NUDG
Legal

Privacy Policy

Last updated: 25 August 2026 · NUDG Practice · ABN 74 135 966 822

NUDG Practice ("NUDG", "I", "we", "us") is a consulting practice based in Richmond, Victoria. I'm committed to protecting the privacy of personal information collected through the website (nudg.au) and in the course of providing services.

This Privacy Policy explains how I collect, use, disclose, and store your personal information. It has been prepared with reference to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact: [email protected]

1. Information I collect

  • Contact details: name, email address, business name, phone number (if you provide one).
  • Enquiry details: what prompted you to get in touch, your team size, how soon you need help, and anything else you choose to add.
  • Communication content: messages or notes you include when contacting me.
  • Business information: your role, business name, industry (where relevant to the service).
  • Mailing list details: your email address and a record of your consent, if you request a downloadable resource.
  • Technical information: IP address, browser type, pages visited, and how you interact with pages (including mouse movement, clicks and scrolling, captured by Microsoft Clarity). See section 4.

I do not collect sensitive information (such as health information, racial or ethnic origin, or political opinions) through the website.

2. How I collect information

  • Directly from you: when you submit the enquiry form on nudg.au, request a downloadable resource, send an email, or speak with me by phone or in person.
  • Automatically: through Google Analytics 4, Microsoft Clarity, Cloudflare, and server logs when you visit the website (e.g. IP address, browser type, pages visited, and on-page interactions).

3. Why I collect it

  • To respond to your enquiry and arrange a conversation.
  • To send you a resource you asked for, and, where you have consented, occasional practical articles. You can opt out at any time.
  • To deliver the services you've engaged me for.
  • To improve the website and understand how it is used.
  • To comply with legal obligations.

I won't use your personal information for purposes beyond those above without first asking, except where required or authorised by law.

4. Third-party service providers

To operate the website, email delivery, and mailing list, I use the following third-party providers. Some of your personal information is shared with or processed by them:

4.1 Google Analytics 4

Aggregated traffic data (pages visited, approximate location, browser type) is collected through Google Analytics 4 to help me understand how the website is used. Google may process this data on servers outside Australia. Google's privacy practices: policies.google.com/privacy.

4.2 Microsoft Clarity

I use Microsoft Clarity to understand how visitors use the website. Clarity records how you interact with pages, including mouse movement, clicks, scrolling, and the content displayed on screen, and replays those sessions to me in aggregate and individually. Clarity attempts to mask input fields, but you should avoid typing sensitive information into any web form, here or anywhere. Microsoft may process this data on servers outside Australia, including in the United States. Microsoft's privacy practices: privacy.microsoft.com/privacystatement.

4.3 Email delivery (SMTP2GO)

Enquiry notifications and any resource you request are sent via SMTP2GO. Your name and email address are transmitted through their servers to deliver emails. SMTP2GO is based in New Zealand; servers may be located outside Australia. Privacy practices: smtp2go.com/privacy.

4.4 Mailing list (EmailOctopus)

If you request a downloadable resource and consent to receiving occasional articles, your email address and consent record are stored by EmailOctopus, operated by Three Hearts Digital Ltd (London, United Kingdom). Contact data is held on Amazon Web Services infrastructure in Ireland, within the European Economic Area. You can ask to be removed at any time by replying to any email from me or writing to [email protected], and I will remove you promptly. Privacy practices: emailoctopus.com/legal/privacy.

4.5 Cloudflare

The website is served through Cloudflare, which provides DNS, TLS, caching, and protection against malicious traffic. Requests to nudg.au pass through Cloudflare's global network, and Cloudflare processes connection metadata including your IP address. Cloudflare Web Analytics also records aggregate page views and performance measurements. It does not use cookies and does not track individuals across sites. Cloudflare is based in the United States and operates servers worldwide. Privacy practices: cloudflare.com/privacypolicy.

4.6 Hosting, reverse proxy and TLS

The website itself is hosted on infrastructure I operate and maintain in Australia, served over encrypted HTTPS via a reverse proxy I control. Connection logs (which may include your IP address) are retained for security and diagnostic purposes.

4.7 Retired services

Until August 2026 the site offered online booking at book.nudg.au, running on self-hosted Easy!Appointments with calendar syncing. That system has been retired and the subdomain now redirects to the website. No appointment records were held in it at the time of retirement.

5. Data stored outside Australia

As noted above, some of your personal information may be processed or stored on servers outside Australia. Specifically:

  • Google (analytics), which may process data in the United States and elsewhere.
  • Microsoft (Clarity session analytics), which may process data in the United States and elsewhere.
  • SMTP2GO (email delivery), based in New Zealand, with servers that may be located outside Australia.
  • EmailOctopus (mailing list), operated from the United Kingdom, with contact data stored in Ireland.
  • Cloudflare (DNS, TLS and content delivery), based in the United States, operating servers worldwide.

I have taken reasonable steps to ensure these providers handle your information in a manner consistent with the APPs. Overseas providers may be subject to the laws of their respective jurisdictions, and those laws may differ from Australian privacy law. By submitting your information through this website you consent to it being disclosed to the overseas recipients listed above.

6. Data security

I take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Measures include encrypted connections (HTTPS), access controls on stored data, self-hosted infrastructure that I maintain and update, and regular review of security practices. No method of electronic transmission or storage is completely secure; absolute security can't be guaranteed.

7. Data retention

I keep your information for as long as reasonably necessary to fulfil the purpose it was collected for, maintain business records, and comply with legal obligations. When it's no longer needed, I take reasonable steps to destroy or de-identify it.

8. Your rights

You have the right to:

  • Access the personal information I hold about you.
  • Request correction of any personal information that is inaccurate, out of date, incomplete, or misleading.
  • Request deletion where reasonably possible, subject to legal-retention requirements.

To exercise these rights, email [email protected]. I'll respond within 30 days. In certain limited circumstances I may refuse access or correction in accordance with the APPs (e.g. where providing access would pose a serious threat to the life or health of any individual). If I refuse, I'll give you written reasons.

9. Cookies and analytics

The website uses cookies and similar technologies, small files stored on your device, to understand how the site is used. These are set by Google Analytics 4, Microsoft Clarity, and Cloudflare. Clarity also records on-page interactions such as mouse movement, clicks and scrolling, as described in section 4.2. You can manage or disable cookies through your browser settings, and both Google Analytics and Clarity are blocked by most common browser privacy extensions and tracking protection. The website's core content works with them disabled.

10. Complaints

If you believe I've breached the APPs or mishandled your personal information, email [email protected] with the subject line Privacy Complaint. I'll acknowledge within 5 business days and aim to resolve within 30 days.

If you're not satisfied with the response, you can escalate to:

  • Office of the Australian Information Commissioner (OAIC)
  • Website: oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5218, Sydney NSW 2001

11. Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes in practices, technology, or legal requirements. Updates will be published on this page with a revised "Last updated" date.

12. Contact