Privacy Policy

This Privacy Policy explains how Julian Wallis ("I", "me", "my") collects, uses, discloses, and protects your personal information when you visit julianwallis.com (the "Website"). I am committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

1. Information I Collect

1.1 Information You Provide

When you interact with the Website, you may voluntarily provide personal information including:

• Name, email address, and company name (via the contact form)
• Email address (when subscribing to the newsletter via Substack)
• Any additional information you include in contact form messages

1.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through cookies and similar technologies:

• IP address and approximate geographic location (city, region, country)
• Browser type, operating system, and device type
• Screen resolution, viewport size, and browser language
• Pages visited, referring URLs, and time spent on pages
• UTM campaign parameters (source, medium, campaign, term, content)

1.3 Cookies and Tracking Technologies

The Website uses the following tracking technologies:

• Custom analytics — I operate a first-party analytics system that tracks page views and visitor interactions. This system collects the data described in Section 1.2.
• Google Analytics — Used to understand overall traffic patterns and visitor behaviour. Google Analytics may set cookies on your device.
• Google Tag Manager — Used to manage and deploy tracking scripts on the Website.
• Facebook/Meta Pixel — Used for advertising measurement and audience building on Meta platforms.
• Essential cookies — localStorage is used to record your cookie consent preference.

You will be asked for your consent before any non-essential analytics tracking is activated. You can withdraw consent at any time by clearing your browser's localStorage for this site.

2. How I Use Your Information

I use the information collected for the following purposes:

• To respond to your enquiries submitted through the contact form
• To deliver the newsletter you have subscribed to
• To analyse website traffic and improve the user experience
• To measure the effectiveness of advertising campaigns
• To detect and prevent spam, abuse, or security threats
• To comply with legal obligations

3. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area, I process personal data based on:

• Consent — for analytics tracking and marketing cookies (you provide this via the cookie consent banner)
• Legitimate interest — for basic website security and spam prevention
• Contractual necessity — to respond to your contact form submissions
• Legal obligation — where required by applicable law

4. Third-Party Services

I use the following third-party services that may process your data:

• Supabase (database hosting) — Stores contact form submissions, visitor analytics, and CMS content. Data is hosted in the AP-Southeast region (Singapore/Australia).
• Resend (email delivery) — Processes email notifications related to contact form submissions.
• Substack (newsletter platform) — Manages newsletter subscriptions and delivery. Substack has its own privacy policy governing how subscriber data is handled.
• Google Analytics & Google Tag Manager (analytics) — Processes visitor data for traffic analysis. Google's privacy policy applies to data collected through these services.
• Meta/Facebook Pixel (advertising) — Processes visitor data for advertising measurement and audience building on Meta platforms.
• Amazon S3 (file storage) — Stores uploaded media files. Data is hosted in the AP-Southeast region.

I may share aggregated, non-personally-identifiable data with analytics and advertising partners to measure and improve marketing effectiveness.

5. International Data Transfers

While I primarily store data in the Asia-Pacific region (Supabase and S3 in AP-Southeast), some third-party services (Google, Meta, Substack, Resend) may transfer and process data in the United States or other countries. These transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) where required by the GDPR.

6. Data Retention

I retain personal information only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions — retained until the enquiry is resolved, then archived for up to 2 years for record-keeping purposes
• Analytics data — retained for up to 26 months to identify trends
• Newsletter subscription data — retained by Substack until you unsubscribe
• Cookie consent preference — stored in your browser until you clear it

7. Your Rights

7.1 Under the Australian Privacy Act

You have the right to:

• Access the personal information I hold about you
• Request correction of inaccurate information
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

7.2 Under the GDPR (EU Visitors)

If you are in the European Economic Area, you also have the right to:

• Request erasure of your personal data ("right to be forgotten")
• Request restriction of processing
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with your local Data Protection Authority

8. Children's Privacy

This Website is not directed at individuals under the age of 16. I do not knowingly collect personal information from children under 16. If I become aware that I have inadvertently collected personal data from a child under 16, I will take reasonable steps to delete it promptly.

9. Security

I take reasonable steps to protect your personal information from unauthorised access, modification, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure database hosting, and access controls. However, no method of transmission over the internet or electronic storage is completely secure.

10. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. I encourage you to review this policy periodically.

11. Contact

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to make a complaint, please contact me through the contact form on this website, or write to:

Julian Wallis Australia