Last updated 3 November 2026
Privacy policy
The short version
- I only collect what I need to reply to you, build and run your website, and get paid.
- I don't sell your information, and this website has no advertising or tracking cookies.
- Enquiries sent through website forms are emailed to the business and deleted from my systems after 90 days.
This policy explains how I, James Lemon (ABN 57 339 104 054), handle personal information. It covers this website, the service I provide to businesses, and the enquiry forms on the websites I build for them. I follow the Australian Privacy Principles in the Privacy Act 1988.
1. What I collect, and why
| Who | What | Why |
|---|---|---|
| People who use the form on this website | Name, business name, email, mobile (if given), current website (if given), and your message | To reply to you and build your preview |
| Businesses I prepare a preview for | Publicly available business information, such as your business name, trade, area, phone number and public reviews | To build a free preview of a website for you |
| Clients | Contact details, business details including your ABN, and the content for your website | To provide the service, register your domain, and keep records |
| People who use an enquiry form on a client's website | Whatever the form asks for, usually name, contact details and a message | To pass the enquiry on to that business (see section 4) |
When a form is sent, I also record the time, the web address it came from, and the sender's internet (IP) address and browser type, to help prevent spam and abuse.
2. Who I share it with
I don't sell or rent personal information. I only share it with the services I use to run my business, and only as far as they need it:
- Amazon Web Services (Sydney): hosts the websites and receives, stores and emails form enquiries.
- Google (Gmail) and ImprovMX: deliver and store my email. These services may store information outside Australia, including in the United States.
- Stripe: processes clients' payments. Stripe handles card details; I never see them.
- Synergy Wholesale and auDA, the .au domain administrator: domain registration requires the registrant's details, and some of them may be shown in public domain records.
- Anyone I'm required to share it with by law.
Some of these services are based overseas or store information overseas. I choose established providers with strong security, but I can't guarantee they'll meet every requirement of Australian privacy law.
3. Previews for businesses I haven't spoken to yet
If I build a preview for your business, I use only information you've made public. The preview is hidden from search engines and labelled as a concept that isn't affiliated with you. If you'd like it removed, or would prefer I didn't contact you, just tell me and I'll do that.
4. Enquiry forms on my clients' websites
When you send an enquiry through the website of a business I look after, I handle it on that business's behalf:
- your enquiry is emailed to that business, and they decide how to use and keep it;
- if you give an email address, you're sent a confirmation, which includes a link to tell me if you didn't send the enquiry;
- a copy is kept in my systems for 90 days, in case an email doesn't arrive, and then deleted automatically;
- a record that an email address asked not to be contacted, or bounced, may be kept longer, so it isn't emailed again.
For how a business uses your enquiry after receiving it, please contact them directly.
5. How long I keep it
- Enquiries stored by website forms: 90 days.
- Emails and messages with me: as long as they're useful for our dealings, then deleted.
- Client and payment records: 5 years, as Australian tax law requires.
- Server records of visits to previews: 30 days.
6. Cookies and tracking
This website and the websites I build don't use advertising, analytics or tracking cookies, and don't load fonts or scripts from third-party tracking services. Like all websites, the servers record basic technical information about requests (such as IP addresses) for security and to keep the sites running. For previews, I also use these records to see whether a preview has been viewed, so I know whether to follow up.
7. Keeping it secure
Information is sent over encrypted connections, stored with providers that encrypt it, and only accessible to me. I protect access to my accounts and systems and keep them up to date.
8. Seeing or correcting your information
You can ask me what personal information I hold about you, and ask me to correct or delete it. I'll respond within 30 days. I may need to keep some records where the law requires it, and I'll tell you if so.
9. Questions and complaints
For any privacy question or complaint, use the form on the home page, and I'll respond within 30 days. If you're not happy with my response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
10. Changes to this policy
If I change this policy, I'll update it here and change the date at the top.