Privacy Policy

What we collect

If you use our contact form, we collect your name and work email address, and, if you choose to give them, your contact number, role, industry, and the message you write.

If you request access to a restricted area of the site, we collect the email address you submit so we can check it against an approved list and send a login link.

We also collect limited technical information automatically when you visit the site. Our hosting and content delivery provider, Cloudflare, logs standard technical data such as IP address, browser type, and pages requested, and Cloudflare Turnstile checks that a contact-form submission comes from a person rather than automated software.

Why we collect it

We collect personal information only where it is reasonably necessary: to respond to an enquiry you send us, to send a login link if you ask for one, and to operate and secure the site. We collect it by lawful and fair means, with your knowledge.

How we handle enquiries

When you submit our contact form, the details you enter are sent to us as an email, using Resend as our email delivery provider, and read in a Google Workspace mailbox. We do not hold enquiries in a database; each one exists only as the email it becomes. We use it solely to reply to you.

Login and cookies

If you request access to a restricted area, we check the email address you give us against an approved list and, if it is approved, email you a one-time login link that expires after one hour. We do not confirm or deny whether any particular address is on the list.

Using the link sets two cookies so the site knows you are signed in. The site also sets two further cookies for Google Analytics, described in the Analytics section below. All four are listed here:

The ykeo_auth and ykeo_nav cookies expire automatically after 30 days. The Google Analytics cookies expire after 2 years, as shown above. You can clear any of them at any time through your browser settings, and the login cookies can also be cleared using the sign-out link on the site.

Analytics

We use Google Analytics 4 (GA4) to understand how the site is used, such as which pages are visited and how people arrive at the site. We do not send GA4 your name, your email address, or the contents of any message you send us.

When you are signed in, our analytics include a pseudonymous identifier for your session so we can understand how the restricted area is used; it does not contain your email address.

If you would rather not be included in these analytics, the Google Analytics Opt-out Browser Add-on switches it off.

Disclosure

We do not sell personal information. We do not disclose it to third parties except where you have consented, where it is necessary for a supplier that helps us run this website (for example our hosting, email delivery, or bot-protection providers, each under their own obligations to us), or where we are required or authorised by law.

Storage and security

We store personal information using commercially reasonable measures to protect it from loss, misuse, unauthorised access, disclosure, or modification. We retain it only for as long as necessary for the purpose it was collected, or as required by law, after which we take reasonable steps to destroy or de-identify it. As set out above, we do not keep a database of enquiries, and login cookies expire on their own after 30 days.

Overseas disclosure

Some of the suppliers we use to run this website, including Cloudflare, Resend, and Google, may store or process data outside Australia. Where that is the case, we take reasonable steps to ensure recipients handle personal information consistently with the Australian Privacy Principles.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will respond in line with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner where required.

Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, or incomplete. To make a request, contact us using the details below.

Complaints

If you believe we have breached the Australian Privacy Principles, contact us first and we will respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact

For any privacy enquiry, email us using our contact form.