Privacy policy

This is how ONYA handles your personal information: what we collect, why, who helps us with it, how long we keep it and what you can ask us to do with it. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who we are

ONYA is run by Amelia Babidge, a sole trader trading as Onya Websites (a Fusco Studio brand), ABN 39 596 248 058, 5 Birchall Rd, Goolwa Beach SA 5214, Australia. When this policy says “we” or “us”, that's who it means. For anything privacy-related, email hello@onyawebsites.com or ring 0447 123 690.

What we collect

• The contact form: your name, email address and whatever you write in the message, plus the plan and currency you had selected on the page.
• Bookings through Cal.com: the name, email, time and any notes you enter when you book a call.
• Emails, calls and messages: whatever you send us by email, phone, SMS, Instagram, Facebook or WhatsApp, and our replies.
• If you become a client: your business details, the content for your website (text, photos, logo), and billing details such as invoices and payment records.
• Hosting logs: our host keeps standard server logs (IP address, browser type, the page requested, date and time) to run and secure the site.

We don't use analytics, advertising pixels or any other tracking on this site. We don't build profiles of visitors and we don't sell or rent personal information to anyone.

Why we use it

• To reply to your enquiry and talk through what you need.
• To run the call you booked.
• To build, host and look after your website if you sign up, and to bill you for it.
• To keep the site running and secure.
• To meet our legal obligations, such as keeping tax records.

We only use your information for these purposes, or for something closely related that you'd reasonably expect. We won't add you to a mailing list unless you ask to be on one.

Who helps us with it

A few services handle information for us. Each only gets what it needs to do its job:

• Netlify hosts this website and keeps its server logs.
• Formspree receives the contact form and forwards it to us by email.
• Cal.com runs the booking calendar. It only loads on this site if you accept cookies or click “Show the calendar”, or if you follow a link to book on cal.com.
• Our email provider stores the emails we send and receive.
• Meta (Instagram, Facebook, WhatsApp) handles any messages you send us there.

Some of these services store data outside Australia, mainly in the United States and the European Union. We use established providers that publish their own privacy and security commitments, and we take reasonable steps to make sure they look after your information.

How long we keep it

• Enquiries that don't go anywhere (form messages, emails, booking details): up to 2 years, then deleted.
• Client records (agreements, invoices, payment records): 5 years after the work ends, because the Australian Taxation Office requires it.
• Hosting logs: for as long as our host keeps them, which is usually a short time.

Keeping it safe

We keep information in password-protected accounts that only the two of us who run ONYA can get into. The site runs over HTTPS. No system is perfect, but if a data breach is likely to cause you serious harm, we'll tell you and the OAIC as the law requires.

Your rights

You can ask us to:

• see the personal information we hold about you,
• correct anything that's wrong or out of date, and
• delete it, unless we have to keep it by law (tax records, for example).

Email hello@onyawebsites.com. We'll reply within 30 days. You can also contact us without giving your name, though we'll usually need an email address or phone number to reply.

Complaints

If you're unhappy with how we've handled your information, tell us first at hello@onyawebsites.com and we'll try to sort it within 30 days. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au (opens in a new tab).

Visitors from the EU and UK

If you contact us from the European Union or the UK, the GDPR (or UK GDPR) may also apply. We rely on these legal bases: taking steps you asked for before a contract (replying to your enquiry), performing a contract (building and hosting your site), legal obligation (tax records), and your consent (loading the Cal.com calendar). As well as the rights above, you can object to how we use your information, ask for a copy in a portable format, withdraw consent at any time, and complain to your local data protection authority.

Cookies

The site itself doesn't set cookies. What we store in your browser, and the one optional extra, are listed on the cookie policy.

Changes

If we change this policy, we'll update it here and change the date at the top.