Last updated

Privacy Policy.

The short version: we collect the minimum needed to answer your enquiry and build your website, we never sell it, and this site runs no analytics and no tracking cookies. The complete version, as required by Australian law, is below.

1. Who we are

HEKAWEB (“we”, “us”) is a sole-trader web design studio based on the Central Coast, New South Wales, Australia. We can be reached at hello@hekaweb.com or on 0457 189 685.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, and what your rights are.

2. What we collect

Information you give us

  • Enquiry form. When you use the form on our contact page, we collect your name, email address, phone number, your business or organisation name, and whatever project details you choose to include.
  • Direct contact. If you call or email us, we collect your contact details and the content of our correspondence.

Information collected automatically

  • Server logs. Our hosting provider records standard technical information when you visit — your IP address, browser type, device, the pages requested and timestamps. This is routine server operation, not tracking.

We do not collect information through analytics tools, advertising pixels, social media pixels, fingerprinting or any other tracking technology. There are no accounts and no newsletter to sign up to.

3. How your information moves

The enquiry form on this site is delivered to our inbox through FormSubmit (formsubmit.co), a third-party form-delivery service that acts purely as a delivery pipe. The details you type are transmitted to FormSubmit, which forwards them to us by email. FormSubmit’s handling is governed by its own privacy policy, and we encourage you to read it if you have concerns.

Apart from that single pipe, the pages of this site make no third-party requests. Our fonts are self-hosted, and there are no embedded trackers of any kind.

4. Cookies and browser storage

This website sets no cookies at all.

The site stores one value in your browser’s session storage (hekaStickyHide) so the mobile call-to-action bar stays dismissed while you browse. It never leaves your device, contains no personal information, and is erased automatically when you close the browser tab or window.

5. What we use your information for

  • Answering your enquiry, usually the same business day.
  • Preparing a fixed written quote for your project.
  • Delivering the services you engage us for, and the free edit window that follows launch.
  • Complying with our legal, tax and record-keeping obligations.

That is the entire list. We do not build marketing lists, profile visitors, or send promotional email unless you have explicitly asked us to keep in touch about a project.

6. Who we disclose it to

We do not sell, rent or trade personal information — full stop. Your information is disclosed only to:

  • FormSubmit, solely to deliver your enquiry form to us (see section 3).
  • Our email and hosting providers, solely to operate this website and our inbox.
  • Government, regulatory or law-enforcement bodies, where disclosure is required or authorised by law — for example, a court order.

Some of these providers are based outside Australia and may store or process information overseas (including in the United States). Where this happens, we take reasonable steps to ensure your information is handled in line with the APPs. By submitting information through this site, you consent to that overseas handling.

7. Storage, security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including access-controlled devices, encrypted email in transit, and a minimal data footprint by design (this site collects far less than most).

If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

We keep enquiry and project correspondence only for as long as it is needed to provide our services and to meet Australian tax and record-keeping obligations, after which it is deleted.

8. Your rights

You may request access to the personal information we hold about you, and ask us to correct it, at any time — email hello@hekaweb.com and it will be handled personally. There is no charge for making a request.

If you believe we have breached the APPs, you can complain to us first using the same contact details. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:

9. Changes to this policy

We may update this policy from time to time. The current version will always live on this page with its “last updated” date. If we ever change how we collect or use personal information in a material way, we will say so plainly here.

This policy applies to hekaweb.com only. It does not cover the websites we build for clients — each of those has its own operator and its own privacy obligations.