Privacy policy

Macabu is operated by MACABU PTY LTD, ACN 695 691 055, registered in the Australian Capital Territory, Australia (“Macabu”, “we”, “us”). This policy explains how we handle personal information when you visit our website, contact us or discuss potential work with us.

Client projects may involve different systems and information. Those arrangements are addressed in the relevant project agreement and any additional privacy notices. Products linked from this website have their own privacy policies.

1. Information we collect

• Information you provide. Our contact form asks for your name, email address and message. Company, budget and timing are optional. A selected service may also be included. We receive the details you share in subsequent correspondence.
• Information from your visit. Our hosting, security and, where enabled, analytics and advertising providers process technical information such as IP address, browser and device details, page visits, referring pages, timestamps, cookie identifiers and interactions with the site.

You can browse without submitting an enquiry. You may use an alias when contacting us where practical, but we need a working email address to reply. Without enough information about your enquiry, we may be unable to assist. Please do not include passwords, payment card details, identity documents, sensitive personal information or information about others that you are not authorised to share.

2. How we use information

• To respond to enquiries and communicate with you.
• To understand requirements, assess whether we can help and prepare proposals or agreed next steps.
• To operate, secure and improve the website, investigate errors and prevent spam or misuse.
• To understand website traffic and measure or improve advertising where the tools described below are enabled.
• To maintain relevant business records, resolve concerns and meet applicable legal obligations.

Submitting an enquiry does not subscribe you to a newsletter. If we send direct marketing, you can ask us to stop using the contact form or any unsubscribe option provided in the message.

3. Service providers and sharing

We use external providers to run the website and handle enquiries:

• Vercel hosts the website and processes requests, including contact form submissions and technical information needed to deliver and secure the site. See Vercel’s privacy notice.
• Resend delivers enquiries to our business inbox. It processes your submission, email addresses and delivery information. Received enquiries and replies are also held in our email systems. See Resend’s privacy policy and data processing terms.
• Cloudflare Turnstile checks for automated or abusive submissions. It processes technical signals, including IP address and browser information, and may use those signals to improve its bot detection. Turnstile does not receive the message entered in our form. See the Turnstile privacy addendum.
• Google Analytics and Meta Pixel, where enabled, receive browsing and interaction information for analytics and advertising, as explained below.

We may also disclose relevant information to professional advisers when needed to resolve a matter, with your authorisation, or where required or permitted by law.

4. Processing outside Australia

These providers operate internationally. Information may be stored or processed outside Australia, including in the United States. Resend identifies the United States as its primary processing and storage location. Other locations depend on each provider’s infrastructure and subprocessors; their linked policies and data processing terms give further details. Australian-only storage is not a feature of this website’s enquiry process.

5. Cookies, analytics and advertising

Cookies are small files stored by your browser. Pixels and similar technologies can send information about a visit or interaction to another service. Security technologies support the website and help protect the contact form.

If you choose Light, Dark or System mode, we save that preference in your browser’s local storage so it is remembered on your next visit. This setting stays in your browser and is not used for tracking. You can change it using the theme control or clear it in your browser’s site data settings.

On our public website, Google Analytics helps us understand how people find and use the website, including pages viewed, referral sources and device or browser information. It can use cookies and identifiers to distinguish visits. Read how Google uses information from partner sites.

Where enabled, Meta Pixel helps us measure advertising and show relevant ads on Meta services. Meta may receive page visits, interaction events, device information and identifiers, and associate them with a Meta account or other information it holds. See Meta’s privacy policy for its uses and controls.

You can manage or delete cookies in your browser, use the Google Analytics opt-out browser add-on where supported, and review advertising preferences in your Google and Meta accounts. These controls have different scopes; deleting cookies does not delete information already received by a provider or necessarily stop every form of tracking. Blocking security scripts can prevent the contact form from working.

6. Storage, security and retention

Enquiries are delivered through Resend and retained in our email systems. The website does not maintain a separate customer account or enquiry database. Hosting and service providers may also retain operational logs and backups.

We take reasonable steps to protect information against misuse, loss and unauthorised access. The form uses server-side validation and spam verification. No internet transmission or storage system can be guaranteed completely secure.

Retention depends on the purpose of the information, whether an enquiry becomes a project, business record requirements and any legal or dispute-related obligations. Information we no longer need is deleted or de-identified, subject to those obligations and the lifecycle of provider backups. You can ask about retention or request deletion using the process below.

7. Access, correction and privacy concerns

Use our contact form for privacy questions, complaints or requests to access, correct or delete information. Start your message with “Privacy request” and describe what you need; company, budget and timing can be left blank. Only include enough information to help us locate the relevant correspondence.

We may need to confirm your identity before disclosing or changing personal information. We will review your request, respond within a reasonable period and explain if we cannot fulfil it, including where records must be retained by law. Rights and any exceptions depend on the laws that apply to the circumstances.

Please give us an opportunity to address a privacy complaint. If you are dissatisfied with our response, you may be able to contact the Office of the Australian Information Commissioner (OAIC), subject to its jurisdiction and complaint requirements. See how to make a privacy complaint to the OAIC.

8. Updates to this policy

We may update this policy when our practices, providers or legal requirements change. The date above identifies the current version. We will provide any additional notice or obtain consent where required by applicable law.