Privacy policy

This policy explains what personal information Elphick Digital collects through elphickdigital.com.au, why, and what you can ask us to do with it. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Who we are

Elphick Digital (ABN 27 169 618 077) is run by Jordan and Sally Elphick from 91 Woodstock Street, Mayfield NSW 2304. We make Eddy, the AI that drafts website concepts, redesigns and changes, which Jordan checks before anything is sent or goes live. For anything in this policy, email hello@elphickdigital.com.au.

What we collect

• When you request a free concept: your website address or business name, your type of business, state and town, what you'd like to improve, your timeline, your name, email and phone number, and how you heard about us.
• When you use the contact form: your name, email, phone number and business name if you give them, and your message.
• Where you came from: the page you started on, any campaign tags in the link (UTM tags), and a random visitor ID stored in your browser. We use these to see which pages and campaigns bring in requests.
• Referral links: if you arrive through someone's referral link (elphickdigital.com.au/r/…), we keep that link's code in a first-party cookie called ed_ref for 90 days, so the right person is thanked if you ask for a concept or become a client. The first referral link you use is the one we keep. It holds only the code and the date, nothing about you, and you can delete it in your browser settings. If you tell us who referred you when you sign up, we keep that answer with your account.
• Sharing your concept: if you choose to share your before and after, we send a one-time link to an email address at your business's domain to check the business is yours, and keep that address with your concept.
• Abuse prevention: we don't store your IP address with your request. We store a one-way, scrambled version of it (a hash) so we can spot spam and repeated abuse.
• If you become a client: billing details and what we need to run your website and your account.

Your website, and how we use AI

When you ask for a free concept, we read the public pages of the website you give us. Eddy, our AI, drafts a concept from that content and your answers. Jordan then reviews and edits every concept before it's sent.

The Ask Eddy chat

If you use the Ask Eddy chat on this website, we keep your messages and Eddy’s replies for 90 days so we can check how Eddy is answering, then delete them. We don’t store your IP address with a chat, only a scrambled version (a hash) to stop abuse. To write a reply, your message and the matching content from this website are sent to OpenAI. If you leave your name, phone number or email in the chat, we keep them like a contact form message so Jordan can reply. Please don’t put sensitive information in the chat.

Private previews

Your concept is sent as a private link. Preview pages are hidden from search engines and are only shared with you. Anyone you forward the link to can see it, so treat it like a private document.

Analytics

On the live site we use Google Analytics 4 to understand which pages people visit and which buttons and forms they use. It sets cookies in your browser. The analytics tag doesn't load on private preview pages. You can block analytics cookies in your browser settings, and the site still works.

We also count visits to this site with our own cookieless analytics, the same tool described below. It doesn't run on the client portal, admin or private preview pages.

Analytics on our clients' websites

When a business we look after uses our analytics, a small script on their website sends us a short note for each page view and for a few actions: tapping a phone number or email link, clicking a link to another site, downloading a file, and (when their own server confirms it) sending a form or making a booking. We use this to show that business how their website is doing. We're their service provider for this; the business decides to use it.

• No cookies, and nothing is stored in your browser.
• We don't store your IP address. We combine it with your browser's user agent, the website and a random value that changes every day, and keep only a one-way code. The random value is deleted daily, so we can't link your visits across days or across websites, or work out who you are.
• We remove email addresses, phone numbers, codes and tracking parameters from page addresses before saving them. We keep campaign tags (utm_source, utm_medium, utm_campaign), the website that sent you (its name only), and the kind of device (phone, tablet or computer). If our host tells us your country, we keep that too.
• If your browser sends "Do Not Track" or "Global Privacy Control", we don't count you at all.
• Raw records are deleted after 13 months. Daily totals with no visitor codes are kept for reports.
• It's stored in our own database on our hosting server. We don't sell it or share it with advertisers.

How we use your information

• To prepare and send your concept, and reply to your message.
• To run your website and account if you become a client.
• To keep the site secure and stop spam.
• To meet our legal, tax and accounting obligations.

We don't sell your personal information. We won't send you marketing emails unless you've agreed to receive them, and every one will have a way to unsubscribe.

Who we share it with

Only the service providers who help us run the website, host it, draft concepts and send email, and only for that purpose. We may also disclose information if the law requires it.

Keeping it secure

Requests and messages are stored in our own database on our hosting server, not in email. We take reasonable steps to protect them from misuse, loss and unauthorised access. Please don't send sensitive information you don't need to share.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it where we don't have to keep it. Email hello@elphickdigital.com.au. If you're unhappy with how we've handled your information, tell us first. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We'll update the date at the top of this page whenever this policy changes. See also our terms.