Privacy, in plain English.
Short, because there is not much to say. This website is a set of static pages with no accounts, no database and no tracking, so most of what a privacy policy usually covers does not apply to it.
- This website collects nothing about you
- No analytics, no tracking pixels, no advertising tags, no cookies, and nothing written to your browser’s storage. That is not a policy position we are asking you to trust: it is checkable. Open the page source, or your browser’s developer tools, and look.
- The contact form does not submit anywhere
- It composes an email in your own mail app, with the fields filled in, and you send it yourself from your own address. Nothing you type reaches this website, and there is no enquiry database here for anybody to lose, breach or subpoena.
- One third party sees you arrive, and it is the typeface
- The fonts on this site load from Google Fonts, at fonts.googleapis.com and fonts.gstatic.com. That means Google receives your IP address and your browser details when a page loads, as it does on a large share of the web. It is the only external request any page here makes, we would rather tell you than not, and self-hosting the fonts to remove it is on the list.
- If you email us, we hold your email
- Obviously. We keep it while there is a live conversation and for as long as we are working together, and we delete it on request. We do not add you to a mailing list, we do not sell or share it, and there is no follow-up sequence. If you ask what we hold about you, you get a straight answer within a few days.
- On a project, the scope names exactly what we can touch
- Before any work starts, the one-page scope lists which accounts and which data we may access and what for. Nothing outside that gets touched. At the end of an engagement we delete what we hold on request and confirm in writing that we have.
- Your data is not used to train anything
- Where a project uses AI tools, they are business-grade accounts configured so your information is not used to train anybody’s models, and never the free consumer tiers. If we cannot tell you where a piece of your data goes, it does not go there.
We probably do not have to do any of this.
The Privacy Act 1988 exempts most Australian businesses turning over less than AU$3 million a year, and that exemption is still in force. On turnover alone it very likely covers us.
We work to the Australian Privacy Principles anyway. A consultancy that tells clients to take their customers’ information seriously, and then claims a small business exemption for its own, is not one anybody should hire. If the exemption is ever removed we will not have to change anything, which is rather the point of doing it this way now.
What this page is not
It is a plain-English description of how we actually work, written to be understood rather than to be legally exhaustive. It is not a contract, and it does not create rights beyond the ones you already have.
Where a client engagement needs something more formal, that sits in the engagement documents rather than here, and it is written to cover the specific data involved rather than in general terms.
Anything unclear, or anything you want us to delete, goes to [email protected] and gets a real answer.