Privacy Policy

Business name

Magnetic Island Web Design

Based in

Magnetic Island, Queensland, Australia

The short version

• The only information this website asks you for is what you type into the enquiry form.
• It is used to reply to your enquiry. It is not sold, not used for advertising, and not added to a mailing list.
• This site sets no cookies and uses no browser storage. There is no analytics, no advertising pixel and no session recording.
• You can ask what information is held about you, have it corrected, or have it deleted.

What information is collected

Information you give us

If you submit the enquiry form on the Contact page, the following is sent to us by email:

• your name;
• your business name;
• your email address;
• your phone number, if you choose to provide one;
• your existing website or social page, if you choose to provide one;
• which services you have indicated you're interested in;
• the message you write;
• the fact that you ticked the box confirming you had read this policy.

The form deliberately does not ask for a date of birth, a home address, payment details, government identifiers, or any other sensitive information. Please don't include sensitive information in your message either. If something sensitive is relevant to your project, say so and we'll arrange a more appropriate way to discuss it.

Information collected automatically

Like any website, requests to this site are handled by a hosting provider, and that provider processes standard technical request information in order to serve the page and keep the service running. That typically includes your IP address, the page requested, the time of the request, and your browser's user agent string. This site is hosted with Vercel, and that processing is governed by their infrastructure and security practices.

When you submit the enquiry form, a short-lived, one-way hashed derivative of the requesting IP address is held in the server's memory for a few minutes. It is used only to limit how many submissions can be made in a short period, so the form cannot be used for spam. The original address is not written to a database by this application, and the hash is discarded when the window expires or the server restarts.

What is not collected

This website does not use analytics software, advertising or conversion pixels, social media tracking scripts, session recording or heatmap tools, A/B testing tools, or embedded third-party content that would load on page view. There is no tracking to opt out of, because none was installed. See the Cookie Policy for the detail.

Why it is collected and how it is used

• To respond to your enquiry. Everything you submit is used to understand what you need and to write back to you, including, where relevant, to prepare a quote.
• To keep the form usable. The hashed rate-limit value and a hidden anti-spam field exist to stop automated abuse.
• To keep records of business correspondence. Enquiries remain in the business inbox as ordinary correspondence.

Your information is not used for profiling, automated decision-making, behavioural advertising, or any purpose you would not reasonably expect from sending a business enquiry.

Service providers

Running a website means a small number of providers necessarily handle data on our behalf. The providers involved are:

• Hosting: Vercel. Serves the website and processes the technical request information described above.
• Email delivery: VentraIP. An enquiry is sent to us as a single email through VentraIP. Everything you typed is in that email, along with the date and time you sent it. The reply-to address is set to the email address you gave, so our reply goes back to you rather than to the website. If the form is not connected, the Contact page says so, the submission is refused with an error, and nothing is transmitted to anyone.
• Our mailbox. Received enquiries are then stored in the business mailbox like any other message, and read in an ordinary email client.

Some of these providers operate infrastructure outside Australia, including in the United States and the European Union. That means your enquiry may be processed or stored overseas. We use providers with published security and privacy practices, but we can't control their internal operations, and we don't claim to.

No other third parties receive your enquiry. Information is not sold, rented, or shared for marketing.

Cookies and browser storage

This site currently sets no cookies and writes nothing to local storage or session storage. Because there are no non-essential cookies to consent to, there is deliberately no cookie banner. A consent popup for tracking that doesn't exist would be theatre, not privacy. The Cookie Policy explains this in full, including what would change if optional technology were added later.

How long information is kept

• Enquiries: kept in the business inbox for as long as they are commercially relevant, typically while a conversation or project is live, and for a reasonable period afterwards for business records. You can ask for yours to be deleted sooner.
• Rate-limiting hashes: minutes. They are held in memory only and are not persisted.
• Hosting request logs: retained by the hosting provider according to their own retention schedule, not ours.

Security

The site is served over HTTPS. The enquiry form is validated on the server, limits the size and rate of submissions, and passes API credentials only from server-side environment variables, so no keys are exposed in the browser. Enquiry content is not written to application logs. These are sensible precautions rather than a guarantee: no internet service can be described as perfectly secure, and this policy won't pretend otherwise.

Access, correction and deletion

You can ask us to tell you what information we hold about you from your enquiry, to correct it if it's wrong, or to delete it. We'll respond within a reasonable period. We may need to confirm you're the person the enquiry came from before acting, and we may keep information where there's a genuine reason to (for example, an unresolved dispute).

You can reach us at archie@magneticwebdesign.site.

Australian privacy law

Under the Privacy Act 1988 (Cth), many small businesses are not covered by the Australian Privacy Principles because of the small business exemption, which generally applies to operators with an annual turnover of $3 million or less, subject to exceptions. Rather than make claims about our regulatory status, this policy simply describes what actually happens to your information, and the site is built around collecting as little of it as possible.

If the Privacy Act applies to this business, or if we choose to opt in, this policy will be updated to say so. You can read about your rights and make a complaint at the Office of the Australian Information Commissioner (OAIC). Note also that since 10 June 2025 Australia has had a statutory cause of action for serious invasions of privacy, which applies more broadly than the Australian Privacy Principles do.

This policy is a description of our practices. It is not legal advice.

Links to other sites

This site links to other websites, including client work and official Australian Government resources. Once you follow a link you are on someone else's website, subject to their privacy practices, not ours. Links open in a new tab where they leave this site.

Children

This is a business-to-business website and is not directed at children. We don't knowingly collect information from children. If you believe a child has sent us an enquiry, please get in touch and we'll delete it.

Changes to this policy

If the website's behaviour changes, for example if analytics is ever added, this policy will be updated before or at the same time as the change, and the “last updated” date at the top will move. Material changes to how existing enquiry information is used won't be applied retrospectively without telling you.

No ABN or legal entity name is published above because those details have not been established yet. They will be added here once they exist, rather than shown as placeholders in the meantime.