About this policy
This policy explains how I, Sarah Thurn, collect, use, store and share personal information when you visit sarahthurn.com, make an enquiry or work with me. I handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
If you have a question about this policy, email me at [email protected].
What I collect
I only collect what I need to respond to you and deliver my services. That may include:
- Contact details such as your name, email address, phone number, company and role.
- Enquiry details you choose to share, such as what you would like help with.
- Engagement information I handle on your behalf as a client, such as your diary, correspondence, travel details and the contact details of people you work with.
- Billing information such as your business name, ABN and invoicing contact.
- Technical information recorded by my website host when you visit, such as your IP address, browser type and the pages you request. This is used for security and to keep the site running.
- Website analytics about how the site is used. See Website analytics below.
I don't ask for sensitive information, such as health information. If you share it with me in the course of an engagement, I'll use it only for the purpose you gave it to me.
How I collect it
I collect personal information directly from you: when you email or call me, send an enquiry, book a call or work with me. The enquiry form on this site opens your own email app with your message filled in. Nothing you type into the form is stored on this website.
Sometimes I receive information from someone else, for example when a colleague refers you to me, or when I manage correspondence on a client's behalf.
Where it's practical, you can enquire without giving your full name.
How I use it
I use personal information to:
- reply to your enquiry and arrange an introductory call
- prepare a proposal and deliver the services we agree
- manage invoices, payments and records
- keep this website secure and working properly
- meet my legal and tax obligations.
I won't send you marketing emails unless you have asked for them, and you can opt out at any time.
Website analytics
This site uses HLD Website Analytics to understand how visitors use it. It does not use cookies, does not record keystrokes or form contents, and honours your browser's Do Not Track setting. Data is processed by HLD Group in Australia.
Basic analytics, for every visitor
Pages visited, how you arrived (for example from a search or a link), approximate location (country or region), device and browser type, page loading performance, technical errors, and whether you started an enquiry or clicked my email address. Until you choose Accept all, the analytics identifier stored in your browser is reset at the start of each visit, so separate visits aren't linked.
Full analytics, with your consent
If you choose Accept all in the cookie notice, the site also records on-page interactions: clicks, pointer heatmaps, scroll depth, when a form is started or abandoned (never what you type), links followed to other sites, which sections and questions you view, and the menu links you use. Your visits are recognised as returning visits.
You can change your choice at any time from Cookie settings in the footer.
Storage outside Australia
Some of the service providers I use, including my website host and cloud software, may store or process information outside Australia, for example in the United States. I choose established providers and take reasonable steps to make sure they protect personal information to a standard consistent with the Australian Privacy Principles.
Security and retention
I store information in secure, password-protected systems with two-step sign-in where available, and I limit access to what each task needs. When I work inside a client's own systems, their security settings apply.
I keep personal information only as long as I need it for the purpose it was collected, or as the law requires. Financial records are kept for five years to meet Australian tax rules. At the end of an engagement, I return or securely delete client information and hand back any access I was given.
If a data breach is likely to cause you serious harm, I'll tell you promptly and follow the Notifiable Data Breaches scheme where it applies.
Access and correction
You can ask to see the personal information I hold about you, or ask me to correct it. Email [email protected] and I'll respond within 30 days. If I can't give you access, I'll explain why.
Questions and complaints
If you're concerned about how I've handled your personal information, please email [email protected]. I'll acknowledge your message within two working days and aim to resolve it within 30 days.
If you're not satisfied with my response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
I may update this policy from time to time. The date at the top of the page shows when it last changed.