Privacy policy
DRAFT — this policy is being reviewed. Questions: hello@sitemade.com.au.
Last updated: 7 September 2026
1. Scope
This policy explains how Sitemade (Lovell Digital, Adelaide, South Australia) handles personal information, consistent with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
2. What we collect
| Business contact details | Business name, business phone number, suburb, state and public listing details, collected from publicly available Google Business Profiles. |
|---|---|
| Interaction data | Whether a preview link was opened, when, for how long, and which pages were viewed. Collected by a small script on the preview page. |
| Messages | Text messages you send us, and our replies. |
| Customer details | If you subscribe: your name, email address, ABN or ACN, preferred domain name, and subscription records. Card details go directly to Stripe and are never held by us. |
3. Why we collect it
To build and show you a preview of a website for your business, to contact you about it, to provide and bill the service if you subscribe, to register a domain in your business's name, and to keep records we are required to keep.
4. Direct marketing and opting out
We may send you a single text message about a website preview built for your business. Every message tells you how to opt out. Reply STOP to any message, or email us, and we will stop contacting you and keep a record of your number solely so we do not contact you again. We do not sell or rent contact details to anyone.
5. Cookies and tracking
Preview pages do not use advertising cookies and do not run third-party analytics. They store a random session identifier in your browser for the length of the visit so repeat page views are not double-counted, and they record how long the page was open. There is no cross-site tracking.
6. Who we share it with
Only the service providers we need to run the business: Stripe (payments), Cloudflare (hosting), Supabase (database), Twilio and our SMS provider (messaging), Resend (email) and our domain registrar. Some of these store data outside Australia. We do not share your information for any other purpose unless you ask us to or the law requires it.
7. Security and retention
We keep information only as long as we need it, and we keep opt-out records indefinitely so we can honour them. Access is restricted to Ryan. If a data breach is likely to cause you serious harm we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.
8. Access, correction and complaints
Email hello@sitemade.com.au to ask what we hold about you, to have it corrected, or to have it deleted. We respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.