Summatt

Legal

Privacy policy

Last updated: 16 September 2026

This policy explains what personal information Summatt collects, why we collect it, who we share it with, and what you can do about it.

Who we are

Summatt is a marketing consultancy operated by Stuart Matthewman, based in Sydney, Australia. In this policy, “we”, “us” and “Summatt” refer to that business. We are the entity responsible for the personal information described here.

You can contact us at any time about privacy at stuart@summatt.com.

What we collect

We collect only what we need to respond to enquiries and run the business. In practice that is:

We do not knowingly collect sensitive information as defined in the Privacy Act 1988 (Cth), and we ask that you do not send it to us.

Cookies and tracking

Our website uses cookies set by HubSpot, the platform that hosts this site and our customer relationship management system. These cookies record that a browser has visited, which pages it viewed, and whether it has submitted a form before.

You can block or delete cookies through your browser settings. Doing so will not stop you reading the site, though some things may behave oddly.

Why we collect it

We do not sell personal information. We do not trade, rent or exchange it.

Direct marketing

If you give us your details through an enquiry, we may contact you about our services. Every marketing message we send includes a way to opt out, and we act on opt-outs promptly. You can also tell us directly at stuart@summatt.com and we will stop.

Who we share it with

We share personal information only where it is necessary to run the business:

Overseas disclosure

Some of the platforms we use store or process data outside Australia. Most significantly, our website and customer relationship management system are provided by HubSpot, Inc., a United States company, with data hosted in its Asia-Pacific and United States regions.

Before using an overseas provider we take reasonable steps to satisfy ourselves that it handles personal information in a way consistent with the Australian Privacy Principles. By providing your information through this site, you acknowledge that it may be stored and processed overseas.

Artificial intelligence and automated decisions

We use AI-assisted tools in the course of our work — for drafting, research, analysis and administration.

We do not use automated decision-making to make decisions that have a legal or similarly significant effect on you. Decisions about whether to work with someone, and what we recommend, are made by a person.

How we hold it, and for how long

Personal information is held in the systems described above, protected by access controls, multi-factor authentication and the security measures those providers maintain. No system is perfectly secure, and we do not claim otherwise.

We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires us to. When it is no longer needed, we delete or de-identify it.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will assess it promptly and notify affected individuals and the Office of the Australian Information Commissioner where required.

Accessing and correcting your information

You can ask us what personal information we hold about you, ask for a copy, and ask us to correct anything that is wrong or out of date. Email stuart@summatt.com. We will respond within 30 days.

There is no charge for making a request. If we refuse a request, we will tell you why in writing.

Complaints

If you think we have mishandled your personal information, tell us first at stuart@summatt.com. We will acknowledge your complaint within five business days and give you a written response within 30 days.

If you are not satisfied with our response, you can take the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We update this policy when our practices change or the law does. The current version always sits at this address, with the date it was last updated at the top.