Privacy Policy
The short version
- I only collect what I need to reply to you and to do the work you ask for.
- I never sell your information or use it for anyone else's marketing.
- Some of the tools I use store data overseas. They are listed below.
- The chat on this site is an AI assistant. Please don't put sensitive details in it.
- You can ask to see, correct or delete your information at any time.
1. Who I am
This website and the services on it are run by Thiago Serpeloni, a sole trader based in the Redlands, Queensland (ABN 70 327 477 453). In this policy, "I", "me" and "my" mean Thiago Serpeloni. "You" means anyone who visits this site, contacts me, or is a client.
I aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), whether or not the Act applies to my business.
2. What I collect
| When | What |
|---|---|
| You request a call | Name, business name, industry, team size, phone, email, what's taking up your time, and the best time to call. |
| You use the chat assistant | The messages you type, and any contact details you choose to give. |
| We talk or meet | Notes from the call or meeting, and follow-up tasks. |
| You become a client | Billing details, and information about your business, systems and processes needed to do the work. See section 8 for data inside your systems. |
| You visit the site | Basic technical information your browser sends, such as IP address and browser type, kept in the hosting provider's security logs. This site does not use advertising or tracking cookies. |
You don't have to give me your details, and you can contact me without using your full name. If you don't give contact details, I may not be able to reply.
3. Why I use it
- To reply to your enquiry and arrange a call.
- To deliver, support and invoice the services you ask for.
- To keep records I'm required to keep by law, such as tax records.
- To improve my services, using summaries rather than identifying details where I can.
- To send you occasional updates, but only if you have agreed to receive them. Every message includes an unsubscribe option, in line with the Spam Act 2003 (Cth).
I don't sell, rent or trade personal information.
4. The AI chat assistant
The chat on this site is an AI assistant, not a person. It answers general questions from information I have written about my services. It can make mistakes, so anything important (prices, timing, what's included) is confirmed by me personally in writing.
Chat messages are processed by an AI provider (Anthropic, United States) to produce the replies, and are saved so I can follow up. Please don't enter sensitive information, such as health, financial account or identity details, in the chat.
I don't use the assistant, or any automated process, to make decisions that significantly affect your rights or interests. If that ever changes, I will say so in this policy.
5. Who I share it with
I use a small number of service providers to run the business. They only receive what they need, and only for that purpose:
| Provider | Used for | Where data may be stored |
|---|---|---|
| Cloudflare | Website hosting and the form and chat connection | Global network, including the United States |
| Notion | Enquiry, client and project records | United States |
| Anthropic | AI chat assistant and drafting | United States |
| Cal.com | Booking calls | [United States or EU, to confirm] |
| [Email provider] | Business email | [To confirm] |
| [Accounting software] | Invoices and payments | [To confirm] |
By using this site or my services, you understand that some personal information may be stored or processed outside Australia by these providers. I choose providers with recognised security practices and take reasonable steps so that they handle information consistently with the Australian Privacy Principles.
I may also disclose information if the law requires it, or to my professional advisers (for example an accountant or lawyer) under confidentiality.
6. How I keep it safe
- Accounts are protected with strong, unique passwords and two-step login where available.
- Access is limited to me, and to anyone I engage to help who has agreed to keep it confidential.
- I don't store client passwords in documents, scripts or chats.
- If a data breach is likely to cause you serious harm, I will tell you and take steps to contain it.
7. How long I keep it
- Enquiries that don't lead to work: up to 2 years, then deleted.
- Client and billing records: at least 5 years, as required for tax records.
- Chat conversations: up to 12 months, unless they become part of a client record.
8. Data inside your systems (clients)
When I build or support systems for you, I may be able to see information about your own customers or staff. I treat that as your information: I only access it to do the agreed work, I follow your instructions, and I don't copy it for any other purpose. Systems are set up in accounts you own. When our work ends, I remove my access and return or delete any copies I hold.
If your business holds health information, or is otherwise covered by the Privacy Act, tell me before we start so we can agree extra safeguards in writing.
9. Seeing, correcting or deleting your information
You can ask for a copy of the information I hold about you, ask me to correct it, or ask me to delete it. Email me at hello@thiagoserpeloni.com. I'll respond within 30 days. If I can't do what you ask, for example because the law requires me to keep a record, I'll explain why.
10. Complaints
If you're unhappy with how I've handled your information, please contact me first at hello@thiagoserpeloni.com and I'll try to fix it within 30 days. If you're still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
11. If you are outside Australia
I work with clients in other countries. If you are in the European Union or the United Kingdom, data protection laws there (the GDPR and UK GDPR) may give you extra rights, such as the right to object to how your information is used or to move it to another provider. I will respect those rights. Please contact me at hello@thiagoserpeloni.com to use them. [Lawyer to confirm whether further GDPR steps are needed, such as naming a lawful basis for each use.]
12. Changes to this policy
I may update this policy as my services or the law change. The date at the top shows when it last changed.
13. Contact
Thiago Serpeloni · Redlands, Queensland · hello@thiagoserpeloni.com · [phone]