence, we collect your name, email, billing address, any ABN or tax ID you give, and payment details. Stripe handles payment details; we never see your full card number. When you enter your licence key, your website sends our licence server your licence key, your site's web address, the plugin version and, as with any web request, its IP address. We use this only to check your licence, offer updates and give support.

The plugin runs on your website. It does not send us your products, orders or your customers' details.

These services process this information for us, some of them overseas: Stripe (payments, Australia and the US), Cloudflare (licence server, global network) and Klaviyo (the email with your licence key, US). Your licence email is a transactional message about your purchase. We don't add you to marketing emails unless you separately agree.

We keep licence records for as long as your licence is active and then for 7 years, for tax records.

If you're in the EU or UK (GDPR and UK GDPR)

If you buy a licence from the European Union or the United Kingdom, the GDPR or UK GDPR also applies to the information above.

• Who is responsible: SkyM8 Pty Ltd (trading as McKee Creative), 4 Picaninni Close, Cannonvale QLD 4802, Australia. Contact: grow@mckeecreative.store. We haven't appointed an EU or UK representative, because we only occasionally handle EU/UK buyers' information. If that changes, we'll name one here.
• Why we're allowed to use it: to perform our contract with you (taking payment, issuing and checking your licence, updates, support and renewal reminders); to meet legal obligations (tax records); and our legitimate interest in keeping the licence server secure and stopping misuse of keys. Marketing emails only with your consent, which you can withdraw at any time.
• Transfers outside the EU and UK: we're based in Australia, so your information is handled in Australia and by the services listed above in the US and elsewhere. We rely on those providers' standard contractual clauses or EU-US Data Privacy Framework certification where they apply, and otherwise on the transfer being necessary to perform your contract.
• Do you have to give it to us? We need your name, email, billing address and payment details to sell you a licence and send your key. Without them we can't complete the purchase. A tax ID is optional.
• How long we keep it: for as long as your licence is active, then 7 years for tax records. Withdrawal requests are kept for the same period.
• Your rights: you can ask to access, correct, delete or receive a copy of your information, restrict or object to how we use it, and withdraw consent. Email us and we'll reply within one month. We may need to keep tax records for the 7 years the law requires.
• Complaints: you can complain to the data protection authority where you live (in the UK, the Information Commissioner's Office). We'd appreciate the chance to fix it first.

How we protect it

• Two-factor authentication on our accounts.
• Read-only access to your accounts wherever possible, and access removed when a job ends.
• Working files deleted on the schedule above.
• If there's a data breach likely to cause serious harm, we'll tell you and, where required, the Office of the Australian Information Commissioner, under the Notifiable Data Breaches scheme.

How long we keep it

• Emails and job records: for as long as we work together, plus 7 years.
• Tax and financial records: at least 5 years, as Australian tax law requires.
• Customer-level data from your accounts: deleted within 30 days, as above.

Access, correction and complaints

You can ask what personal information we hold about you, and ask us to correct it. Email grow@mckeecreative.store. We'll reply within one business day to acknowledge your request, and deal with it within 30 days. We don't charge for requests.

If you're unhappy with how we've handled your information, email us first and we'll respond within 30 days. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We'll update this policy when the way we handle information changes. The date at the top shows the latest version.