Privacy policy

Kaslu ([LEGAL NAME], ABN [ABN]) is a Sydney business that builds websites, booking systems and follow-ups for local businesses. This policy explains what personal information we collect, why we collect it and what we do with it.

We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

• Your name, email, phone number and business name.
• What you tell us in the booking form, in messages and on an intro call.
• Billing details for invoices. Card payments go through Stripe; we never see or store your card number.
• Messages you send us on Instagram, Facebook or by text.
• How you use this website: pages visited, links clicked, device type and rough location, from PostHog. It runs without cookies, so each visit is anonymous and we can’t tell it’s you.
• When something on the site breaks: technical details of the fault, from Sentry, with names, emails, form entries and IP addresses left out.

• To reply to you, book your intro call and quote the work.
• To build, run and support what we make for you.
• To send invoices and keep records the tax office requires.
• To send our guides, if you signed up. Every email has an unsubscribe link.
• To see which pages help people and fix the ones that don’t.

We don’t sell personal information, and we don’t share it for anyone else’s advertising.

When we build or run a system for a client, we handle their customers’ details too: names, numbers, bookings and messages. We use those details only to run that client’s system. We don’t contact their customers for our own purposes, and when the client leaves we hand the data back or delete it.

Only the services we need to do the work, and only what each one needs:

• Hosting: [HOSTING PROVIDER]
• Email: [EMAIL PROVIDER]
• Text messages: [SMS PROVIDER]
• Payments: Stripe
• Website analytics: PostHog
• Error reports: Sentry
• Accounting: [ACCOUNTING SOFTWARE]

Some of these store data outside Australia, including in the United States. We choose providers with strong security, and we’ll share information with authorities only when the law requires it.

A few cookies keep forms and bookings working. We don’t use advertising or tracking cookies. The full list is in our cookie policy.

Accounts use two-step sign-in, connections are encrypted, and only the people working on your project can see your details. We keep enquiries for [2 YEARS] after we last hear from you, and client records for seven years for tax.

If a data breach is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

Email hello@kaslu.com.au and ask. We’ll reply within 30 days, and it costs nothing.

Tell us first at hello@kaslu.com.au and we’ll respond within 30 days. If you’re not happy with our answer, you can complain to the OAIC at oaic.gov.au.

If we change this policy we’ll update the date at the top. If a change affects how we use details you’ve already given us, we’ll email you first.

Questions? hello@kaslu.com.au, [PHONE], [POSTAL ADDRESS].