Legal
Privacy
notice
Written in plain English on purpose. It is a notice, not legal advice, and it does not replace the written agreement that governs a paid engagement.
1. The short version
- This website collects nothing from you directly. There is no form that posts to us, no account to create and no payment to make.
- We set no cookies of our own and we run no analytics of any kind.
- Fonts are served from this site, not from a third party, so loading a page does not tell anyone else that you visited.
- Our host can see your IP address in its server logs, as any web host can.
- If you email, call, or use the brief builder to compose an email, we hold what you send us and use it to answer you.
2. Our status under the Privacy Act
We are a two-person firm. On our current turnover we are very likely a “small business operator” under section 6D of the Privacy Act 1988 (Cth), which means the Australian Privacy Principles do not automatically apply to us.
We have decided to handle personal information in accordance with the Australian Privacy Principles anyway, and to treat this notice as binding on us. We prefer being held to it. If our circumstances change so that the Act applies to us by force of law, that changes nothing about how we behave.
3. What this website does and does not collect
Directly: nothing. No contact form submits to a server. The brief builder on the contact page runs entirely in your browser and composes a message in your own mail application. Until you press send in your mail app, nothing has left your device.
Local storage. One item is stored in your browser's session storage, named ul-intro, so the opening animation plays once rather than on every page. It is not an identifier, it is not personal information, it never leaves your browser, and it disappears when you close the tab.
No analytics. No Google Analytics, no tracking pixel, no advertising tag, no session recording, no heatmap, no fingerprinting. If that changes, this page and its date change with it.
4. What our host sees
The site is hosted on GitHub Pages, a service of GitHub, Inc., a Microsoft company. To serve a page, GitHub processes technical information including your IP address, the page requested, the time, and your browser's user-agent string. This happens on GitHub's infrastructure under GitHub's own privacy practices, and it happens on servers outside Australia.
We do not receive those logs, we cannot query them, and we do not build any profile from them.
5. Third-party services on this site
There are none. No calendar embed, no maps, no chat widget, no form service, no font service, no content delivery network. Every file a page loads comes from this domain, and the content security policy declared in each page forbids anything else.
That includes the brief builder on the contact page: it runs entirely in your browser and composes a message in your own mail application. Nothing you type there is transmitted anywhere until you press send in your own mail client, and we never see a draft you abandon. The same is true of the figures you enter into the calculator on the home page: they never leave your device.
6. Information you send us
When you contact us we collect what you choose to give us. Typically: your name, your email address, your phone number, your business, and a description of the process you want fixed. Sometimes that description contains figures about your business.
We use it to answer you, to prepare and run the one-hour meeting, and to calculate the return in the forty-eight hours after it. That is all.
7. Information we handle during an engagement
Building an automation sometimes means touching data that belongs to your business, and that data sometimes contains personal information about your staff or your customers. When that happens:
- You remain the entity responsible for that information. We handle it on your instructions, for the purpose of the build, and for nothing else.
- We take the minimum needed to build and test, and we tell you in writing what that is before we take it.
- Before any of your data reaches a third-party service, including any AI model provider, we tell you which service, what it will receive, and which country it sits in. You decide. If you say no, we design around it, even where that means a worse-performing build.
- We delete our working copies at handover, and confirm that in writing.
- We do not use your data to train any model, and we do not reuse it for another client.
8. Who we disclose information to
We do not sell personal information and we do not share it for anyone else's marketing. We disclose it only:
- to service providers strictly necessary to do the work, and only as described in section 7;
- to our professional advisers, where we need advice;
- where the law requires it.
9. Information that goes overseas
Australian Privacy Principle 8 deals with disclosing personal information outside Australia. One thing is true of this website by default: our host (GitHub, in the United States) processes request logs. Nothing else about this site sends anything overseas, because nothing else about this site sends anything anywhere.
For paid work, any overseas processing is identified by name and by country in writing before it happens, and it is your decision. Common possibilities include Microsoft Azure regions, Google Cloud, Anthropic and OpenAI, all of which may process data outside Australia. We do not treat that as a technicality: for some clients it is the deciding constraint on the whole design.
10. How we protect it
Consistent with Australian Privacy Principle 11: multi-factor authentication on every account we use, encrypted devices, a password manager rather than reused passwords, least-privilege access to client systems, and deletion of working copies at handover. We are two people, which limits how many hands touch anything.
No system is perfectly secure. If something goes wrong we will tell you, and we will tell you what we know rather than what is comfortable.
11. How long we keep it
Enquiry correspondence: while the conversation is live and for a reasonable period afterwards. Engagement records, including the brief and the costing: seven years, which reflects Australian record-keeping practice for business records. Your operational data: deleted at handover.
You can ask us to delete your enquiry at any time and we will, unless we are required to keep it.
12. Getting at your information, and correcting it
You can ask us what we hold about you and ask us to correct it, in line with Australian Privacy Principles 12 and 13. Email Clarence.allouard@uncommunlogic.com. We will respond within 30 days. There is no charge. If we refuse, we will tell you why in writing.
13. Complaints
Complain to us first, at the email address above, and we will respond within 30 days. If you are not satisfied with the outcome, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
14. If something goes wrong
The Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth) applies to entities the Act covers. Whether or not it binds us at the time, we commit to notifying you, and the Commissioner where appropriate, if a breach involving your information is likely to cause you serious harm, and to doing so promptly.
15. Marketing
We do not run a mailing list and we do not send bulk email. If we ever do, it will be opt-in, it will identify us, and it will carry a working unsubscribe, as the Spam Act 2003 (Cth) requires. Contacting us about a project is not consent to marketing.
16. Visitors from the European Union, the EEA and the United Kingdom
We are based in Australia and we sell in Australia, so European data protection law will not usually apply to us. If you are visiting from Europe, note that this site sets no tracking or analytics cookies, so no consent is required for anything it does on your device. Where you contact us, our basis for handling what you send is our legitimate interest in answering you, or the steps leading to a contract. You may ask us for access, correction, deletion or a copy of what we hold, and the address in section 12 is the one to use.
17. Children
This is a business-to-business service. It is not directed at children and we do not knowingly collect information about them.
18. Changes to this notice
The version and date at the top of this page tell you which version you are reading. Material changes will be reflected there.
Questions about this page
Write to Clarence and you will get an answer from a person, not a template.
Related: Cookies and tracking, Terms of use