This website is designed around the operating principle that the website is a door, not a data lake. We do not run an advertising tracker, we do not build a profile of you, and we do not sell anything you submit. This policy describes what little we do collect and what happens to it.
What we collect
- Contact form submissions. When you use the contact form, we receive what you typed (name, organisation, work email, engagement type and message). That submission goes to our customer relationship system, where it is treated as a private business contact.
- Server logs. Our hosting provider (Netlify) records standard web-server data for the requests they handle: IP address, user agent, request path, response code, timestamp. These logs are kept for the provider's standard retention period and are used for abuse mitigation only.
- Cookies and website usage. We use Google Analytics to understand how the website is used and whether our pages lead to enquiries. These set first-party cookies on this site and send page and interaction data to Google. Linked third-party content (Substack, MDPI publications, partner sites) is governed by the privacy policies of those services and will only run if you follow the link.
What we do not collect
- No behavioural profiling.
- No fingerprinting scripts.
- No cross-site tracking.
How we use what we collect
Contact-form submissions are used to reply to you. If you choose to subscribe to the newsletter via Substack, your subscription is managed by Substack under their privacy policy, not ours.
Your rights (GDPR / Australian Privacy Principles)
If you are in the EU, EEA, UK or under any equivalent regional regime, you have the right to access, correct, port or delete any personal data we hold about you. The same applies under the Australian Privacy Principles.
To exercise any of these rights, contact us with your request. We respond within five business days and complete most requests within 30 days.
Data retention
Contact-form data is retained for as long as the engagement is active, plus three years for tax and audit purposes. Inactive enquiries that don't lead to an engagement are deleted at 24 months.
Contact
For privacy questions, Contact Us.