Privacy Policy - ReCreate

Last updated: 20 October 2026

1. Who we are

ReCreate is a content production business based in Geelong, Victoria. We produce photography, video and written content for businesses, and we operate Geelong Photo Studio.

This policy is issued by:

ReMedia Creative Pty Ltd, trading as ReCreate
ABN 33 666 020 373 · ACN 666 020 373
4/24 Raptor Place, South Geelong VIC 3220, Australia
Email: [email protected]

In this policy, “we”, “us” and “our” mean ReMedia Creative Pty Ltd trading as ReCreate.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What this policy covers

This policy explains how we collect, hold, use, disclose and protect personal information. It applies to:

visitors to our websites, including re-create.au, recreate.agency and recreateaustralia.com, and their subdomains
people who contact us, enquire about our services or respond to our advertising, including advertising on Facebook, Instagram, LinkedIn and Google
our clients and their staff
people who appear in the photography, video or audio we capture
talent, contractors, crew and suppliers
people who apply to work with us

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. Photographs, video and audio recordings are personal information when a person can reasonably be identified from them.

3. The personal information we collect

3.1 Enquiries, clients and prospective clients

name, business name and role
email address, phone number and postal or site address
the content of your enquiry, brief or messages with us
project details, shoot locations, site access instructions and contact people
quotes, contracts, invoices, payment records and billing details
records of meetings and calls with you, including notes and, where you have been told and agreed, recordings and transcripts

3.2 Website visitors

IP address, approximate location, device type, browser and operating system
pages viewed, time on page, referring website and the links you clicked
information collected by cookies and similar technologies (see section 7)

3.3 People who appear in photographs, video and audio

When we carry out a shoot we capture images, video and audio that may include a person’s face, voice, likeness, name, role, uniform, vehicle, workplace or home, and the location and date of capture. This can include:

our clients and their staff, who are the intended subjects of the content
talent, presenters, interviewees and guests
contractors and site personnel on construction and civil sites
members of the public who are incidentally captured in a public place or in the background of a shot

We also capture aerial imagery using remotely piloted aircraft (drones) operated in accordance with CASA rules.

3.4 Talent, contractors, crew and suppliers

name, contact details and business details
ABN, insurance details, licences and accreditations
bank details for payment, and tax information where required
availability, rates, invoices and work records
signed releases and agreements

3.5 Job applicants

name and contact details
resume, cover letter, portfolio or showreel
work history, qualifications, references and right to work information
interview notes and assessment records

3.6 Sensitive information

We do not seek sensitive information (such as health information, or information about a person’s racial or ethnic origin, religious beliefs, or union membership). Some of this information can be apparent from a photograph or video. Where it is, we treat it as sensitive and rely on the consent given for the shoot. If you do not want to appear in content, tell us and we will not film you, or we will remove you from the material we deliver.

We do not knowingly collect personal information from children. Where a person under 18 appears in content we produce, we require written consent from a parent or guardian before that content is used.

4. How we collect personal information

We collect personal information:

Directly from you, when you complete a form on our website, submit a lead form on a social media platform, email, call or message us, meet with us, sign a contract, book a shoot, appear on a shoot, apply for a role, or sign up to our mailing list.
During production, by photographing, filming and recording audio at shoots, studios and sites.
From our clients, when they give us contact details for their staff, participants, site contacts or stakeholders so that we can plan and deliver a project. If you were referred to us this way, this policy explains what we do with those details.
Automatically, through cookies, analytics and advertising tools on our websites (see section 7).
From third parties and public sources, such as advertising and social media platforms that pass us a lead, referral partners, your public website, and public business registers.

Where it is reasonable and practicable, we collect personal information directly from the individual concerned.

You can deal with us anonymously or under a pseudonym when you make a general enquiry. We cannot deliver a project, issue an invoice or pay a contractor anonymously.

5. Why we collect, hold, use and disclose personal information

We use personal information to:

respond to enquiries and provide quotes and proposals
plan, schedule, produce and deliver photography, video and content projects
manage studio bookings and site access
communicate with you about your project, including updates, approvals and feedback
issue invoices, take payment and manage our accounts
manage talent, crew, contractors and suppliers, and pay them
assess applications for employment or contracting work
promote our business, including publishing finished work in our portfolio, on our website, in proposals and on our social media channels, where we have the right or consent to do so
run and measure advertising, including on Facebook, Instagram, LinkedIn and Google
send you marketing communications you have asked for or would reasonably expect, and which you can opt out of at any time
improve our websites, services and internal processes
maintain the security and integrity of our systems and records
meet our legal, tax, insurance and work health and safety obligations, and resolve disputes

We only use personal information for the purpose we collected it for, for a directly related purpose you would reasonably expect, or where you have consented or the law requires or permits it.

6. Photography, video and audio

This section matters most to people who appear in our work.

Consent and releases. Where an individual is a featured subject (for example, an interviewee, presenter, model or staff member being profiled), we obtain consent before the content is used. Depending on the project this is a signed release, a written confirmation, or consent arranged and warranted by our client as the employer or organiser. Our client is responsible for telling their own staff and visitors that a shoot is happening and for obtaining consent where the shoot is on their site or at their event.

Capture in public and on sites. On construction and civil sites, in studios, at events and in public places, people may be captured incidentally in the background. Where practicable, signage or a verbal notice is used to let people know filming is taking place. If you are captured and do not want to be, speak to the crew on the day or contact us at [email protected] and we will remove or obscure you in the material we deliver, where it is reasonable to do so.

How finished content is used. Finished photography and video is delivered to the client who commissioned it, and that client decides where it is published. We may also use finished work and behind the scenes material in our own portfolio, website, proposals, showreel, case studies and social media channels, unless you or our client has told us not to.

Raw footage. Raw and unused footage is not published. It is retained as described in section 13 and may be shared with our editors and post-production contractors.

Withdrawing consent. You can withdraw your consent to our ongoing use of your image or voice at any time by contacting us. We will stop using that material in our own marketing and will tell the relevant client. We cannot recall material that has already been printed, broadcast, published by a third party, or distributed by our client, and we may be unable to remove you from an archived project file.

Meeting recordings. We sometimes record and transcribe meetings and calls so we have an accurate record. Where we do, we tell you at the start and you can ask us not to.

7. Cookies, analytics and advertising technologies

Our websites use cookies and similar technologies (including pixels, tags and local storage) to make the site work, to understand how it is used, and to measure and target advertising.

We use, or may use:

Essential and functional cookies, which are needed for the site and forms to work.
Analytics tools, such as Google Analytics, which tell us how many people visit, which pages they view and how they got to us. This is reported to us in aggregate.
Meta (Facebook and Instagram) tools, including the Meta pixel and the Conversions API. These tell us when someone who saw or clicked one of our ads takes an action on our website, let us measure the performance of our advertising, and let us show ads to people who have visited our website or who resemble our existing audience. Meta may match this data to a Facebook or Instagram account. Meta’s handling of that data is governed by the Meta Privacy Policy.
Lead forms on social platforms. If you submit a lead form inside Facebook, Instagram or LinkedIn, the platform passes your details (typically name, email, phone and your answers) to us, and we handle them under this policy. The platform also keeps a copy under its own policy.
Other advertising and marketing tools, including Google Ads and LinkedIn, used for the same purposes.

How to opt out.

Change your cookie settings in your browser, or use private browsing. Blocking cookies may stop parts of our website working.
Adjust what advertising you see on Facebook and Instagram in Meta’s Ad Preferences, and review Meta’s Off-Facebook Activity settings to disconnect activity that businesses share with Meta.
Opt out of Google Analytics using Google’s browser add-on, and manage Google advertising in Google Ad Settings.
Opt out of our marketing emails and SMS using the unsubscribe link, or by contacting us.

8. Marketing communications

If you give us your details, we may send you emails or messages about our services, work and events. Every marketing message identifies us and includes an unsubscribe option that costs you nothing, and we action unsubscribes within five working days. You can also tell us at any time at [email protected] that you do not want to hear from us. We handle direct marketing in line with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).

Opting out of marketing does not stop us sending you messages we need to send about a project you are involved in, such as shoot schedules, approvals and invoices.

9. Who we disclose personal information to

We disclose personal information to:

Our team, contractors and crew, including photographers, videographers, drone operators, editors, designers and virtual assistants, so they can work on your project. They are required to keep the information confidential and to use it only for that work.
Our clients, where we are producing content for them. This includes participant details, release forms and finished content.
Service providers and platforms that run our business. The main ones are:

Purpose	Providers
Website and hosting	WordPress hosting, Vercel, Cloudflare
CRM, forms, email and SMS marketing	GoHighLevel (HighLevel)
Email, documents and file storage	Google Workspace, Dropbox and similar cloud storage
Project and production management	ClickUp
Video review and delivery	Frame.io (Adobe), Image Cloud galleries
Payments, invoicing and accounting	Stripe, Xero, our bank
Communication	Discord, Zoom, Google Meet
Advertising and analytics	Meta, Google, LinkedIn
Social media management and reporting	Sprout Social
Automation and integration	n8n, Zapier
Transcription and AI assistance	See section 11

Professional advisers, such as our accountant, insurer and lawyers.
Government bodies, regulators, courts or law enforcement, where we are required or authorised by law to disclose.
A purchaser, if we sell or restructure part of our business, in which case information would be transferred subject to the same protections.

We do not sell personal information, and we do not disclose personal information to third parties for their own direct marketing.

10. Overseas disclosure

Some of the providers listed above store or process information outside Australia. This means your personal information is likely to be disclosed to recipients in:

the United States (for example Meta, Google, GoHighLevel, ClickUp, Adobe/Frame.io, Stripe, Discord, Sprout Social, Vercel, Cloudflare)
New Zealand (Xero)
the European Union and United Kingdom, Singapore and other countries where our providers operate data centres

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including by relying on the provider’s contractual terms and published privacy commitments. Some of these providers are large global platforms whose handling of data is governed by their own privacy policies.

11. Artificial intelligence and automated tools

We use AI tools to help run the business, for example to transcribe meetings, draft and review content, check deliverables for quality, organise footage and summarise notes. Where those tools process personal information, they are covered by the disclosure and overseas sections above.

We do not use AI to make decisions that have a legal or similarly significant effect on an individual without a person reviewing the outcome. Hiring decisions are made by people. We do not permit our AI providers to use your content to train their public models where that setting is available to us, and we choose business tiers that offer that protection where we can.

12. How we keep personal information secure

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include access controls and multi-factor authentication on our key systems, password management, encrypted storage for media and backups, restricting access to the people who need it, confidentiality obligations for our team and contractors, and reputable cloud providers.

No system is completely secure. If a data breach occurs that is likely to cause serious harm, we will act promptly to contain it, notify affected individuals, and notify the Office of the Australian Information Commissioner where the Notifiable Data Breaches scheme applies.

13. How long we keep personal information

We keep personal information only as long as we need it:

Enquiries that do not become projects: generally up to 2 years, so we can follow up and understand our pipeline.
Client and project records, contracts and releases: for at least 7 years after the engagement ends, to meet tax, insurance and legal requirements, and because releases must be kept for as long as the content is in use.
Finished content and delivered files: retained as part of our portfolio and archive, unless consent is withdrawn or the client agreement says otherwise.
Raw footage and project files: typically archived for up to 12 months after delivery, then deleted, unless the client has arranged longer storage.
Unsuccessful job applications: up to 12 months, unless you ask us to delete them sooner.
Accounting records: 7 years, as required by law.

When we no longer need personal information and we are not required to keep it, we destroy it or de-identify it.

14. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong, out of date or incomplete. Email [email protected] and tell us what you need. We may need to verify your identity.

We will respond within 30 days. Access is free, although we may charge a reasonable cost for retrieving and supplying a large amount of information, and we will tell you before we do. If we refuse access or a correction, we will explain why in writing and tell you how to complain.

If you want an image, video or recording of yourself removed from our own marketing, contact us and we will deal with it as described in section 6.

15. Complaints

If you think we have mishandled your personal information, or breached the Australian Privacy Principles, contact us first:

Privacy Officer, ReCreate
Email: [email protected]
Post: 4/24 Raptor Place, South Geelong VIC 3220

Please tell us what happened and what outcome you want. We will acknowledge your complaint within 5 business days and give you a written response within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner:

Website: oaic.gov.au · Phone: 1300 363 992 · Post: GPO Box 5218, Sydney NSW 2001

16. Third party websites

Our websites and content link to other websites and social media platforms. We are not responsible for how those sites handle personal information. Read their privacy policies before giving them your details.

17. Changes to this policy

We review this policy from time to time and may update it. The current version is always available at re-create.au/privacy-policy, and the date at the top shows when it last changed. If we make a significant change, we will take reasonable steps to let affected people know.

18. Contact us

ReCreate (ReMedia Creative Pty Ltd)
4/24 Raptor Place, South Geelong VIC 3220
Email: [email protected]
Web: re-create.au