How we look after your information.

DD Design is a brand identity, strategy and website studio on the NSW Coal Coast, run by Drew Kilpatrick. In this policy, “we”, “us” and “our” mean DD Design.

This policy covers our website, dd-design.com.au, including our contact form, and the free Website Clarity Check (“the check”). We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

You can reach us any time at drew@dd-design.com.au.

When you visit the site

Our website host and our analytics tool record technical details of your visit: the pages you view, your device and browser, your approximate location and your IP address. There is more on this under cookies and browser storage.

When you contact us

The name, email address, business name and message you send through our contact form, or by email.

When you run the check

• The website address you enter.
• Three optional answers about the business: what it sells, who it wants as customers and where it works.
• Up to five public pages from that website. We keep the text we read from them, and the results we work out, so we can show you the report.
• A scrambled (hashed) version of your IP address, used to apply fair-use limits. Our records hold only the scrambled value.
• A bot check from Cloudflare (Turnstile), which receives your IP address and browser details to tell people from automated traffic.

When you ask for your report by email

• Your email address and, if you give it, your first name.
• A short note on why you ran the check, if you write one.
• Whether you ticked the marketing box, when, and the wording you agreed to.
• Whether your email was delivered.

If you join our mailing list

Only if you tick the box, your email address and first name go to our mailing list on Mailchimp.

Please don’t put sensitive information, such as health or financial details, in any free-text box. We don’t need it.

• To run the check and show or send you your report.
• To keep the check fair and safe: fair-use limits, spotting abuse and blocking bots.
• To answer your questions and enquiries.
• To send occasional DD Design ideas and studio updates, only if you ticked the box.
• To understand how our website is used, and to improve it.
• To meet our legal obligations.

When you ask for your report by email, we also get a notification with your details, your note and your results. That lets us answer questions about your report and see how the check is being used. Being in that notification does not put you on our mailing list.

We don’t sell your information, and we don’t use it to advertise to you unless you’ve said we can.

One section of your report, the Brand message, is written with the help of an AI model that runs on Cloudflare’s Workers AI service.

It reads the public text of the pages we fetched from your website and, if you filled them in, your three optional business answers. It never sees your name, your email address or your note about why you ran the check.

We check every quote the AI gives against the real page text before we show it, and we label this section as interpretation, not measurement. We don’t use your information to train any AI model.

We share information only with the providers that help us run the site and the check.

Cloudflare

Runs the checker: its servers, database, bot check and AI service.

Resend

Sends your report email.

Mailchimp

Holds our mailing list, only if you opt in.

Webflow

Hosts our website and receives contact-form messages.

Google

Analytics, which shows us how the site is used, plus the fonts and code libraries that load our pages.

Each has its own privacy policy. We don’t sell or rent your information. We may also share it if the law requires us to.

Our providers work globally, so your information may be processed outside Australia, including in the United States and, for report emails, Japan. Our checker’s database is held in Cloudflare’s Oceania region.

We choose providers with care, but we can’t control exactly where they process data.

Your report and the page text we read

30 days, then deleted.

Your email address, first name, note, business answers and scrambled IP value

Blanked from the checker’s records after 30 days. Fair-use counters are deleted within 35 days.

The address of the website that was checked, and the date

Kept in our checker’s records, without your name or email.

A scrambled record of your marketing choice

Kept as proof of your consent. It can’t be turned back into your email address.

Our mailing list

Until you unsubscribe or ask us to remove you.

Enquiries and emails

As long as we need them to help you, and for normal business records.

Analytics and email delivery logs

Held by Google and Resend under their own retention settings.

Everything runs over encrypted (HTTPS) connections. We store IP addresses, and the email addresses in our consent record, only in scrambled form.

Your report link contains a long random secret. Anyone who has the full link can see your report, so treat it like a private link.

No system is perfectly secure. If we learn of a breach that affects you, we’ll tell you, and the regulator where the law requires.

Google Analytics cookies (_ga and _ga_…)

Count visits and show how people use the site. They last up to about 13 months. Google also keeps a small item, _gcl_ls, in your browser storage.

Rainbow mode

If you switch it on in our footer, we remember your choice in your browser. Nothing is sent to us.

Project links

Our project pages keep a short list of project links in your browser session so pages load faster. It holds no personal information.

You can block or delete cookies in your browser settings, or install Google’s opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking them won’t stop the site or the check from working.

• Ask what we hold about you, and ask us to correct it.
• Ask us to delete it. Email us from the address you used and we’ll remove your records and take you off our mailing list. After 30 days your details are already gone from the checker.
• Unsubscribe from marketing at any time, using the link in every email or by writing to us.
• Stop analytics cookies using the options above.

We’ll reply as soon as we can, and within 30 days. If we can’t do something you ask, we’ll tell you why.

Questions? Email drew@dd-design.com.au.

If you’re unhappy with how we’ve handled your information, tell us and we’ll look into it and reply. If you’re still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.