What we collect, and what happens to it.

Enquiry details. When you send the form on the contact page or email us directly, Zander Custom Services keeps your name, your email address, the company you named if you named one, and what you wrote. Booking a call adds the name, email address and time you chose. Those are held by the calendar service that sends the invitation.

Analytics. Every page records the path you looked at, the site that referred you, the country the request came from where the proxy can tell, and whether the device is a phone, a tablet or a desktop. No cookies are set. No raw IP address is ever written down: the address is combined with a salt that changes every day, hashed, and discarded inside the same function that read it. Yesterday’s hashes cannot be matched to today’s, so the record stops being able to follow anyone after a day. A browser that asks not to be tracked isn’t recorded at all.

There’s no third-party analytics script, no advertising pixel and no session recording on this site. The measurement is first-party, and that’s all of it.

Enquiry details are used to reply to you, to scope and quote the work, and, if you go ahead, to invoice it and deliver it. They don’t go on a mailing list, into a newsletter, or to anybody else for any other reason.

Analytics are used to see which pages get read and which get ignored, and whether anything sent out actually brought someone here. They aren’t used to identify an individual, and they couldn’t be. There is nothing in the record that identifies anyone.

On infrastructure we run and administer ourselves, in Australia. It’s the same class of system our founder looks after for a healthcare provider under Privacy Act obligations, and it’s held to the same standard.

Two outside services hold a narrow slice. The calendar behind the booking page holds what it needs to send you an invitation. Once you’re a client, the payment processor holds what it needs to issue and collect an invoice. Neither is given anything beyond that, and nothing is sold to anyone, ever.

Analytics rows carry no identifier that outlives the day they were written, so after a day there’s nothing in them to keep or delete about a person.

Enquiries are kept while there’s a reason to keep them: a conversation that’s still open, a quote you might come back to, or a record of work we’re required to hold for tax. When none of those applies any more, or when you ask, it is deleted.

Email hello@zandercs.com and say what you want. A copy of everything held about you, a correction, or deletion: all three are yours to ask for. There’s no form to fill in, and we’ll confirm in writing when it is done.

If you’re not satisfied with how a request was handled, the Office of the Australian Information Commissioner takes privacy complaints at oaic.gov.au.