KendroAI - Privacy Policy

KendroAI — Privacy Policy Last updated: April 2026

1. Introduction

This Privacy Policy explains how KendroAI ("we", "us", "our") collects, uses, stores, and discloses personal information in connection with the KendroAI website and services (kendroai.com).

We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also comply with the European Union General Data Protection Regulation (GDPR) and other relevant international privacy frameworks.

By using our website or engaging our services, you agree to the collection and use of information as described in this policy.

2. Who We Are

Legal Entity: Arbela Media Group Pty Ltd, Trading As: KendroAI

Contact Address: PO Box 43, Prahran VIC 3181, Australia

Website: https://kendroai.com/contact-us

3. What Information We Collect

We collect the following categories of personal information:

Information you provide directly:

Name, email address, and phone number submitted via our contact form
Email address provided when subscribing to our newsletter or email communications
Business name and details provided during service enquiries or onboarding
Communications you send us via email or contact form

Information collected automatically:

IP address and approximate location
Browser type, device type, and operating system
Pages visited, time spent on pages, and referring URLs
Cookie identifiers and tracking data (see Section 7)

Information collected during service delivery:

Where you engage us for Visibility Optimisation or Content Marketing services, we may request access to your Google Search Console, Google Analytics, Google Business Profile, website backend, or social media accounts. Access is granted by you, used solely for service delivery, and revoked at your discretion at any time.

4. How We Use Your Information

We use your personal information for the following purposes:

Service delivery:

To respond to enquiries and provide quotes
To deliver the services you have engaged us for
To manage your account and communicate with you about your services
To access third-party platforms on your behalf where you have granted permission

Marketing and communications:

To send newsletters and marketing communications where you have opted in
To send transactional emails related to your services or purchases

Analytics and improvement:

To understand how visitors use our website and improve our content and services
To measure the effectiveness of our marketing campaigns

Legal and compliance:

To comply with applicable laws and regulations
To protect our legal rights and those of third parties

5. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing personal data is as follows:

Contract: Processing necessary to deliver services you have engaged us for
Legitimate interests: Website analytics, fraud prevention, and improving our services
Consent: Email marketing communications and non-essential cookies — you may withdraw consent at any time
Legal obligation: Where processing is required by applicable law

6. Third-Party Services We Use

We share data with the following third-party service providers:

Payment processing:

ThriveCart and Stripe — process payments for our services. We do not store your payment card details. Please refer to ThriveCart's and Stripe's privacy policies for details on how they handle payment data.

Analytics and advertising:

Google Analytics — collects anonymised website usage data to help us understand visitor behaviour
Google Ads / Google Tag Manager — used to measure campaign performance and serve relevant advertising
Facebook Pixel — used to measure the effectiveness of our Facebook advertising campaigns and to enable retargeting

Email and communications:

Commercial email autoresponder service (including services such as Mailchimp, ActiveCampaign, or similar) — used to manage our email list and send newsletters and marketing communications
Gmail / Google Workspace — used for direct email communications

Booking and scheduling:

Calendly — used to facilitate discovery call bookings. Calendly collects your name and email address when you book a call.

Website hosting:

Duda — our website is hosted on the Duda platform

All third-party providers are required to handle your data in accordance with applicable privacy laws. We recommend reviewing the privacy policies of each provider for full details of their data practices.

7. Cookies

Our website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device that helps us recognise you and remember your preferences.

Types of cookies we use:

Essential cookies: These are necessary for the website to function correctly. They cannot be disabled.

Analytics cookies: Used by Google Analytics to collect anonymised data about how visitors use our website. This helps us improve our content and user experience.

Marketing and advertising cookies: Used by Google and Facebook to measure the effectiveness of our advertising campaigns and to serve relevant ads to you on other platforms.

Functional cookies: Used by tools like Calendly to enable booking functionality.

Your cookie choices: When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, accept only essential cookies, or customise your preferences. You can update your cookie preferences at any time via the cookie settings link in our website footer.

You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

For visitors from the EEA or UK, non-essential cookies will only be placed with your explicit consent in accordance with GDPR requirements.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:

Contact form enquiries: Up to 2 years from the date of last contact
Client data: For the duration of the engagement and up to 7 years after for legal and tax compliance purposes
Email marketing list: Until you unsubscribe or request deletion
Analytics data: In accordance with the retention settings of each analytics platform (typically 14 months for Google Analytics)
Third-party platform access credentials: Revoked and deleted immediately upon completion of the relevant service engagement

9. Disclosure of Personal Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may disclose your personal information:

To third-party service providers as described in Section 6, solely for service delivery purposes
Where required by law, court order, or regulatory authority
To protect the rights, property, or safety of Arbela Media Group, our clients, or others
In connection with a business sale, merger, or acquisition, subject to the incoming party maintaining equivalent privacy protections

10. International Data Transfers

Some of our third-party service providers are located outside Australia, including in the United States and European Union. Where personal data is transferred internationally, we take steps to ensure it is protected to a standard equivalent to Australian and applicable international requirements, including through contractual protections with our service providers.

11. Your Rights

Under Australian law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Make a complaint about how we have handled your information

Under GDPR (if applicable), you additionally have the right to:

Erasure ("right to be forgotten")
Restriction of processing
Data portability
Object to processing based on legitimate interests
Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at https://kendroai.com/contact-us. We will respond within 30 days.

If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

For Australian residents, complaints may be directed to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Security

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure. These measures include secure HTTPS transmission, access controls, and use of reputable third-party platforms with their own security certifications.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Children

Our services are directed exclusively at businesses and business owners. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

15. Contact Us

For any privacy-related questions, requests, or complaints:

PO Box 43, Prahran VIC 3181

https://kendroai.com/contact-us

Get in touch

Privacy Policy