Privacy policy

Information I collect

This website has no accounts and no shopping cart, so most of what is collected is statistical rather than personal. The contact form is the exception: it asks for information that identifies you, and only because you chose to send an enquiry. Three things are collected:

• Website analytics and session recording. Tools that report how the site is used: which pages are visited, how visitors arrived, how far down a page people read, and general information about the device and browser used, including an approximate location derived from your IP address. On its own this describes visits rather than naming you. Both tools are described in the next section.
• What you send through the contact form. Your name, your email address, the details you write about your project, and whichever of these the form asks for: the enquiry type, a budget range, a timeframe, a website address, who currently hosts the site, and a company name. The form only asks for what your kind of enquiry needs. This is personal information and it does identify you. I use it to answer your enquiry and to keep a record of the correspondence, and for nothing else. It is never sold and it is not used for marketing. The enquiry type, budget range and timeframe are also counted in Google Analytics, without your name, email address or message, so I can see what kind of work the site attracts.
• What you send me directly. If you email me, I receive your email address and whatever you choose to include in your message, and I use it the same way.

Cookies, analytics and session recording

Two tools run on this site, and both set cookies on your device. Cookies are small files that let a tool recognise a repeat visit and tell one visitor from another. The site also sets one cookie of its own, and only if you use the opt-out page below, purely to remember that choice on this browser.

• Google Analytics reports which pages people read and how they found the site. It is not used for advertising, and the data is not sold or shared with anyone for marketing.
• Microsoft Clarity records how pages are used: mouse movement, clicks, and scrolling, played back as a recording of the page. Microsoft masks the contents of input boxes and dropdown menus in every masking mode, so anything you type into a field is not captured. The rest of the text on the page is. It is used to find pages that are confusing or broken.

Google and Microsoft process this information on my behalf, and may do so on servers outside Australia, including in the United States. You can read Google's privacy policy, how Google uses data from sites that use its services, and the Microsoft privacy statement.

You can opt out at any time. Every major browser lets you block or delete cookies in its settings, Google publishes a browser add-on that opts you out of Google Analytics across every site that uses it, and Microsoft describes how to opt out of Clarity on its Clarity data privacy page. Blocking any of this will not stop you using the website.

The contact form, and who handles it

When you submit the contact form, what you wrote is sent to me by email. Two companies handle it along the way, both acting on my instructions, and both may do so on servers outside Australia, including in the United States.

• Cloudflare hosts this website and runs the small piece of code that receives your submission and passes it on, so your submission travels through Cloudflare's network. See the Cloudflare privacy policy.
• Resend delivers the email to my inbox. Resend keeps a copy of the message for 30 days as part of its delivery records, after which it is removed. See the Resend privacy policy.

The form has no tracking of its own beyond the analytics described above, and what you type into its fields is hidden from the session recording tool.

Other services on this site

• Email links. Several service pages, and the contact page alongside its form, offer an email address. Clicking one opens your own email program. Nothing is sent until you send it.
• Images and video served by Google. A few blog posts show a YouTube thumbnail, and some pages show reviewer photos from Google. Loading those tells Google your IP address and browser. Videos only start playing when you click them, and are covered by YouTube's policy.
• Links to other websites. This site links out to client websites, social profiles and third-party tools. Once you follow a link, anything you do there is covered by that site's privacy policy, not this one.

How I handle your information

I keep information only for as long as I need it, and I take reasonable steps to protect it from misuse, loss, and unauthorised access or disclosure. I do not sell personal information. I disclose it only where it is necessary to run the business, for example to the service providers described above, or where the law requires it.

I handle personal information in line with the Australian Privacy Principles, whether or not the Privacy Act requires it of a business this size.

Accessing your information, and complaints

You can ask what personal information I hold about you, ask me to correct it if it is wrong, or ask me to delete it. You can also raise a concern about how it has been handled. Email [email protected] or use the contact page, and I will respond within a reasonable time. If you ask me to delete an enquiry you sent through the form, I will delete the copy in my inbox. Resend holds its own copy as part of its delivery records for 30 days, and that copy is removed automatically at the end of that period.

If you are not satisfied with my response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

I may update this policy as the website and the business change. The current version is always the one published on this page, and the date it was last revised is shown at the top.