What we collect, and what we don't.

When you send an enquiry, we collect your name, email address, business name or website (optional), and whatever you write in the message. You choose what goes in that message box — please keep sensitive information like financial, identity or health details out of it.

If you email, call, or talk to us in person instead, we keep whatever you tell us in that conversation — usually your contact details and a description of the problem you want solved. It's treated exactly the same as a form enquiry, and everything in this policy applies to it.

If you allow it — see A.8.2 — Google Analytics 4 records the pages you visit, roughly how long you stay, the search or link that sent you, your device and browser type, and an approximate location derived from your IP address. Where we're running paid ads, the same tag tells us whether an ad brought you here. None of it tells us who you are, and we don't try to match it to your enquiry.

That is everything this website collects. There are no accounts, no logins, and we take no payment details here.

A project brings its own information — invoicing and business details, logins to systems we need to work on, and sometimes access to data belonging to your customers. That's a different relationship to browsing this site, so it's governed by the agreement we sign rather than by this page. The short version: we take the minimum access needed to do the job, we don't use your data for anything except your project, and access ends when the work does.

Google Analytics sets cookies on your device — _ga and _ga_<id> — so it can tell a repeat visit from a new one. They last up to two years. We also use Google's advertising measurement, which tells us whether an ad we paid for brought someone here.

Neither is necessary for the site to work, so neither is forced on you. We run Google Consent Mode, and the banner you saw on arrival controls it:

Independently of us, every major browser lets you block or clear cookies in its settings, and Google publishes an opt-out add-on at tools.google.com/dlpage/gaoptout.

We don't sell your information, we don't hand it to anyone for their own marketing, and filling in the contact form does not put you on a mailing list.

The company that hosts this site also handles form submissions. Your enquiry is transmitted to and stored on their systems before it reaches us, and past submissions remain accessible to us there.

The enquiry also arrives and stays as an ordinary email in the joseph@plynt.com.au inbox.

Where you've allowed it, the data described in A.8.1 is processed on Google's servers and used to measure our advertising. See Google's privacy policy.

We hold each of these providers to appropriate privacy and security terms, and none of them is permitted to use your information for their own purposes. We don't name them individually here — that's a detail of how the studio is built rather than something that changes what happens to your data — but if you want to know who they are before you send us anything, just ask and we'll tell you.

These providers operate outside Australia, principally in the United States, so using this site means your information may be stored and processed overseas. We choose established providers, but information held overseas is subject to that country's laws as well as ours.

Being straight about this rather than quoting a tidy number we don't actually enforce: our form provider doesn't automatically delete submissions, and the matching email stays in the inbox. An enquiry you send today is still on file years from now unless you ask us to remove it — which we will, promptly, no questions asked.

Analytics data is a different story: Google Analytics retains event-level records for 14 months, after which only aggregated figures remain.

Write to joseph@plynt.com.au and we will:

No forms and no ticket queue. You'll hear back within a few business days. If you'd rather not appear in analytics at all, the Cookies link in the footer handles that without contacting us.

The site is served over HTTPS and form submissions are encrypted in transit. Enquiry records and the email inbox sit behind accounts limited to Joseph Habib and protected by multi-factor authentication.

The limit is worth stating plainly: no method of transmission or storage is completely secure, and a small studio isn't going to pretend otherwise. If you have something genuinely sensitive to send, say so and we'll arrange a better channel than a web form.

Plynt is a small business and currently sits outside much of the Privacy Act 1988 (Cth) on turnover grounds. We've written this policy to follow the Australian Privacy Principles regardless, because the exemption is about our size, not about what you should be able to expect.

If you're unhappy with how we've handled your information, email us first — we'd rather fix it. If that goes nowhere, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

This site is aimed at business owners. It isn't directed at children, and we don't knowingly collect information from anyone under 16. Where we link out to other sites, their privacy policies apply once you leave — not this one.

If this policy changes, we update this page and the date below. For anything material — a new tracking tool, a new use of your information — we'll say so here rather than quietly editing the text.

Last updated — 20 July 2026