Privacy Policy

Most businesses our size are exempt from the Privacy Act 1988. We follow the Australian Privacy Principles voluntarily, because we build and hold systems for other businesses and you should not have to wonder what happens to your information.

What we collect

• If you enquire or book a call: your name, email, phone number, and whatever you tell us about your business.
• If you register for a webinar or download a guide: your name, email, and your chosen session.
• If you buy the Playbook or a system: your name, email, and payment confirmation from Stripe. Card numbers never touch our servers.
• If you become a client: the business information needed to build and support your systems, which can include your customer lists and booking records. That data stays yours.

What we never do

• We never sell or rent your details to anyone.
• We never use one client's data for another client's benefit. Each client's systems and sending infrastructure are isolated.
• We never send marketing to your customers. Your list is yours.

Where information lives

Systems are hosted with established providers (Google Workspace, Netlify, Cloudflare, Railway, Supabase, Stripe for payments), protected by HTTPS in transit, access controls, and two-factor authentication on the accounts that hold them. Client systems are set up in accounts the client owns wherever possible, so you keep control even if we stop working together.

How long we keep it

• Enquiry details: until the conversation ends or you ask us to delete them.
• Client data: for the life of the engagement plus any period we agree in writing.
• Webinar registrations: deleted after the event follow-up finishes.

Your rights

Ask us any time what we hold about you, ask us to correct it, or ask us to delete it. Email david@davidcharlessaleh.com and you will have an answer within 7 days, from the builder personally, not a form.

If something ever goes wrong

If a breach ever affects your data, you hear it from us first, fast, with what happened and what we are doing about it. We maintain a written incident response process.

Complaints

Raise anything with us first. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).