Privacy Policy
Last updated: 27 July 2026
This policy explains what information Haze Websites collects, why I collect it, who I share it with, and how you can get it changed or deleted. It is written to the Australian Privacy Principles in the Privacy Act 1988 (Cth).
I collect your name, contact details and business details so I can design your website and talk to you about it. I do not sell your information to anybody, ever. I do not run tracking cookies of my own on this site. I keep what I need to do the job and nothing else, and if you ask me to delete it, I will.
What's on this page
- Who I am
- Why this policy exists
- What I collect from you
- Business information I collect publicly
- What I do with it
- Cookies and analytics
- Who I share it with
- Information sent overseas
- Marketing, calls, emails and texts
- How long I keep it
- How I keep it safe
- If there is a data breach
- Seeing, fixing or deleting your information
- Your customers' information
- Children
- Making a complaint
- Changes to this policy
- Contact
1.Who I am
Haze Websites is operated by [LEGAL NAME TO CONFIRM: Billy Howard trading as Haze Websites, or the Pty Ltd name], ABN [ABN TO CONFIRM], of [BUSINESS ADDRESS TO CONFIRM], Queensland, Australia. I build websites for Australian tradies.
I am a one-person business, so the person handling your information is me, Billy Howard. There is no call centre and no third party doing it for me.
2.Why this policy exists
Under the Privacy Act 1988 (Cth), a lot of small businesses with turnover under $3 million are not strictly required to comply with the Australian Privacy Principles. I am not relying on that. I handle your information as though the Australian Privacy Principles apply to me, because you are trusting me with your details and that is how it should be done.
"Personal information" in this policy means information that identifies you, or from which you could reasonably be identified: your name, phone number, email address, and so on.
3.What I collect from you
When you ask for a free mockup or contact me
- Required: your name, email address, business name and trade.
- Optional, only if you fill them in: your mobile number, your preferred colours, your preferred tone of voice, your logo file, and any notes you want to add.
- If you ring or text me, I collect your phone number and whatever you tell me during that conversation.
The form has one hidden field used to catch spam bots. Real people never see it or fill it in, and nothing about you is recorded in it.
When I build your website
- Your trading name, ABN, licence numbers, insurance details, service area, services, prices and hours, as you supply them.
- Photos, logos, testimonials and text you send me.
- Login details for accounts we set up together, such as your domain registrar or Google Business Profile, where you have asked me to help with them.
- Invoice and payment records, which I have to keep for tax purposes.
What I do not collect
- I do not collect or store your credit card or bank account details. Payments go through [PAYMENT METHOD TO CONFIRM] and any card details go to them, not to me.
- I do not collect sensitive information such as health, racial or ethnic origin, religion or political views, and I do not want it.
4.Business information I collect publicly
This section matters if you have never contacted me and are wondering how I got your number.
To find tradies who might want a website, I search publicly available business listings, mainly Google Business Profile listings through the Google Places API, and the public ABN Lookup register. From those public sources I may collect:
- Your business name, trade and suburb
- Your business phone number and any public website address
- Your public review count and rating
- Your public ABN and trading status
- The business owner's name where it is published publicly
This is all information you or Google have already published. I use it to work out whether your business might benefit from a website, and to prepare an example mockup before I contact you.
If I contact you and you are not interested, tell me and that is the end of it. You can also ask me to delete your business from my records at any time and I will do it, no questions asked. Email billy@hazewebsites.com.au or text 0447 132 774.
5.What I do with it
| Information | What it is used for |
|---|---|
| Name, email, phone | Contacting you about your mockup, your build and your site |
| Business name, trade, service area | Designing and writing your website |
| Colours, tone, logo, notes | Making the mockup look like your business, not a template |
| Photos and content you send | Putting them on your website |
| Public listing data | Working out who to contact, and building an example mockup |
| Invoices and payment records | Tax and record keeping obligations |
I do not use your information for anything you would not expect from a bloke building you a website. If I ever wanted to use it for something else, I would ask you first.
6.Cookies and analytics
This website does not set tracking cookies of its own, does not run third-party analytics, and does not run advertising pixels on the page. [CONFIRM: this stays true only while no Meta Pixel, Google Analytics or Google Ads tag is installed. If one is added, this section must be updated and a cookie notice added.]
Cloudflare, which hosts the site, keeps standard server logs including IP addresses, for security and to stop attacks. That is normal hosting practice and I do not use those logs to identify or track visitors.
If I run ads on Facebook, Instagram or Google in the future, those platforms may use cookies or similar technology to measure whether their ads work. You can control that through your browser settings and through your own ad settings on each platform.
7.Who I share it with
I do not sell your information to anyone, and I do not trade or rent contact lists.
I share information only with the services I need to run the business:
| Service | What it handles | Where |
|---|---|---|
| Cloudflare | Website hosting and the enquiry form | United States |
| Resend | Delivering your enquiry to my inbox | United States |
| Public business listing data, and my email | United States and Australia | |
| Domain registrar | Registering your domain in your name | [REGISTRAR TO CONFIRM] |
| Accountant / tax | Invoices and payment records | Australia |
I may also disclose information if the law requires it, for example a court order or a request from a regulator.
If I ever sell the business, customer records may transfer to the new owner. I would tell you before that happened.
8.Information sent overseas
Some of the services above store data outside Australia, mainly in the United States. That is unavoidable for anyone running a modern website, and I have listed exactly who they are in section 7 so you know rather than guess.
I take reasonable steps to use reputable providers with their own privacy and security commitments. Once your information is with an overseas provider, it is also subject to the laws of that country, which may not be the same as Australian privacy law.
9.Marketing, calls, emails and texts
- I may ring businesses to offer a website. That is normal business-to-business selling.
- Any marketing email or text I send will identify me clearly and include a way to opt out, as required by the Spam Act 2003 (Cth). Opting out is honoured promptly.
- I check numbers against the Do Not Call Register where required before making telemarketing calls.
- Tell me to stop and I stop. Once. You will not get "one last follow-up".
- I do not add customers to a mailing list without them asking for it.
10.How long I keep it
- Enquiries that go nowhere: deleted within 12 months, or straight away if you ask.
- Customer records: kept while I am working with you, and for 5 years afterwards, so I can support your site and meet Australian Taxation Office record keeping requirements.
- Invoices and financial records: kept for at least 5 years because the tax law requires it. I cannot delete these on request.
- Prospect lists from public sources: deleted on request, and cleared out periodically anyway.
11.How I keep it safe
- Devices are password protected and encrypted.
- Accounts use strong, unique passwords and two-factor authentication where the service offers it.
- API keys and passwords are stored as secrets, never published in website code.
- Client logins are handed to you and are not kept longer than needed to finish the job.
- Nobody else has access to my systems.
No system on earth is completely secure, and I am not going to pretend otherwise. What I can promise is that I take reasonable steps and I do not leave your details lying about.
12.If there is a data breach
If information I hold about you is lost or accessed by someone who should not have it, and it is likely to cause you serious harm, I will tell you as soon as I reasonably can, tell you what happened and what to do about it, and report it to the Office of the Australian Information Commissioner where the Notifiable Data Breaches scheme applies.
13.Seeing, fixing or deleting your information
You can ask me at any time to:
- Tell you what information I hold about you
- Send you a copy of it
- Correct anything that is wrong or out of date
- Delete it, other than records I am legally required to keep
- Stop contacting you
Email billy@hazewebsites.com.au or text 0447 132 774. There is no charge, I may need to check who you are first, and I will respond within 30 days, usually a lot sooner.
If I refuse a request, I will tell you why in writing and how to complain about it.
14.Your customers' information
If you become a customer, your website will have an enquiry form or contact buttons that collect information from your customers.
- Enquiries from your website go to you, not to me. I do not keep a copy or use them.
- Once your site is handed over, you are the one responsible for the personal information your own customers give you.
- If your business needs its own privacy policy, tell me and I will build one into your site. Whether you legally need one depends on your business, and that is a question for your accountant or solicitor.
15.Children
This is a service for business owners. It is not aimed at children and I do not knowingly collect information from anyone under 18. If you think I have, tell me and I will delete it.
16.Making a complaint
If you are unhappy with how I have handled your information, tell me first. Email billy@hazewebsites.com.au with the details and I will acknowledge it within 5 business days and give you an answer within 30 days.
If you are not happy with my answer, you can take it to the Office of the Australian Information Commissioner:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
17.Changes to this policy
I will update this policy as the business changes, and the "last updated" date at the top will always show when. If I make a change that materially affects how I handle your information, I will tell current customers directly rather than quietly editing the page.
18.Contact
Questions about your privacy, or want your details removed?
- Email: billy@hazewebsites.com.au
- Phone or text: 0447 132 774
- Post: [POSTAL ADDRESS TO CONFIRM]
Still to confirm before this page is final. Everything highlighted in yellow needs your real details: registered legal name and ABN, business and postal address, payment method, domain registrar, and whether any tracking pixel is installed (section 6 says none is, so it must be updated the day you add a Meta Pixel or Google Analytics).
Not legal advice. This policy was written to line up with the Australian Privacy Principles and the Privacy Act 1988 (Cth), but it is not advice from a lawyer. Privacy law in Australia is being reformed in stages, including the small business exemption in section 2, so have it reviewed once you are trading properly.
