01 OVERVIEW
This website is run by Joshua Todes, a product engineer based in Sydney, Australia. I respect your privacy and handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where it applies to you, the EU and UK GDPR.
02 WHAT I COLLECT
Information you choose to send me through the enquiry form or by email. That is typically your name, email address, phone number, company and website, a description of your project, and a budget and timeline.
Basic technical information handled automatically by Cloudflare, which hosts this site, and by the spam check on the enquiry form, for example your IP address, browser type and the pages you request. This is used only to keep the site running and secure and to tell humans from bots. It is not used to profile you or to measure how the site is used, and I do not keep it.
03 HOW I USE IT
To reply to your enquiry; to scope, agree and deliver work if we go ahead; to keep the site secure and improve it; and to meet any legal obligations. I do not sell personal information, do not add you to a mailing list, and will not send you marketing without asking first.
04 COOKIES & TRACKING
This site runs no analytics, sets no cookies of its own and runs no advertising trackers. It loads typefaces from Google Fonts, which means Google receives the request (including your IP address) when the page loads and handles it under Google’s privacy policy. The enquiry form uses Cloudflare Turnstile to tell humans from bots: it processes a token and basic request data such as your IP address, under Cloudflare’s privacy policy.
05 THIRD-PARTY SERVICES
I use a small number of third-party providers: Cloudflare (hosting, the Turnstile spam check and email routing for hello@joshuatodes.com), Resend (delivers the enquiry email from hello@joshuatodes.com to my inbox) and Google (fonts), plus AI-assisted tooling in my own work. They may process information on my behalf under their own privacy policies. I choose providers carefully and share only what is needed to run the site and respond to you.
06 RETENTION & SECURITY
I keep enquiries for as long as needed to deal with them and any resulting work, and to meet legal and accounting obligations, then delete them. Information is stored with reputable providers and access is limited to me. No transfer over the internet is completely secure, so I cannot guarantee absolute security, but I take reasonable steps to protect what you send.
07 YOUR RIGHTS
You can ask me at any time to access, correct or delete the personal information I hold about you, or to stop using it. Email hello@joshuatodes.com and I will respond within a reasonable time. If you are in the EU or UK you also have the rights the GDPR gives you, including the right to object and to data portability. If you are unhappy with how I have handled your information you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority.
08 CHANGES
If this policy changes, the new version will be posted here with an updated date. Continued use of the site after a change means you accept the updated policy.