Privacy
Privacy policy
What I collect, why I collect it, and the choices available to you.
Who I am
Verto Digital (ABN 71 976 380 036) is a sole trader business operated by Jarrah Cairney, based on the Gold Coast, Queensland. I am the only person who handles personal information collected through this website, and I handle it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Privacy enquiries can be directed to jarrah@vertodigital.com.au.
What I collect
When you send an enquiry, I collect your name, your email address, your business name, your website (or the fact that you do not have one yet), what you want help with, and your message. A phone number is optional.
I also record technical context with the enquiry so that I can respond usefully and understand how people find the site: the page you sent it from, how you arrived (the referring site and any campaign tags or Google and Meta click identifiers in the address), your browser type, your IP address (from which HubSpot estimates a location), a Google Analytics identifier, and a HubSpot identifier that links the enquiry to your earlier visits to this site and to later ones from the same browser.
If you tick the marketing box, I record that you did, the exact wording you agreed to, the page you were on and the time, so that I can show what you consented to later.
Analytics, cookies and advertising
Three forms of measurement operate on this site. Vercel Analytics is always on and entirely cookieless; it reports page counts and stores nothing that identifies you. Google Analytics 4, loaded through Google Tag Manager, records how the site is used and sets the cookies _ga and _ga_ followed by a property code, which last about two years. HubSpot tracking records the pages you visit so that an enquiry can be connected to the visit that led to it, and sets the cookies hubspotutk and __hstc (about six months), __hssc (about 30 minutes) and __hssrc (until you close the browser). Where you arrive from a Google ad, Google also sets the cookie _gcl_aw (about 90 days) so that an enquiry can be attributed to that ad. The site itself keeps any campaign tags and click identifiers from the address you arrived on in your browser's session storage until you close the tab, so they can be sent with an enquiry.
I also use advertising measurement. Google Ads conversion measurement records that an advertisement led to an enquiry where you arrive from one of my campaigns. The Meta pixel performs the equivalent function for advertising on Facebook and Instagram, recording page views and enquiry submissions and associating them with Meta Platforms advertising systems; it sets the cookie _fbp (about 90 days) and, where you arrive from a Facebook or Instagram ad, _fbc. Meta describes its own handling of that information at facebook.com/privacy/policy. Because of these cookies you may see my ads on Google, Facebook or Instagram after visiting this site.
These cookies are set when the page loads, without a consent prompt. Australian privacy law requires transparency about tracking rather than prior consent, and this page is that disclosure. If you are visiting from the European Economic Area, the United Kingdom or Switzerland, the analytics and advertising cookies are not set. The resulting data is used to operate this site and my own advertising. It is never sold or traded.
You may opt out at any time: block or clear cookies for this site in your browser settings, install the Google Analytics opt-out browser extension (tools.google.com/dlpage/gaoptout), manage how Google uses advertising data at myadcenter.google.com, or adjust your Meta advertising preferences at accountscenter.facebook.com/ads. HubSpot cookies can be blocked in your browser like any other; there is no separate HubSpot opt-out page. Google sets out how it handles data from sites using its services at policies.google.com/technologies/partner-sites.
How I use your information
I use enquiry details to reply to you, to hold an introductory conversation, and to propose an appropriate next step. Sending the form is your request for that reply. When you send it, HubSpot sends you a short acknowledgement from my address confirming that it arrived and when to expect a reply, and notifies me. Emails sent through HubSpot, including that acknowledgement, record whether they were opened and which links were clicked.
If you tick the marketing box, I also send you general updates on digital marketing and business by email, from HubSpot under my name. There is no set schedule. Every email carries an unsubscribe link, and I act on an unsubscribe within five business days. Ticking the box is never a condition of getting a reply. Clients and people I have quoted may also receive occasional service and account updates about how I work, availability or pricing; those carry the same unsubscribe link.
I do not sell, rent or trade personal information.
Where your information is held
Enquiries are stored in HubSpot, which I use as my customer records, my email tool and to measure where enquiries come from. HubSpot also sends me a copy of each enquiry by email, so a copy sits in my mailbox, which is hosted by Google (Google Workspace). I reply from that address, and because the mailbox is connected to HubSpot, my replies to you are also recorded against your record there. This site is hosted and protected against automated abuse by Vercel, and its server logs hold enquiry details briefly. If an enquiry cannot be delivered to HubSpot, it is emailed to me through Resend instead so that it is not lost. Analytics and advertising measurement are processed by Google (Tag Manager, Analytics 4 and Google Ads) and by Meta Platforms.
HubSpot holds my customer records in its Australian data centre, and its support staff may access them from other countries. This site's enquiry handling runs on Vercel's servers in Sydney; Google, Meta and Vercel otherwise process data in the United States and in other countries where they operate, and the Resend fallback email is sent from Japan. I use established providers with recognised security practices, and take reasonable steps to protect the information you provide.
I keep enquiry records while we are talking or working together, and delete or de-identify them within two years of the last contact unless the law requires me to keep them longer.
Access and correction
You may request a copy of the personal information I hold about you, ask me to correct it, or ask me to delete it. Send the request to jarrah@vertodigital.com.au. I will respond within 30 days, consistent with Australian Privacy Principle 12. The records I export, correct or delete are the one held in HubSpot and any copy of your enquiry in my mailbox.
Complaints
If you believe your personal information has been mishandled, send the details to jarrah@vertodigital.com.au. I will acknowledge the complaint within 5 business days and provide a written response within 30 days.
If you are not satisfied with that response, you may refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
If I change how personal information is handled, I will update this page and the date recorded at the end of it. Material changes will be identified on this page rather than absorbed silently into the text.
September 2026: enquiries are now stored in HubSpot rather than in the automation and note-taking tools named previously; the list of what the form collects was corrected; the cookies set by this site are now named; a retention period was added; and the marketing email wording now states how often it is sent and how to stop it.
9 September 2026: an automatic acknowledgement email is now sent for every enquiry and its opens and clicks are recorded; the IP address, click identifiers and session storage were added to the list of what is collected; Resend was named as the fallback delivery service and Japan added to the countries; and the copies of enquiries held in my mailbox and in server logs were described.
10 September 2026: the marketing box now offers general updates on digital marketing and business with no set schedule, in place of a fortnightly marketing email. Anyone who ticked the earlier wording keeps the record of exactly what they agreed to. My mailbox provider (Google) is now named, and the policy says that replies sent from it are recorded in HubSpot.
Last updated 10 September 2026