What I collect,and what I don't.

Who this is

Monalux is a one-person web design and SEO studio run by Alannah, based in regional Victoria, Australia. If you need to reach me about anything on this page, email info@monalux.com.au.

What I collect

Only three things put your details in front of me.

• The free review form. Your name, your business name, your website address, your phone number, your email, and whatever you write in the box about what's going on. All of it is optional except the bits marked required — if you'd rather not give me a phone number, don't.
• The booking page. Bookings run through Cal.com. When you book a call they collect your name, email, time zone and anything you type into the notes, and pass it to me.
• Email. If you email me directly, I have your email and whatever you sent.

I don't ask for anything I don't need. There's no account to create, no password, and I never handle your card details — there's nothing on this site that takes a payment.

What gets collected automatically

Like every website, this one leaves a few technical traces:

• Hosting logs. The site is hosted by Netlify, which records things like your IP address, browser type and which pages loaded. I use these to see whether the site is working, not to identify anyone.
• Fonts and code libraries. The typefaces come from Google Fonts and the animation code comes from jsDelivr. Your browser requests those files directly from those services, which means they can see your IP address. That's how every site using them works.

Why I have it

• To reply to you, and to run the free review you asked for.
• To quote a job and, if we go ahead, to actually do the work.
• To keep a record of what we agreed — emails, quotes, invoices — the way any business does.

I don't add you to a mailing list off the back of an enquiry. If I ever start a newsletter, you'll have to ask for it.

Who else sees it

I don't sell your information, rent it, or hand it to anyone for marketing. The only third parties involved are the tools I use to run the business:

• Netlify — hosts the site and stores what the review form submits.
• Cal.com — handles bookings.
• Google Workspace — my email.

Each of those stores data on servers that may be outside Australia, mostly in the United States. Each has its own privacy policy, and by using this site you're using their infrastructure too. I'd rather say that plainly than bury it.

The one other case: if the law requires me to hand something over, I have to. That's the only exception.

Your website, once you're a client

If I build or maintain a site for you, I'll have access to your hosting, your domain and sometimes your Google Business Profile and Search Console. I use that access only for the work you've asked for. The accounts stay in your name, the files are yours, and if we part ways I hand everything over and remove my access. No lock-in — that applies to your logins as much as your code.

How long I keep it

Enquiries that don't go anywhere: I keep them while there's a sensible reason to, then they go. Client records — contracts, invoices, correspondence — I keep for seven years, because tax law says so.

Getting it back, or getting rid of it

Email info@monalux.com.au and ask. You can ask me:

• what I hold about you,
• to correct anything that's wrong,
• to delete it.

I'll do it within a few days, and I won't make you explain why. The only thing I can't delete is a record I'm legally required to keep, and I'll tell you if that's the case.

Keeping it safe

The site runs on HTTPS. My accounts have two-factor authentication turned on. I'm one person with a short list of tools, which is its own kind of security — there are very few places your details can be. No one can promise perfection, but if something ever went wrong I'd tell you rather than hope you didn't notice.

Children

This site is for business owners. It isn't aimed at anyone under 18 and I don't knowingly collect their information.

If you're not happy

Tell me first — email me and I'll sort it out. If you're still not satisfied, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If this policy changes, the new version goes here and the date below changes with it.

Last updated: September 2026