privacy policy

Last updated: 24.05.2026 Tongue Studio (ABN 93 679 129 628) | tonguestudio.com

Contact: hello@tonguestudio.com

1. Overview

Tongue Studio (we, us, our) is a brand voice and copywriting studio registered in Australia (ABN 93 679 129 628). We operate globally and work with clients in Australia, the United States, the United Kingdom, and the European Union.

This Privacy Policy explains how we collect, use, store, and disclose personal information when you visit tonguestudio.com (the Site), contact us, subscribe to our newsletter, or engage our services.

We are committed to handling personal information responsibly and in compliance with:

  • the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs);

  • the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) for visitors from the European Economic Area (EEA);

  • the UK GDPR and Data Protection Act 2018 for visitors from the United Kingdom; and

  • applicable US state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), for California residents.

By using the Site, you acknowledge you have read and understood this Policy. If you do not agree, please discontinue use of the Site.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information you voluntarily provide, including when you:

  • complete the contact form on the Site (name, email address, company name, message);

  • subscribe to our newsletter via MailerLite (name, email address);

  • book a consultation or call via Calendly (name, email address, scheduling preferences, any information entered in booking fields); or

  • communicate with us directly by email or social media.

2.2 Information Collected Automatically

When you visit the Site, we and our third-party service providers automatically collect certain technical and behavioural information, including:

  • IP address and approximate geographic location;

  • browser type, version, and operating system;

  • pages visited, time spent, referral source, and navigation behaviour;

  • device type and screen resolution; and

  • interactions with content, buttons, and links.

This information is collected via cookies, pixels, and similar tracking technologies as described in Section 5.

2.3 Information From Third Parties

We may receive information about you from third-party platforms including Meta (Facebook and Instagram) and TikTok if you interact with our advertising or social media content. This may include anonymised or aggregated data about ad engagement and website visits originating from those platforms.

3. How We Use Your Information

We use personal information for the following purposes:

Responding to enquiries and contact form submissions Legal basis (GDPR/UK GDPR): Legitimate interests; pre-contractual steps. Australian APP basis: Directly related to our functions.

Delivering and managing newsletter communications Legal basis (GDPR/UK GDPR): Consent (explicit opt-in). Australian APP basis: Consent.

Booking and managing consultations via Calendly Legal basis (GDPR/UK GDPR): Contractual necessity; legitimate interests. Australian APP basis: Directly related to our functions.

Analysing Site traffic and user behaviour (Google Analytics) Legal basis (GDPR/UK GDPR): Consent (cookie consent); legitimate interests. Australian APP basis: Legitimate purposes.

Serving and measuring advertising on Meta and TikTok Legal basis (GDPR/UK GDPR): Consent (cookie/pixel consent). Australian APP basis: Consent.

Improving the Site and our services Legal basis (GDPR/UK GDPR): Legitimate interests. Australian APP basis: Legitimate purposes.

Complying with legal obligations Legal basis (GDPR/UK GDPR): Legal obligation. Australian APP basis: Required by law.

We will not use your personal information for any purpose materially different from those described above without your prior consent.

4. Third-Party Services and Data Sharing

We use the following third-party services to operate the Site and our business:

Google Analytics Purpose: Site traffic analysis, user behaviour, and conversion tracking. Data location: USA (adequacy safeguards). Privacy policy: policies.google.com/privacy

MailerLite Purpose: Newsletter delivery and subscriber management. Data location: EU (GDPR compliant). Privacy policy: mailerlite.com/legal/privacy-policy

Calendly Purpose: Consultation scheduling and booking management. Data location: USA (SCCs / adequacy). Privacy policy: calendly.com/privacy

Meta Pixel (Facebook / Instagram) Purpose: Advertising measurement, retargeting, and audience building. Data location: USA (SCCs / adequacy). Privacy policy: facebook.com/privacy/policy

TikTok Pixel Purpose: Advertising measurement, retargeting, and audience building. Data location: USA / Singapore. Privacy policy: tiktok.com/legal/page/row/privacy-policy

We do not sell your personal information to third parties. We do not share your personal information with third parties for their own direct marketing purposes without your explicit consent.

We may disclose personal information to third parties where required by law, court order, or regulatory authority, or where necessary to protect our legal rights.

5. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies on the Site. Cookies are small data files stored on your device that help us operate and improve the Site.

5.1 Types of Cookies We Use

Essential cookies: Required for the Site to function. Cannot be disabled.

Analytics cookies: Used by Google Analytics to collect anonymised data about Site usage. Enabled only with your consent.

Marketing/advertising pixels: Meta Pixel and TikTok Pixel track visits and conversions to measure advertising effectiveness and build custom audiences. Enabled only with your consent.

Functionality cookies: Used by Calendly to enable scheduling functionality.

5.2 Managing Cookies

Where required by applicable law (including for EEA and UK visitors under the ePrivacy Directive and GDPR, and for California residents under CCPA/CPRA), we will obtain your consent before placing non-essential cookies.

You can manage, restrict, or withdraw your consent to cookies at any time by:

  • using our cookie consent banner on the Site;

  • adjusting your browser settings to block or delete cookies; or

  • using opt-out tools provided by individual services (e.g. Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout).

Disabling certain cookies may affect Site functionality.

6. International Data Transfers

Tongue Studio is based in Australia. Your personal information may be transferred to and processed in countries outside Australia, including the United States and the European Union, by the third-party services listed in Section 4.

Where we transfer personal information outside Australia, we take reasonable steps to ensure the recipient handles it in accordance with the Australian Privacy Principles or a comparable standard of protection.

For EEA and UK visitors: transfers to third countries are conducted under appropriate safeguards including Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent mechanisms as required by the GDPR and UK GDPR.

For US visitors: we handle your data in accordance with applicable US state privacy laws. See Section 9.4 for California-specific rights.

7. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law.

  • Contact form enquiries: retained for up to 3 years from last contact, unless a client relationship is established.

  • Newsletter subscriber data: retained until you unsubscribe. On unsubscribing, your email is suppressed from future sends within 10 Business Days.

  • Calendly booking data: governed by Calendly's retention policy. We retain records of consultations for up to 3 years.

  • Analytics data: Google Analytics data is retained per our configured retention period (default 14 months).

  • Legal and financial records: retained for 7 years in accordance with Australian tax and corporate law requirements.

When personal information is no longer required, we will take reasonable steps to delete, destroy, or de-identify it.

8. Security

We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:

  • use of reputable, security-certified third-party platforms;

  • access controls limiting who can access personal information;

  • encrypted transmission of data where supported; and

  • regular review of our data handling practices.

No method of transmission over the internet or electronic storage is completely secure. While we endeavour to protect your personal information, we cannot guarantee absolute security. If you become aware of any security concern, please contact us at hello@tonguestudio.com.

9. Your Rights

9.1 All Users

Regardless of your location, you have the right to:

  • request access to the personal information we hold about you;

  • request correction of inaccurate or incomplete personal information; and

  • make a complaint about how we have handled your personal information.

9.2 EEA and UK Residents (GDPR / UK GDPR)

If you are located in the EEA or UK, you additionally have the right to:

  • erasure ('right to be forgotten') — request deletion of your personal information where there is no legitimate reason for us to continue processing it;

  • restriction of processing — request that we restrict processing of your personal information in certain circumstances;

  • data portability — receive a copy of your personal information in a structured, commonly used, machine-readable format;

  • object to processing — object to processing based on legitimate interests or for direct marketing purposes; and

  • withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

EEA residents may lodge a complaint with their national data protection authority. UK residents may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9.3 Australian Residents

Australian residents may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if they are not satisfied with our response to a privacy complaint.

9.4 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • know what personal information we collect, use, disclose, and sell (we do not sell personal information);

  • delete personal information we have collected from you, subject to certain exceptions;

  • correct inaccurate personal information;

  • opt out of the sale or sharing of personal information for cross-context behavioural advertising (we do not sell personal information; you may opt out of sharing via our cookie consent settings); and

  • non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise your California rights, contact us at hello@tonguestudio.com. We will respond within 45 days as required by law.

10. Newsletter and Marketing Communications

We send marketing emails only to subscribers who have explicitly opted in via our newsletter signup form. Our newsletter is operated through MailerLite.

You may unsubscribe at any time by:

We comply with the Australian Spam Act 2003 (Cth), the US CAN-SPAM Act, and applicable EU and UK email marketing regulations. We will not add you to our mailing list without your consent and will honour all unsubscribe requests promptly.

11. Children's Privacy

The Site is not directed at children under the age of 16 (or 13 in the United States). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Links to Third-Party Sites

The Site may contain links to third-party websites. This Privacy Policy applies only to tonguestudio.com. We are not responsible for the privacy practices of any third-party sites and encourage you to review their privacy policies before providing personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated policy will be posted on the Site with a revised 'Last updated' date. We encourage you to review this policy periodically.

For material changes, we will endeavour to notify active subscribers via email.

14. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or the handling of your personal information, please contact:

Tongue Studio Email: hello@tonguestudio.com Website: tonguestudio.com ABN: 93 679 129 628

We will respond to all privacy enquiries within a reasonable time and no later than 30 days of receipt. For GDPR/UK GDPR requests, we will respond within one calendar month as required by law.

© Tongue Studio (ABN 93 679 129 628). All rights reserved. Last updated: 24.05.2026