Privacy Policy

The short version

• We collect what you type into the enquiry form, what you give us when you book a call, and whatever you send us by email or chat.
• We use it to reply to you, to quote, and to do the work.
• We do not sell personal information, and we do not share it for anyone else's advertising.
• A small number of service providers process it on our behalf, and some of them hold it outside Australia.
• You can ask what we hold, ask us to correct it, and ask us to delete it. An email is enough.

The rest of this page is the detail behind those five points.

Who we are

Savio Digital, Melbourne, Victoria, Australia.

Everything here is run by one person. Where this policy says we, it means one person. An email to josh@saviodigital.com.au reaches Josh directly rather than a support queue, and privacy requests are not passed to anybody else.

What we collect

When you send an enquiry

The form on our contact page asks for your name, your business name, your email address, the service you are interested in and a description of what you are trying to achieve. Those fields are required, because without them we cannot give you a useful answer.

It also has two optional fields: your phone number and your preferred timeline. Leaving them blank does not stop the form working.

When you book a call

Booking a strategy call collects your name and email address, along with anything you choose to type into the booking notes. The calendar entry that results holds the same information.

When you email us

We have whatever is in the email, including your address, your signature and any attachments. Email is not a secure channel. Please do not send us identity documents, card numbers or passwords, and we will never ask you for them by email.

When you use the chat window

If a chat window is running on this site, we receive whatever you type into it, along with any name, email address or phone number you give it. It goes into our CRM so we can reply and so the conversation is still there tomorrow. As a general rule, do not put anything confidential into a chat box on any website, including this one.

When you simply visit

Our host records ordinary web server information: your IP address, your browser and device type, which pages you requested, when you requested them and which page referred you. This happens on essentially every website. We use it to keep the site running and to understand roughly how it is being used, not to build a profile of you.

This site loads its typefaces from Google Fonts, which means Google receives your IP address when a page loads, because your browser has to request the font files from Google's servers. We do not control what Google does with that information.

Information about other people

This section matters if you are a client, or a customer of one.

If you become a client, the CRM we set up holds personal information about your customers: their names, phone numbers, email addresses, the messages they send you, the quotes you send them and notes about their jobs.

That information is yours, not ours. We hold it so that the system works. We do not use it for our own purposes, we do not market to your customers, and we do not sell it or pass it to anyone else. You decide what goes into the system, and you can export it or have it deleted at any time.

If you are the customer of a business that uses Savio Digital and you want your details removed, contact that business directly. It is their record and their decision, and they can action it faster than we can. If you cannot reach them, email us and we will point you to the right place.

How we use it

• To answer your enquiry and arrange a call.
• To prepare quotes, proposals and agreements.
• To do the work you have engaged us for, and to support it afterwards.
• To send invoices and take payment.
• To keep the records that Australian tax and business law requires us to keep.
• To send occasional email about our services, if you have enquired, are a client, or asked us to. You can stop this at any time.

We do not use your information to make automated decisions about you, and we do not profile you for advertising.

Who else touches it

We do not sell personal information, and we do not share it for anyone else's advertising.

We do use a small number of service providers to run the business, and your information passes through some of them:

• Our website host, which serves this site and keeps the server logs described above.
• Our form service, which receives enquiry form submissions and passes them to our inbox.
• Our booking tool, which holds the name and email address you give it when you book a call.
• Our CRM platform, which holds enquiries, contact records, quotes and chat messages, and which sends email and SMS on our behalf.
• Our email provider, which holds our inbox and everything in it.

Each is bound by its own terms and privacy obligations, and each receives only what it needs to do its job.

We will also disclose information where the law requires it, for example a court order, a regulator's lawful request, or a genuine and serious threat to someone's safety. If that ever happens and we are permitted to tell you, we will.

Where it is held

Some of those providers store data outside Australia, including in the United States and in Europe.

By sending us an enquiry, booking a call or using the chat window, you accept that your information may be stored and processed overseas. We choose established providers with published security practices, but we cannot control another country's laws, and once information is held overseas, Australian privacy law gives you less practical protection than it does here.

If that matters to you, email us instead of using the form and say so. We can usually work around it.

Cookies and tracking

This site does not set advertising cookies, and it does not run third party advertising or tracking pixels.

Some cookies or similar local storage may be set by the services listed above, for example to keep a chat conversation open as you move between pages, or to hold a booking in progress. You can block or delete cookies in your browser settings. The site works normally without them, apart from those specific features.

How long we keep it

• Enquiries that do not become work: up to two years, then deleted. People do come back after a year, and the earlier context is useful when they do.
• Client records: for the life of the engagement, then seven years, because Australian tax and business records law requires it.
• Server logs: for as long as our host retains them, which is a rolling window measured in months rather than years.
• Chat transcripts: kept with the contact record they belong to, and deleted with it.

If you ask us to delete something sooner and we are not legally required to keep it, we will.

Keeping it secure

Accounts holding personal information are protected with unique passwords and two factor authentication wherever the provider supports it. Access is limited to the one person who runs the business, plus the providers listed above. We do not keep contact lists in loose spreadsheets or email them around.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a data breach occurs that is likely to cause you serious harm, we will tell you and notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

What you can ask for

You can ask us to:

• tell you what personal information we hold about you
• tell you where we got it
• correct anything that is wrong or out of date
• delete it
• stop sending you email

Email josh@saviodigital.com.au. There is no charge for asking, and you will get a reply within a reasonable time, normally well inside 30 days.

We may need to confirm who you are before releasing personal information. In practice that usually means replying from the address we already hold for you.

There are narrow cases where we cannot delete something, such as a record we are legally required to keep for tax purposes, or information tied up in a dispute. If that applies, we will tell you which record and why, rather than simply refusing.

Marketing email

If we email you about our services, it will be because you enquired, you are a client, or you asked us to.

Every marketing email carries an unsubscribe link, and unsubscribing takes effect immediately. The Spam Act 2003 requires that, and we would do it anyway.

Replying to your enquiry is not marketing, and neither is an email about work in progress or an invoice. Those do not carry an unsubscribe link, because they are part of doing the job.

Complaints

If you think we have mishandled your personal information, email josh@saviodigital.com.au and set out what happened. You will get a real answer rather than a form response, and we will tell you what we are doing about it.

If you are not satisfied with how we handle it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. You do not need our permission, and you do not have to come to us first.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. That date is the only version marker on the page, so it is worth checking.

If a change materially affects people who have already given us their information, we will email those we can reach rather than quietly updating the page.

Contact

Savio Digital

Melbourne, Victoria, Australia

josh@saviodigital.com.au