Privacy Policy

Savvas Studio

v2.3 · Effective 30 July 2026 · Next review: July 2027

Who we are

Savvas Studio is a marketing, social media and video production agency based in Melbourne, Australia. Savvas Studio is a trading name of Funky Fresh Entertainment Pty Ltd (ABN 93 642 527 008) ("Savvas Studio", "we", "us", "our").

This policy explains what personal information we collect, how we use it, who we share it with, where it is stored, and the choices and rights you have. It applies to our website, our marketing, our dealings with prospective and current clients, and the production work we carry out - including filming and photography.

Our position under the Privacy Act

Businesses with an annual turnover of $3 million or less are generally exempt from the Privacy Act 1988 (Cth). Savvas Studio currently sits below that threshold. We have nevertheless chosen to handle personal information in line with the Australian Privacy Principles (APPs), because our clients rely on us to meet the standards that apply to them. We also comply with the Spam Act 2003 (Cth) in all electronic marketing.

Where a specific obligation applies to us only by choice rather than by law, we still treat it as a commitment to you.

1. The information we collect

We collect only what we need to do the work. Depending on your relationship with us, that may include:

1.1 If you are a client or prospective client

           
  • Contact and business details - your name, role, business name, email address, phone number, postal address and ABN.
  •        
  • Project information - briefs, creative preferences, specifications, approvals, feedback and any files or assets you send us.
  •        
  • Communication records - emails, messages, call notes, meeting notes and recordings of meetings where you have been told a recording is being made.
  •        
  • Billing information - invoicing details and payment records. We do not store full card numbers; card payments are handled by our payment providers.
  •      

1.2 If you visit our website

           
  • Log and device data - IP address, browser type, device type, referring page, pages viewed and time on page.
  •        
  • Cookies and tracking data - see section 7.
  •        
  • Enquiry form data - whatever you choose to submit through a contact or enquiry form.
  •      

1.3 If you appear in content we produce

           
  • Images, video and audio recordings of you, and your name, role or testimonial where you have provided them. See section 5.
  •      

1.4 Sensitive information

We do not seek out sensitive information (such as health information, racial or ethnic origin, political opinions, religious beliefs or sexual orientation). If a project genuinely requires it - for example a healthcare client's patient testimonial - we collect it only with the individual's express written consent and only for that purpose.

1.5 Children and young people

We do not knowingly collect personal information from anyone under 16 through our website. Where a project involves filming or featuring a person under 18, we obtain written consent from a parent or guardian before we film, and again before that footage is published.

2. How we use your information

We use personal information to:

           
  • Provide, manage and deliver our services and the projects we are engaged for.
  •        
  • Communicate with you about your project - briefs, approvals, scheduling and queries.
  •        
  • Prepare quotes and proposals, issue invoices and process payments.
  •        
  • Operate, maintain, secure and improve our website and internal systems.
  •        
  • Send you marketing about our services, where you have consented or where you are an existing client and we have a related business reason to do so. Every marketing message includes an unsubscribe link.
  •        
  • Meet our legal, tax, insurance and record-keeping obligations.
  •        
  • Resolve disputes and enforce our agreements.
  •      

We do not sell your personal information. We do not disclose your personal information to a third party for that third party's own marketing purposes.

3. When we handle data on behalf of a client

A large part of our work involves handling personal information that belongs to our client, not to us - for example a client's customer list, their social media inbox, their CRM records, or leads generated through a campaign we run for them. This section explains how we treat that information.

           
  • The client remains responsible for that data. We handle it only on the client's instructions and only for the purposes of the engagement.
  •        
  • We do not use it for our own purposes. We do not add a client's customers to our own marketing lists, and we do not use one client's data for another client.
  •        
  • Advertising audiences. Where we build custom or lookalike audiences on advertising platforms using a client-supplied list, we require the client to confirm that the individuals on that list were lawfully collected and consented to that use. We match data through the platform's own hashed-upload process.
  •        
  • Lead capture. Where we build lead forms, landing pages or automations for a client, we include a collection notice and consent mechanism so the individual knows who is collecting their information and why.
  •        
  • Access is limited. Only the team members working on that client have access, and access is removed when they stop working on the account or leave.
  •        
  • Return or deletion. On request at the end of an engagement, we return or delete the client's data, subject to the retention periods in section 8 and any legal obligation to keep records.
  •      

If you are an individual whose information we hold because of work we do for one of our clients, your first point of contact is that client. You are still welcome to contact us using the details in section 12 and we will help direct your request.

4. Who we share information with

We share personal information only where it is necessary, and only with the following categories of recipient:

           
  • Our team and contractors
    Why: To deliver the work - production, editing, design, social media management, ads.
    Examples: Employed staff, freelance videographers, photographers, editors, designers and social media coordinators.
  •        
  • Technology and cloud providers
    Why: To store files, manage projects, send email, schedule content and review video.
    Examples: Cloud file storage, project management, email, design, video review and scheduling platforms.
  •        
  • Advertising and analytics platforms
    Why: To run and measure campaigns.
    Examples: Meta (Facebook / Instagram), Google, and other platforms specified in a campaign brief.
  •        
  • Payment and accounting providers
    Why: To invoice you and keep our books.
    Examples: Our accounting software and payment processors.
  •        
  • Professional advisers
    Why: To get legal, accounting or insurance advice.
    Examples: Lawyers, accountants, insurers.
  •        
  • Legal authorities
    Why: Where required or authorised by law, or to protect our rights, safety or property.
    Examples: Courts, regulators, law enforcement.
  •        
  • A buyer of our business
    Why: If we sell or restructure the business, subject to the buyer agreeing to this policy.
    Examples: Due diligence and transfer.
  •      

Everyone in the first two categories is engaged under an agreement that requires them to keep information confidential and use it only for the purpose we engaged them for.

A current list of the third-party platforms we use is available to clients on request.

4.1 Information stored or accessed outside Australia

Some of the people and platforms we work with are located outside Australia. This means your information - and, where relevant, our clients' information - may be stored on or accessed from servers or by people in other countries. At present those countries are principally:

           
  • The Philippines - where some of our social media coordination, video editing and design work is performed by our offshore team members and contractors.
  •        
  • The United States - where a number of the cloud, advertising and creative platforms we use are hosted.
  •      

Before we engage an overseas contractor or platform, we take reasonable steps to satisfy ourselves that they will protect the information to a standard comparable to the Australian Privacy Principles, including binding them by written confidentiality and data-handling terms. We will update this section if the countries involved change. Please be aware that laws in those countries may differ from Australian privacy law.

5. Images, footage and likeness

We are a video and photography business, so filming and photographing people is core to what we do. We treat a person's image and voice as their personal information.

           
  • Featured talent. Anyone who is a focus of a shoot - presenters, staff, customers giving a testimonial, models - signs a release before filming. The release sets out where the footage may be used and for how long.
  •        
  • Filming in public or on client premises. We take reasonable steps to avoid capturing identifiable bystanders. Where a location is open to the public or to staff and customers, we ask the client to display notice that filming is taking place. That notice identifies Savvas Studio, gives our contact details, and tells people where to find this policy. If you are incidentally captured and would prefer not to be, tell us and we will remove or obscure you where the footage has not yet been published, and use reasonable efforts to do so where it has.
  •        
  • Portfolio and case study use. We may show work we have produced in our own portfolio, showreel, proposals and marketing. Where that work features an identifiable individual, we rely on the release signed for the shoot; if no release covers portfolio use, we ask first.
  •        
  • User-generated content. Where we reshare content created by a client's customers or community, we seek the creator's permission before reposting.
  •        
  • Withdrawing consent. You can withdraw consent for future use of your image at any time by contacting us. We cannot always recall material already printed, broadcast or distributed, but we will stop using it going forward.
  •      

5.1 Asking for a copy of footage or photos you appear in

If you believe you appear in footage or photography we hold, you can ask us for a copy. Here is how that works in practice.

           
  • How to ask. Email info@savvasstudio.com with "Footage Access Request" in the subject line. Tell us roughly when and where the filming took place, and anything that helps us find you in it - what you were wearing, who you were with, the business or event involved.
  •        
  • Proving it is you. We will ask you to verify your identity before we release anything. This protects you - we are not going to hand someone else's image to a stranger.
  •        
  • What you will receive. A viewing copy of the portion of the material in which you appear, in a normal format such as an MP4 or JPEG, watermarked and at viewing resolution. We do not release raw camera files, high-resolution masters, project files or entire unedited shoot folders - those routinely run to hundreds of gigabytes and contain material unrelated to you.
  •        
  • What the copy is for. A viewing copy is provided so you can see what we hold about you. It is for your personal reference only. It does not transfer ownership and is not a licence to publish, broadcast, distribute, or use the material commercially or promotionally. Copyright in our footage and photography remains with Savvas Studio or our client. If you would like to actually use the material, see section 5.2 - that is a separate conversation and we are happy to have it.
  •        
  • How long it takes. We will acknowledge your request within 5 business days and provide the material within 30 days. If locating it will take longer - older archived shoots can - we will tell you why and give you a date.
  •        
  • Cost. Free in almost every case. If a request requires substantial work - for example searching many hours of unlogged archive footage - we will tell you the reasonable cost before we start, and you can decide whether to proceed.
  •        
  • When we may need to limit what we provide. Where you appear alongside other identifiable people, releasing the material unedited would disclose their personal information too. In that case we will provide the material with others obscured, or provide a still or excerpt covering only you. Where the footage was produced for a client and is owned by them, we will tell you promptly and put you in contact with the client, or seek their agreement on your behalf.
  •        
  • If we cannot provide it. We will explain why in writing, tell you what we can offer instead, and let you know how to complain - see section 10.
  •        
  • Already published material. If the content is already public, we will simply point you to where it is.
  •      

You can also ask us to delete footage of you, or to stop using it. We will do so unless we are required to keep it by law or by a signed release that is still on foot, and we will explain our position either way.

5.2 If you want to use the footage yourself

Requesting access under section 5.1 is a privacy right, and we do not charge for it. Licensing footage so you can publish or use it is a different thing entirely - it is a commercial arrangement, and it is charged.

If you would like a clean, unwatermarked, full-resolution copy to use - for your own social media, your website, a showreel, or any other purpose - email info@savvasstudio.com and tell us what you want to use it for. We will quote you. Where the material was produced for a client, they own it, and we will need their approval before we can licence anything to you.

To be clear about the difference: seeing what we hold about you is free and always will be. Using our work is not. The two are not connected, and asking for one will never be treated as a request for the other.

6. How we protect information

We take practical, proportionate steps to protect the information we hold. These include:

           
  • Access controls - team members and contractors are given access only to the accounts and files they need for their role, and access is revoked when they leave or change roles.
  •        
  • Multi-factor authentication on our core business accounts.
  •        
  • Reputable cloud providers whose platforms encrypt data in transit and at rest.
  •        
  • Confidentiality and data-handling terms in our contractor and employment agreements.
  •        
  • Regular security audits carried out by our cyber security team, including review of who has access to what.
  •        
  • Secure disposal of information we no longer need.
  •      

No system is completely secure, and we cannot guarantee absolute security. If something does go wrong, we act on it.

6.1 If a data breach happens

If we become aware of unauthorised access to, or disclosure or loss of, personal information we hold, we will contain the incident, assess what happened and what the risk is, and take steps to prevent it recurring. Where the breach is likely to cause serious harm, we will notify the individuals affected and, where the scheme applies, the Office of the Australian Information Commissioner. Where the information belongs to a client, we will notify that client promptly - and in any event within any timeframe set out in our agreement with them - so they can meet their own obligations.

7. Cookies, analytics and advertising tools

Our website uses cookies and similar technologies. Broadly, they fall into three groups:

           
  • Essential
    What it does: Makes the site work - page loading, security, form submission.
    Can you turn it off? No. The site will not function properly without these.
  •        
  • Analytics
    What it does: Tells us how the site is used so we can improve it - pages viewed, time on page, traffic sources.
    Can you turn it off? Yes. Via your browser settings or our cookie banner where displayed.
  •        
  • Advertising and remarketing
    What it does: Lets us measure our advertising and show relevant ads to people who have visited our site. This may include the Meta Pixel and Google tags.
    Can you turn it off? Yes. Via your browser settings, our cookie banner where displayed, or the ad settings in your Meta and Google accounts.
  •      

Most browsers let you block or delete cookies. Doing so may affect how our website works. You can also opt out of personalised advertising directly in your Meta and Google account settings.

8. How long we keep information

We keep personal information only for as long as we need it, then securely delete or de-identify it. Our standard periods are:

           
  • Enquiries that do not become clients
    24 months from last contact.
  •        
  • Client records, briefs, approvals and correspondence
    7 years after the engagement ends.
  •        
  • Final delivered work (exports)
    Retained indefinitely as part of our portfolio and archive, unless you ask us to remove it.
  •        
  • Raw footage, camera files and working project files
    12 months after final delivery, then deleted or archived - tell us if you need it kept longer.
  •        
  • Signed releases and consents
    For as long as we use the material, plus 7 years.
  •        
  • Invoices, payments and financial records
    7 years, as required by Australian tax law.
  •        
  • Marketing consent and unsubscribe records
    For the life of the consent, plus 2 years.
  •        
  • Website analytics data
    Per the retention setting of the analytics platform, generally no more than 26 months.
  •      

We may keep information for longer where the law requires it, or where it is needed for an actual or anticipated legal claim, insurance matter or dispute.

Client agreements override these periods. The table above sets out our default position. Where our agreement with a client specifies a different retention or deletion period for material produced for them - whether shorter or longer - that agreement governs, and we apply it to all copies including archives and backups. If you are a client and need a specific retention period, tell us and we will build it into your agreement and our filing.

9. Your rights and choices

You can ask us to:

           
  • Access the personal information we hold about you - including footage and photographs in which you appear. See section 5.1 for how footage requests work.
  •        
  • Correct anything that is inaccurate, out of date or incomplete.
  •        
  • Delete information we no longer have a lawful or business reason to keep.
  •        
  • Stop marketing to you - use the unsubscribe link in any message, or email us at info@savvasstudio.com.
  •        
  • Stop using your image in future material, as set out in section 5.
  •        
  • Deal with us anonymously where it is lawful and practical to do so - for example a general enquiry.
  •      

We will respond to an access or correction request within 30 days. There is no charge for making a request; if a request is complex and involves significant work, we will tell you about any reasonable cost before we proceed. We may need to verify your identity first. If we cannot do what you have asked, we will explain why in writing.

9.1 If you are in the European Union or United Kingdom

If we handle your personal information in the course of offering services to you in the EU or UK, you may also have rights under the GDPR to object to or restrict processing, to data portability, and to lodge a complaint with your local supervisory authority. Contact us and we will deal with your request accordingly.

10. Complaints

If you think we have mishandled your personal information, please tell us - we would rather fix it.

           
  • Step 1. Email us at info@savvasstudio.com marked "Privacy Complaint", with the details. We will acknowledge your complaint within 5 business days.
  •        
  • Step 2. We will investigate and give you a written response within 30 days. If we need longer, we will tell you why and when to expect an answer.
  •        
  • Step 3. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
  •      

11. How to get a copy of this policy

This policy is free, and we will give it to you in whatever form is easiest for you:

           
  • Online. It is always published at savvasstudio.com/privacy.
  •        
  • By email. Email info@savvasstudio.com and we will send it to you as a PDF, usually the same business day.
  •        
  • By post or in another format. Ask us and we will post you a printed copy, or provide it in another reasonable format if you need one - for example large print. There is no charge.
  •        
  • At a shoot. If you are on set or at a location where we are filming, ask any member of our crew and they will give you our contact details and tell you how to get this policy.
  •      

11.1 Changes to this policy

We review this policy at least once a year, and whenever our practices or the law change. The current version is always published at savvasstudio.com/privacy, with its version number and effective date at the top. Where a change is significant, we will tell clients directly rather than relying on the website alone.

12. Contact us

For any question, request or complaint about privacy:

Privacy Contact - Savvas Studio
     Funky Fresh Entertainment Pty Ltd, trading as Savvas Studio
     ABN 93 642 527 008
     Email: info@savvasstudio.com
     Phone: 0449 773 883
     Post: Unit 70, 203 Rooks Rd, Vermont VIC 3133, Australia

By engaging us, using our services or browsing our website, you acknowledge this policy. Where we need your consent for something specific - marketing, sensitive information, or the use of your image - we will ask for it separately rather than relying on this policy alone.

Quality content, quickly.

Connect with us today and join our frequency