Privacy Policy

What we collect

We collect minimal data about visitors to this website:

• Analytics: We use PostHog and Google Analytics to understand how visitors use the site. If you accept cookies, this includes page views, clicks, and session recordings, and PostHog stores data in first-party cookies and localStorage. Google Analytics uses cookies to track sessions and interactions on our behalf, and only runs if you accept. If you have not accepted, PostHog counts page views anonymously without cookies (see below).
• Quiz interactions: If you use the two-minute maturity check, your answers are stored in sessionStorage. Nothing is sent to our servers.
• Contact form: If you submit the contact form, we use the details you provide (name, email, optional phone, company, topic, and message) to reply to your enquiry. Your IP address is included in the internal notification email for abuse-prevention purposes. Submissions are verified with Cloudflare Turnstile and delivered by email; we do not store them in a database. While you type, the form keeps a temporary draft in your browser's sessionStorage so a page refresh does not lose what you have written. It stays in this tab only, is never sent to our servers, and is cleared when you send the message or close the tab. Before you send, the text in the message field may also be checked against our own site search service so the form can suggest pages that might already answer your enquiry - nothing is sent until the message reaches a minimum length.
• Booking: If you book a working session via Calendly, Calendly collects the information you provide through their booking form. We do not store that data ourselves.

We do not collect names, addresses, or other personal information unless you voluntarily provide it through a booking or direct contact.

How we use it

Analytics data is used to improve the website experience only. We do not sell or share your data with third parties for marketing purposes.

Legal bases

Where the UK or EU GDPR applies, we rely on:

• Consent for analytics cookies, Google Analytics and session recordings. You can withdraw it at any time by clearing this site's data in your browser, which brings the cookie banner back.
• Legitimate interests for anonymous, cookieless page-view counts, keeping the site secure, and preventing abuse of the contact form (Turnstile verification and IP address checks).
• Steps before entering a contract, or our legitimate interest in responding, when you send an enquiry or book a session.

Cookies and tracking

PostHog and Google Analytics use cookies and localStorage to track session data. You can decline tracking via the cookie consent banner that appears on your first visit. If you decline, or until you make a choice, no analytics cookies or localStorage are set, Google Analytics does not run, and no session recordings are made. PostHog still counts page views anonymously using a privacy-preserving hash calculated on its servers, which cannot be used to recognise you across days or sites. We only store your cookie choice itself in localStorage. If your browser sends a Global Privacy Control signal, we treat it as declining tracking and do not show the banner.

Where your data goes

PostHog analytics data is stored in the European Union. Google Analytics (Google, US), Calendly (US) and Cloudflare (US, for Turnstile verification) process data outside the UK, EU and Australia, including in the United States. These transfers are covered by the providers' standard safeguards, such as the EU-US and UK-US Data Privacy Frameworks or standard contractual clauses.

How long we keep it

Contact form enquiries are kept in our email only for as long as we need them to respond and to manage any engagement that follows, plus any period the law requires us to keep business records. Analytics data is kept according to our providers' retention settings and is not used to identify you. You can ask us to delete your information sooner at any time.

Your rights

Under the UK General Data Protection Regulation (UK GDPR), the EU GDPR, the Australian Privacy Act 1988 and other applicable data protection laws, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Restrict or object to our processing of your information
• Receive a copy of your information in a portable format
• Withdraw consent for processing at any time
• Complain to a regulator - the ICO in the UK, the OAIC in Australia, or your local data protection authority

To exercise any of these rights, contact us via the contact form. We do not charge for rights requests and aim to respond within 30 days.

Changes to this policy

We may update this policy when our services or the law change. The "Last updated" date at the top of this page shows when it last changed. If a change materially affects how we use your information, we will ask for your consent again where the law requires it.

Contact

Data controller: Graeme Provan, Omnichannel PTY LTD.
For all privacy questions and rights requests, use the contact form.