Privacy policy

Verto Digital (ABN 71 976 380 036) is a sole trader business operated by Jarrah Cairney, based on the Gold Coast, Queensland. I am the only person who handles personal information collected through this website, and I handle it consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Privacy enquiries can be directed to jarrah@vertodigital.com.au.

When you send an enquiry, I collect your name, your email address, your business name, your website (or the fact that you do not have one yet), what you want help with, and your message. A phone number is optional.

I also record technical context with the enquiry so that I can respond usefully and understand how people find the site: the page you sent it from, how you arrived (the referring site and any campaign tags or Google and Meta click identifiers in the address), your browser type, your IP address (from which HubSpot estimates a location), a Google Analytics identifier, and a HubSpot identifier that links the enquiry to your earlier visits to this site and to later ones from the same browser.

This site measures how it is used and how my own advertising performs. The tools that do it are Google Analytics (loaded through Google Tag Manager), Google Ads conversion measurement, the Meta pixel for advertising on Facebook and Instagram, HubSpot tracking, which connects an enquiry to the visits before it, and Microsoft Clarity, which records where pages are clicked and read and builds a replay of the visit with anything typed into the form hidden. Vercel Analytics also counts page views, without cookies and without identifying you. Because of the advertising tools, you may see my ads on Google, Facebook or Instagram after visiting.

These tools set cookies when a page loads, without a consent prompt. Australian privacy law asks for transparency about tracking rather than prior consent, and this policy and the cookie page are that disclosure. If you are visiting from the European Economic Area, the United Kingdom or Switzerland, the analytics and advertising cookies are not set. The data is used to run this site and my own advertising, and it is never sold or traded. Every cookie, who sets it and how long it lasts is listed on the cookie page at vertodigital.com.au/cookies.

To say no, use the Tracking switch at the foot of any page. It stops all of the tools above in your browser from then on and clears this site's tracking cookies. You can also block cookies in your browser settings, or use the providers' own controls, which the cookie page lists.

I use enquiry details to reply to you, to hold an introductory conversation, and to propose an appropriate next step. Sending the form is your request for that reply. When you send it, HubSpot sends you a short acknowledgement from my address confirming that it arrived and when to expect a reply, and notifies me. Emails sent through HubSpot, including that acknowledgement, record whether they were opened and which links were clicked.

If you book a call through my booking link, HubSpot records the booking (your name, your email address and the time you chose) against your record, and the call is added to my Google calendar.

I do not send marketing emails to people who enquire. Clients and people I have quoted may receive occasional service and account updates about how I work, availability or pricing. Each carries an unsubscribe link, and I act on an unsubscribe within five business days.

I do not sell, rent or trade personal information.

When I do marketing work for a client, I may handle personal information about that client's customers (for example to set up review requests or email follow-up). I handle it only on the client's instructions and only for that work, under the written agreement with the client, and this policy does not cover it. Questions about a client's customer information should go to that client.

Before any agreement, a business may give me view-only access to its analytics or advertising accounts so that I can prepare a free audit. I use that access only for the audit and change nothing in those accounts. The same limits apply: anything in them that identifies that business's customers stays in the accounts and is not copied out.

Enquiries are stored in HubSpot, which I use as my customer records, my email tool and to measure where enquiries come from. HubSpot also sends me a copy of each enquiry by email, so a copy sits in my mailbox, which is hosted by Google (Google Workspace). I reply from that address, and because the mailbox is connected to HubSpot, my replies to you are also recorded against your record there. This site is hosted and protected against automated abuse by Vercel, and its server logs hold enquiry details briefly. If an enquiry cannot be delivered to HubSpot, it is emailed to me through Resend instead so that it is not lost. Analytics and advertising measurement are processed by Google (Tag Manager, Analytics 4 and Google Ads), by Meta Platforms, and by Microsoft, which runs Clarity.

I work with an AI assistant, Viktor, run by Zeta AI, Inc. It is sent each new enquiry from this site as it arrives, reads it in HubSpot, helps me prepare my reply and keep track of the work, and I talk to it in Slack, so details of your enquiry also appear in my Slack workspace and in the files I keep for it in Google Drive. Viktor uses AI models from providers including Anthropic, OpenAI and Google to do that. It does not send anything to you: I read and send every reply myself.

HubSpot holds my customer records in its Australian data centre, and its support staff may access them from other countries. This site's enquiry handling runs on Vercel's servers in Sydney; Google, Meta, Microsoft and Vercel otherwise process data in the United States and in other countries where they operate, Viktor and Slack process data in the United States, and the Resend fallback email is sent from Japan. I use established providers with recognised security practices, and take reasonable steps to protect the information you provide.

I keep enquiry records while we are talking or working together, and delete or de-identify them within two years of the last contact unless the law requires me to keep them longer.

You may request a copy of the personal information I hold about you, ask me to correct it, or ask me to delete it. Send the request to jarrah@vertodigital.com.au. I will respond within 30 days, consistent with Australian Privacy Principle 12. The records I export, correct or delete are the one held in HubSpot, any copy of your enquiry in my mailbox, and my working notes and files about it in Slack, Viktor and Google Drive.

If you believe your personal information has been mishandled, send the details to jarrah@vertodigital.com.au. I will acknowledge the complaint within 5 business days and provide a written response within 30 days.

If you are not satisfied with that response, you may refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

If I change how personal information is handled, I will update this page and the date recorded at the end of it. Material changes are listed here rather than absorbed silently into the text.

September 2026: enquiries moved to HubSpot, and the policy set out what the form collects, the acknowledgement email, the fallback delivery service, a retention period and the countries involved (7 to 10 September); the Privacy Act wording, a section on information handled for clients and a separate cookie page (15 September); Microsoft Clarity (20 September); bookings, view-only access before an agreement, and Viktor and Slack as processors (26 September).

28 September 2026: the marketing checkbox came off the enquiry form, so people who enquire are no longer offered marketing emails (anyone who ticked it earlier keeps the record of what they agreed to, and can unsubscribe at any time); a Tracking switch was added to every page; and the cookie list now lives only on the cookie page.