Privacy policy

Last updated 11 October 2026

What I collect

Only what I need to answer your enquiry and, if you go ahead, to do the work.

• What you tell me. When you use the contact form or email me: your name, business name, email address, phone number, suburb, what it’s about, and your message.
• Where you arrived. The form also sends the first page you opened on this site during your visit, and any campaign tags in its address (such as utm_source), so I can tell whether an enquiry came from an ad. Your browser holds this for that visit only, and it is sent only with your enquiry.
• Technical information. Like any website, the hosting and security services record standard details of each request, such as IP address, browser type, the page requested and the time. This keeps the site running and secure. It isn’t used to identify you.

Cookies and analytics

I use Cloudflare Web Analytics to count visits and see which pages people read. It sets no cookies, doesn’t build a profile of you and doesn’t follow you to other sites, and Cloudflare handles it under its own privacy policy.

This site doesn’t use advertising or tracking cookies. If that changes, this policy will name the tool first, and nothing that sets cookies will run until you say yes.

The contact form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. Turnstile looks at technical signals from your browser to do that, and Cloudflare handles that information under its own privacy policy. Cloudflare may also set cookies that are strictly needed to protect the site from abuse.

Why I use it

• To reply to your enquiry and give you a quote.
• To do the work, if you go ahead.
• To keep this website secure and working.
• To meet record-keeping and legal obligations.

Who else handles it

I don’t sell your information, and I don’t share it with anyone for their own marketing. It passes through the services that run this website and my email: Cloudflare, which protects and delivers the site, and Microsoft 365, where enquiries arrive as email. Each handles it only to provide their service. Otherwise I share it only where the law requires.

Where it’s kept

This website runs on servers in Australia. Traffic passes through Cloudflare’s network, which has servers around the world, so some technical information may be handled outside Australia on its way.

Enquiries are delivered by email and aren’t stored on the website. There is no database of enquiries on it.

How long I keep it

As long as I need it to help you, or as long as the law requires (records of work for tax, for example). Then it’s deleted.

Your rights

You can ask what personal information I hold about you, ask me to correct it, or ask me to delete it. Email hello@leahyandco.com.au.

If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

I may update this policy. The current version is always on this page, with the date it was last changed at the top.