Privacy Policy

Privacy is how we build, not something we only write about. This policy explains what information we collect, how we hold and use it, who we share it with, and your rights. It follows the structure of the Australian Privacy Principles, and it is written to be read.

1. Who we are

Coastworks AI (ABN 46 854 018 747) is an AI consulting and automation business based on the Sunshine Coast, Queensland. For anything about your privacy, email [email protected].

2. What we collect

• Your email address, when you request our free guide or subscribe to our emails.
• Your name, email, phone number and information about your business, when you enquire through our site or engage us.
• Information you provide during a project so we can do the work: what tools you use, what you want built, and business context you choose to share.
• Records of our correspondence with you, and signed documents such as your inclusions sheet.
• Basic technical information your browser sends when you visit this site, and the website analytics described in section 3.
• Messages you type into the chat on this site, and the name, email and question you choose to leave if you ask for a follow-up. We read and review chat conversations to improve the answers.

We do not collect sensitive information such as health, financial account or identity documents, and we ask you not to send them to us. Where possible, you can deal with us without identifying yourself, for example by asking a general question by email.

3. Website analytics

Our website uses Google Analytics and Microsoft Clarity to understand how visitors use it: which pages are read, how people move around, and where they get stuck. Clarity does this by replaying anonymised visits, with typed text masked. These tools use cookies and collect technical data like your browser type and rough location. None of it identifies you by name, we do not sell or share it for advertising, and it never touches anything you send us through our forms. If you would rather not be counted, most browsers let you block analytics cookies, and the site works exactly the same without them.

4. How we collect and hold it

We collect information directly from you: through the forms on this site, by email, and in our sessions with you. Enquiry and subscriber details are held in our own systems on infrastructure we control. Signed documents and their audit records are kept securely for 7 years, in line with commercial record-keeping requirements. We take reasonable steps to protect all of it from misuse, interference, loss and unauthorised access, and we destroy or de-identify information we no longer need.

5. Why we use it

• To send you the free guide and the occasional useful email, if you asked for them.
• To answer your enquiry and assess whether we are a good fit for each other.
• To plan, deliver and support your work if you engage us.
• To keep the business records the law requires us to keep.

We do not sell or rent your information, and we do not use it for anything you would not expect.

6. Who we disclose it to

• The small number of service providers that help us operate, such as our email provider, only as far as needed and under confidentiality.
• Your own tool and AI providers, where you have connected them: they process your data under your accounts and their own terms, not ours.
• Government agencies or others where the law requires it.

7. Overseas disclosure

Some providers we or you use may store data outside Australia. For our own systems we prefer Australian or clearly disclosed hosting, and for anything connected during your project we tell you where it runs before it is connected, so you can decide.

8. Your business data on your own systems

This is the part that matters most, and it is a deliberate design choice.

• Your systems run on your own server, under your own accounts. Your business data does not sit in our systems.
• We connect to your business data through read-only connections that you create and can switch off at any time.
• We do not copy your business data into our own systems.
• We never hold your passwords. While we manage your server we hold secure access to that server only, and we remove it completely when you take control.
• Where your own AI assistant reads your data, it does so through your own subscription, under that provider's commercial privacy terms, which we walk you through before anything is connected.
• If your business must meet its own privacy obligations to your customers, we build with that in mind and never weaken it.

9. Marketing emails

We only send marketing emails to people who have agreed to receive them. Every email has a working one-click unsubscribe, and opt-outs are actioned promptly. This is how the Spam Act 2003 requires it to work, and it is how we would want it as a customer.

10. Access, correction and deletion

• You can ask us what information we hold about you, and we will tell you.
• You can ask us to correct anything that is wrong, and we will.
• You can ask us to delete your information, and we will unless we are required to keep it, in which case we will tell you why and for how long.

Email [email protected] and we respond within 4 business hours on business days.

11. Complaints

If you believe we have mishandled your information, email [email protected] with the details. We will acknowledge your complaint promptly, look into it, and tell you what we found and what we will do. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

12. Data breaches

If there is ever a breach affecting information we hold about you, we will tell you promptly: what happened, what information was involved, and what we are doing about it.

13. Changes to this policy

We may update this policy from time to time. The current version always lives on this page, with the date it was last updated at the top.

Contact

Coastworks AI, ABN 46 854 018 747, Buderim QLD 4556. Email [email protected].