Privacy Policy

Buildgrove Digital

Effective date: 17 October 2026
Last updated: 21 October 2026

1. Introduction

Buildgrove Digital is a one-person business. This Privacy Policy explains how Buildgrove Digital (“Buildgrove”, “I”, “me” or “my”) collects, uses, stores, protects and discloses personal information when you interact with my business.

It applies to visitors to my website, prospective customers, existing clients, suppliers, contractors and individuals who communicate with me or use my services.

My approach to personal information is guided by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) where applicable, and other relevant Australian laws.

2. About Buildgrove Digital

Buildgrove Digital is an Australian digital services business providing website development, application development, digital solutions and business establishment support.

My services may include:

Website design, development and maintenance.
Business websites and e-commerce solutions.
Custom software and application development.
Domain name and website hosting assistance.
Digital branding and online business setup.
Website improvements, integrations and automation.
Technical support, troubleshooting and ongoing maintenance.
Digital consulting and project planning.

Business details

Business name: Buildgrove Digital
Legal entity: Sole trader (owner details provided on quotes and invoices)
ABN: Provided on quotes and invoices
Location: Victoria, Australia
Website: https://buildgrove.com.au/
Privacy enquiries: [email protected]

Buildgrove Digital is responsible for managing personal information collected through its own business operations, subject to the arrangements described in this policy.

3. What Personal Information I Collect

The information I collect depends on how you interact with Buildgrove Digital and which services you request.

3.1 Personal and business contact details

I may collect:

Your full name.
Business or trading name.
Email address.
Telephone number.
Business address or general location.
Preferred method of communication.
Job title or position within a business.
Relevant business registration information.

3.2 Project enquiries and requirements

When you submit a project enquiry, request a quotation or complete my project questionnaire, I may collect:

The type of business you operate or intend to establish.
The services you require.
Your business goals and project objectives.
Website or application features you would like developed.
Your preferred design and branding direction.
Your expected budget or budget range.
Proposed project timeframes.
Existing websites, applications or online business accounts relevant to the project.
Content requirements and technical preferences.
Business processes you would like improved or automated.
Written descriptions of your requirements.
Answers to my questionnaire, including conditional questions and additional comments.
Links, documents or references you choose to send me by email.

You do not need to provide information that is unrelated to your enquiry.

3.3 Client and project information

When you engage Buildgrove Digital, I may also collect information required to plan, develop, deliver and support your project.

This may include:

Business branding and marketing materials.
Project specifications and technical documentation.
Content supplied for websites or applications.
Domain registration and hosting information.
Contact information for authorised project representatives.
Relevant business systems, integrations and software requirements.
Project communications, approvals and change requests.
Support enquiries and technical issue reports.

Where access to existing websites, hosting accounts or third-party platforms is required, I will seek to use appropriate authorised access methods.

Please do not submit passwords, access tokens, payment card details or other confidential credentials through general enquiry forms or ordinary email. Where such information is necessary, I will arrange a more appropriate method for providing access.

3.4 Billing and financial information

Where applicable, I may collect:

Billing names and addresses.
Invoice contact details.
Payment and transaction references.
Details of purchased services.
Payment status and transaction history.
Information required for accounting, invoicing and taxation.

Where an external payment provider is used, that provider may collect and process payment details directly.

I do not require full payment card details to be submitted through my general project enquiry forms.

3.5 Website usage and technical information

When you access my website, certain technical information may be collected automatically by the website, hosting environment or approved service providers.

This may include:

Internet Protocol (IP) address.
Browser type and version.
Device type and operating system.
Pages viewed and interactions with the website.
Approximate geographical location derived from technical information.
Date, time and duration of website visits.
Referring websites or search engines.
Technical errors and performance information.
Cookie identifiers and similar online information, where used.

This information may be personal information where it identifies you or can reasonably be linked to you.

3.6 Communication records

I may keep records of communications relating to enquiries, projects or services, including emails, enquiry form submissions, relevant telephone call notes, support messages and project discussions.

These records help me understand your requirements, maintain continuity and resolve any concerns.

4. How I Collect Information

I may collect information when you:

Visit or interact with my website.
Complete a contact form or project questionnaire.
Request a quote, consultation or service.
Contact me by email, telephone or another communication channel.
Provide documents, images or files for a project.
Engage me to develop or maintain a digital product.
Make a payment or enter into a service agreement.
Communicate with me through third-party business platforms.

I generally collect personal information directly from you.

In some circumstances, I may receive information from an authorised representative, a business referral, a relevant publicly available business source or a third-party platform involved in delivering a requested service.

When collecting information indirectly, I will handle it consistently with this policy and applicable law.

5. Why I Collect and Use Your Information

I collect and use personal information where reasonably necessary for my business operations and the services I provide.

My purposes include:

Responding to enquiries

To review your requirements, respond to questions, arrange consultations and communicate about potential projects.

Preparing quotations and proposals

To assess the scope of a project, identify suitable services, estimate development requirements and prepare accurate quotations.

Delivering services

To design, develop, test, implement, maintain and support websites, applications and other digital solutions.

Managing customer relationships

To maintain project records, communicate about progress, process requested changes and provide ongoing support.

Processing business transactions

To issue invoices, manage payments, maintain accounting records and meet financial obligations.

Improving my services

To understand customer requirements, identify common enquiries and improve my website, questionnaires, systems and services.

Operating and securing my website

To maintain functionality, identify technical problems, detect suspicious activity and protect my systems.

Meeting legal obligations

To comply with applicable laws, respond to lawful requests, maintain required records and protect my legal rights.

Sending relevant updates

Where permitted, to provide information about my services, business updates or relevant offers.

I will not intentionally use your personal information for unrelated purposes without an appropriate legal basis or any consent required by law.

6. My Project Questionnaire and Enquiry System

Buildgrove Digital may provide an interactive questionnaire designed to help prospective clients explain their requirements before an initial consultation.

The current questionnaire includes multiple-choice questions, yes-or-no responses, conditional follow-up questions and text fields. File uploads are not currently available in the website forms. Where files are needed for a project, an appropriate transfer method will be arranged separately.

Your answers may be combined into a project summary to help me understand:

What you want to create.
The type of business or project involved.
Which features and services you require.
Your design and functionality preferences.
Your budget and preferred timeframe.
Any additional requirements or concerns.

The information you submit is used to assess your enquiry, plan appropriate next steps and prepare a relevant response.

Submitting a questionnaire does not automatically establish a contractual relationship, guarantee project acceptance or require you to purchase services.

Please do not include sensitive personal information, private credentials or unrelated information about other individuals.

If you submit personal information about someone else, you should ensure you have appropriate authority to share it.

Completing a project enquiry does not automatically subscribe you to marketing communications.

Browser-saved project drafts

The Project Builder saves unfinished answers, notes and the contact details you have typed in local storage in your browser when browser settings allow it. These drafts are not automatically synchronised between devices or submitted to Buildgrove. Anyone using the same browser profile may be able to access the draft. You can clear it using the Project Builder’s “Start again” action or your browser’s site-data controls. After a successful submission, the website attempts to clear the saved draft.

You can review, copy or download a project summary before submitting it. Downloaded files remain under your control. The form asks you to confirm how your information will be used before submission. Providing an enquiry is separate from marketing consent.

Project estimate

Where the estimate tool is available, it sends the options you select (not your contact details) to my website server to calculate an indicative price. If you continue to the Project Builder, your selections are held temporarily in session storage in that browser tab and added to your draft, and they are included with your enquiry only if you submit it.

Website Health Check

The Website Health Check sends the public page address you enter and your selected mobile or desktop test setting to Google PageSpeed Insights. Cloudflare Turnstile is used to help prevent automated abuse. Do not enter private links, credentials or personal information in a page address. The tool does not require your email address to display results.

The report is displayed in your browser and is not automatically sent as a sales enquiry. If you choose “Help me improve this website”, a text summary is temporarily stored in session storage in that browser tab so you can review it in the Project Builder. Only clicking “Add this summary to my enquiry” adds it to the browser-saved project draft. It is sent with your contact details only when you subsequently submit the enquiry. Existing draft answers are preserved. The temporary handoff summary is cleared after it is added, where browser settings permit.

Google, Cloudflare and the hosting environment may process technical request information or retain operational logs under their arrangements. The automated report concerns one page and does not constitute a security certification, a complete accessibility audit or a prediction of search rankings.

7. Cookies, Analytics and Website Tracking

My website may use cookies and similar technologies to support website functionality, security, performance and analytics.

Cookies are small files that may be stored on your device when visiting a website.

Depending on the tools installed, cookies and similar technologies may be used for:

Essential website functionality

Supporting basic features, navigation, forms, session management and security.

Website performance

Identifying technical issues, measuring loading performance and improving usability.

Analytics

Understanding how visitors find and use my website, which pages are useful and where improvements may be needed.

Preferences

Remembering selections or settings where these features are available.

Advertising or remarketing

If I introduce advertising or remarketing technologies, I will update my disclosures and provide any choices required by applicable law.

You can generally manage or restrict cookies through your browser settings.

Disabling certain cookies may affect website functionality.

Where optional cookies or tracking technologies require consent under applicable law, I will obtain that consent before using them.

The website uses its own cookie-free visit statistics, stored in a Cloudflare D1 database in my Cloudflare account. They do not use cookies, advertising identifiers or third-party analytics services, and they are visible only to Buildgrove.

For each page viewed I record:

The page address and title, the date and time, and whether the page was reached by a link, reload or the back button.
How you arrived: the referring website (site name and page path, without any query details), campaign tags in the link (such as utm_source), and whether the link came from a Google, Microsoft or Meta advertisement or post.
Approximate location derived by Cloudflare from your connection: country, state or region, city, postcode area and time zone, plus the name and number (ASN) of the network you are using (usually your internet provider, sometimes an organisation such as a company or university).
Your device type and model (where your browser reports it), browser and operating system with version, screen and window size, screen pixel density, whether the device has a touch screen, preferred language and general connection speed.
How the page was used: time spent actively viewing it, how far down it was scrolled, and page loading and responsiveness measurements.
Actions on the page: clicks on phone, email, outbound and Project Builder links, file downloads, and whether an enquiry, website health check or estimate was successfully completed. The content of forms is not included.

Your IP address is not stored. It is combined with your browser details and a secret value to create a coded identifier that changes every day. This lets me group the pages viewed in one visit and count unique visitors, without recognising you on later days. To tell new visits from returning ones, your browser stores the date of your last visit (and nothing else) in local storage. You can clear it in your browser’s site-data settings. Page views from browsers that identify as automated tools are discarded, and visits from hosting or data-centre networks are flagged so they can be left out of reports. These statistics are automatically deleted after about 13 months.

This website does not use advertising pixels or remarketing tags. Browser local storage and session storage support the draft, estimate and report features described above. Hosting and security services may still process technical request information. I will review this section before introducing additional analytics or tracking services.

8. Third-Party Services and Providers

To operate efficiently and deliver digital services, Buildgrove Digital may use external providers.

These may include:

Website and cloud hosting providers.
Domain registrars and DNS providers.
Email and business communication platforms.
Customer enquiry and project management systems.
Website analytics and performance monitoring services.
Payment processing and invoicing platforms.
Software development platforms and technical infrastructure providers.
File storage and document management services.
Approved contractors or specialist service providers.
Professional advisers, including accountants and legal advisers.
Artificial intelligence and automation service providers, where relevant to the services being delivered.

These providers may process information on my behalf or operate as independent service providers, depending on the circumstances.

I aim to select reputable service providers and limit the information shared to what is reasonably necessary for the relevant purpose.

Some third-party services operate under their own privacy policies and terms.

Where appropriate, I encourage clients to review the policies of services used in connection with their projects.

I do not sell customer personal information to data brokers or third-party marketing lists.

Providers in the current website implementation

Google PageSpeed Insights: receives the public page address and device-test setting for an enabled Website Health Check.
Cloudflare Turnstile: verifies anti-abuse checks on the enquiry forms and the Website Health Check, and receives your IP address and browser signals for that check.
Resend: delivers submitted contact information and enquiry details to my inbox.
Cloudflare (hosting, Pages Functions and D1 database): hosts the website, processes requests and operational logs, and stores the visit statistics described in this policy.

9. Artificial Intelligence and Automated Tools

Buildgrove Digital may use software automation and artificial intelligence-assisted tools to support aspects of its services.

Depending on the project, these tools may assist with:

Organising and summarising project requirements.
Drafting specifications or development documentation.
Software development and troubleshooting.
Design planning and content preparation.
Identifying potential technical solutions.
Improving administrative efficiency.

Where personal or confidential information is involved, I aim to minimise unnecessary disclosure and use appropriate safeguards.

Project information may be processed by an external technology provider where that processing is necessary and appropriate for the services being delivered. Relevant provider terms, security practices and data handling arrangements will apply.

I will seek appropriate authorisation before disclosing confidential client material to an external AI service where authorisation is required.

Clients should avoid submitting unnecessary sensitive information through ordinary project forms.

Automated questionnaire responses, categorisation or preliminary project assessments are intended to assist with organising enquiries. They do not, by themselves, constitute a final professional assessment, quotation or contractual commitment.

Important project decisions and quotations remain subject to human review.

I will provide any additional disclosure required by law if I introduce automated decision-making processes that significantly affect individuals’ rights or interests.

I may disclose personal information in the following circumstances.

Service delivery

To service providers or authorised contractors where necessary to deliver requested work.

At your direction

To another provider or nominated representative when you request or authorise me to do so.

Business operations

To professional advisers, financial service providers or other appropriate business support services.

Legal requirements

Where disclosure is required or authorised by applicable law, a lawful regulatory request, court order or other legal process.

Business restructuring

Where necessary for a legitimate business sale, restructure or transfer, subject to appropriate confidentiality, privacy and legal safeguards.

Protection of rights and security

Where permitted by law and reasonably necessary to investigate fraud, security incidents, misuse of my systems or potential threats to individuals or business operations.

I do not disclose personal information for unrelated third-party marketing without an appropriate lawful basis.

11. Overseas Storage and Disclosure

Some website hosting, cloud infrastructure, software development and business service providers operate internationally.

Depending on the providers engaged, personal information may be stored, accessed or processed outside Australia.

Overseas recipient locations: United States. The website is hosted on Cloudflare (Cloudflare, Inc., United States), which also provides the Turnstile anti-spam check and stores the website’s visit statistics and may process data across its global network. Enquiry emails are delivered through Resend (United States). When the Website Health Check is enabled, the page address you enter is sent to Google PageSpeed Insights (Google LLC, United States).

Where the Australian Privacy Principles apply, I will take reasonable steps required by law in relation to overseas disclosures, including considering the privacy protections applicable to relevant recipients.

I will not assume that information is stored exclusively in Australia merely because a service is supplied to Australian customers.

12. How I Protect Your Information

I take reasonable steps to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

My security approach includes safeguards appropriate to the nature of the information and the systems involved.

Depending on the service, these may include:

Restricted access to business systems and customer records.
Authentication and appropriate account access controls.
Secure website connections and data transmission.
Reputable hosting and infrastructure providers.
Appropriate software updates and security maintenance.
Controlled access to project materials.
Secure handling of sensitive account credentials.
Monitoring and review of relevant security risks.
Appropriate deletion or de-identification of information that is no longer required.

Access to customer information is limited to those with a legitimate business reason to use it.

No website, electronic communication system or method of data storage can be guaranteed completely secure.

I encourage customers to use secure communication methods and avoid submitting unnecessary confidential information through general website forms.

13. How Long I Keep Your Information

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as otherwise required or permitted by law.

My retention approach is as follows:

General enquiries

Enquiries that do not result in a project will generally be retained for no longer than 12 months after the last meaningful communication, unless there is a legitimate reason to retain them longer.

Active customer projects

Project information may be retained throughout the duration of the project and any agreed support or maintenance period.

Completed projects

Relevant project correspondence and deliverables may be retained for a reasonable period after project completion to manage support, disputes, warranty matters and agreed future work. Unnecessary personal information will be removed when no longer required.

Financial and business records

Invoices, transaction records and other legally required business information may be retained for the applicable statutory retention period, which can differ depending on the record.

Marketing information

Marketing contact information may be retained until you unsubscribe or request removal, subject to any minimal records necessary to respect your preferences.

Technical information

Visit statistics older than about 13 months are deleted automatically on an ongoing basis. Deleted records may remain in Cloudflare’s point-in-time recovery for up to 30 days. Hosting and security logs are kept under Cloudflare’s settings.

Backups

Information contained in system backups may remain temporarily until those backups are replaced or deleted according to the applicable backup cycle.

Where information is no longer required, I will take reasonable steps to delete or de-identify it, subject to legal and operational requirements.

I review these retention periods from time to time.

14. Marketing Communications

From time to time, Buildgrove Digital may send relevant business updates, service information or promotional material.

I will comply with applicable Australian marketing and electronic communication laws, including the Spam Act 2003 (Cth).

I will obtain consent where required before sending commercial electronic messages.

My marketing communications will identify the sender and provide a suitable method to unsubscribe.

You can opt out of marketing by using the unsubscribe method included in the message or contacting me directly.

I will process valid electronic marketing unsubscribe requests within the period required by law.

Unsubscribing from marketing does not prevent me from sending necessary service-related communications about an active project, invoice, security issue or existing agreement.

15. Accessing or Correcting Your Personal Information

You may contact Buildgrove Digital to request access to personal information I hold about you, or to ask that inaccurate, incomplete or outdated information be corrected.

To make a request, contact me using the details at the end of this policy.

I may need to verify your identity before providing access or making changes, to protect your information from unauthorised disclosure.

I will respond within a reasonable period and explain any applicable limitations.

In some circumstances, access or correction may be restricted or refused where permitted by law. If this occurs, I will explain the reason where appropriate.

Please let me know if your contact details or other relevant information changes.

You may contact me if you would like me to stop a particular use of your information, withdraw consent where applicable or request deletion of information I hold about you.

I will consider and action requests in accordance with applicable law and my legitimate recordkeeping requirements.

Certain information may need to be retained for purposes including:

Taxation and accounting obligations.
Contract administration.
Legal requirements.
Dispute resolution.
Fraud prevention and security.
The establishment, exercise or defence of legal claims.

Where deletion is appropriate, I will take reasonable steps to remove the information from relevant active systems.

Some information may remain in backups or records that must lawfully be retained until the applicable retention period expires.

17. Information Relating to Client Websites and Applications

Buildgrove Digital may be engaged to develop, configure or maintain websites, applications and digital systems on behalf of customers.

Those websites and applications may collect personal information from their own users.

Where I provide development or technical support services, I may have limited authorised access to information held within those systems.

I will seek to access and use such information only where reasonably required for the agreed services and in accordance with applicable agreements, instructions and law.

Unless otherwise agreed or required by law, the business operating the relevant website or application remains responsible for its own privacy policy, customer disclosures, data collection practices and legal compliance.

Buildgrove Digital’s Privacy Policy applies to the information I handle in my own business operations. It does not automatically replace the privacy policy required for a client’s website or application.

Where appropriate, privacy requirements and responsibilities should be addressed in the relevant development or service agreement.

18. Third-Party Websites and External Links

My website may contain links to external websites, applications, services or resources.

These may include hosting providers, software platforms, domain registration services, payment services or other relevant third parties.

External websites operate independently and may have their own privacy policies, terms and security arrangements.

Buildgrove Digital is not responsible for the privacy practices of unrelated third-party websites that I do not control.

I recommend reviewing the relevant privacy policy before providing personal information to an external service.

19. Children and Young People

Buildgrove Digital primarily provides services to businesses, business owners and individuals seeking professional digital services.

My website and services are not specifically directed at children.

I do not intentionally seek to collect personal information from children where it is unnecessary for providing my services.

If I become aware that personal information relating to a child has been collected inappropriately, I will take reasonable steps to address the matter, including deletion where appropriate.

A parent or guardian who believes relevant information has been provided may contact me.

20. Anonymous and Pseudonymous Enquiries

Where practical, you may contact me without identifying yourself or by using a preferred name.

However, certain services require accurate contact or business information.

For example, I may need your contact details to respond to a project enquiry, prepare an invoice, enter into an agreement or deliver ongoing services.

If necessary information is not provided, I may be unable to respond fully to your enquiry or provide a requested service.

21. Data Breaches and Security Incidents

I take suspected security incidents seriously.

If I become aware of a potential breach affecting personal information, I will take appropriate steps to investigate, contain and assess the incident and reduce any potential harm.

Where the Notifiable Data Breaches scheme under the Privacy Act applies and an eligible data breach occurs, I will comply with applicable notification requirements, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

My response will depend on the nature of the incident, the information involved, the potential consequences and my legal obligations.

If you believe information provided to Buildgrove Digital may have been compromised, please contact me promptly.

22. Privacy Complaints

If you have a concern about how Buildgrove Digital has collected, used, stored or disclosed personal information, please contact me.

Please include:

Your name and preferred contact details.
A description of your concern.
Relevant dates or communications, if available.
What you would like me to review or resolve.

I will acknowledge and assess your complaint and aim to provide a substantive response within 30 days.

If additional time is required, I will provide an update where reasonably practicable.

I will make reasonable efforts to resolve complaints fairly and promptly.

Where the Privacy Act applies and you are dissatisfied with my response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner.

Office of the Australian Information Commissioner (OAIC)

Website: https://www.oaic.gov.au
Telephone: 1300 363 992

The OAIC generally expects individuals to raise privacy complaints with the organisation concerned before bringing a complaint to the regulator.

23. Changes to This Privacy Policy

I may update this Privacy Policy as my business, services, technology or legal obligations change.

Updates may be necessary when I introduce new website features, customer systems, hosting providers, integrations or information-handling arrangements.

When changes are made, I will update the date displayed at the beginning of this policy.

Where appropriate or required by law, I will provide additional notice of material changes.

Please review this policy from time to time.

24. Contact Buildgrove Digital

If you have questions about this Privacy Policy or would like to make a privacy-related request, please contact me.

Buildgrove Digital
Victoria, Australia

Email: [email protected]
Website: https://buildgrove.com.au/
Postal address: available on request. Please contact me by email in the first instance.

Please include “Privacy Enquiry” in the subject line of your email to help me identify and respond to your request.