Privacy policy

Who we are

DataBytes AI is an independent data, analytics and AI advisory operated as a sole trader (ABN 58 751 917 022), based in Canberra, ACT. In this policy, "we", "us" and "our" refer to DataBytes AI, and "personal information" has the meaning given to it in the Privacy Act 1988 (Cth).

If you have any question about this policy or about how your personal information is handled, you can contact us at hello@databytesai.com.au.

No tracking cookies, by design

This is a deliberate choice, not an oversight. This website sets no tracking or advertising cookies, runs no third-party analytics (no Google Analytics, no advertising pixels, no social media trackers), and does not build a profile of who visits or what they read.

For a practice whose entire premise is that organisations should own and control their own data, quietly tracking the people who come to read about it would be a contradiction. So we do not. You can read this site without being followed around it, and without a consent banner interrupting you to ask permission for tracking that is not happening.

The site is served as static pages from a reputable hosting provider. That provider may automatically log standard technical information (such as IP addresses and requested pages) for the short-term purposes of delivering the site, keeping it secure, and defending against abuse. That is ordinary infrastructure logging common to essentially all websites; it is not used by us to identify or profile individual visitors, and we do not combine it with anything else.

What we collect, and when

Because there is no tracking and no analytics, the only personal information we hold is what you choose to send us directly. In practice that means:

When you email us. If you contact us at our email address, we receive whatever you put in that message, typically your name, your email address, your organisation, and whatever you tell us about what you are trying to do. We use it to reply to you and to discuss a possible engagement.

When we work together. If we go on to work together, we will hold the information reasonably needed to run that engagement and meet our legal and tax obligations, such as contact details and billing information. The scope of that is set out in the agreement for the specific engagement.

We do not ask for, and would prefer you not send, sensitive information through an initial email. If a project involves sensitive or culturally significant information, including Indigenous data, how that information is handled is governed by the specific engagement agreement and the relevant data governance and ICIP protocols agreed with you, not by this general website policy.

How we use it

We use the personal information you send us only for the purpose you sent it for, and directly related purposes you would reasonably expect. That means responding to your enquiry, scoping and delivering work you have asked us to do, issuing invoices, and meeting our record-keeping obligations. We do not sell personal information, and we do not use it for advertising or send marketing you did not ask for.

Who we share it with

We do not sell or rent personal information to anyone. We only disclose it where it is necessary and expected: to the small number of service providers we rely on to operate (for example, email and website hosting), where you have asked us to, or where we are required to by law. Where a service provider is involved, we take reasonable steps to use reputable providers and to limit what they can access to what is needed.

A note relevant to our work: the client platforms we build are designed to run in infrastructure the client owns and controls. Data held in those systems belongs to the client and is governed by the engagement agreement. It is not covered by this website policy, and it does not flow back to us as a matter of course.

Where information is stored

We use a small, deliberately chosen set of tools to run the practice. Some of these providers may store or process data outside Australia. Where that is the case, we take reasonable steps to choose providers with appropriate safeguards. If cross-border storage of your information matters to your organisation, tell us, we are happy to talk through specifics, and client project infrastructure can be located in Australia by design.

Keeping information secure

We take reasonable steps to protect the personal information we hold from misuse, loss, and unauthorised access, using measures proportionate to a small practice. No method of transmission or storage is completely secure, but we do not hold large volumes of personal information, and we do not retain it longer than we need it for the purpose it was provided or for as long as the law requires.

Accessing or correcting your information, and complaints

You can ask us what personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete it where we are not required to keep it. Email hello@databytesai.com.au and we will respond within a reasonable time.

If you are concerned about how we have handled your personal information, please raise it with us first so we can try to put it right. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au/privacy/privacy-complaints.

Changes to this policy

If we change how the site or the practice handles personal information, we will update this page and the "last updated" date above. If we ever introduce something that does involve tracking or analytics, for example a privacy-respecting, cookieless traffic measure, we will say so here plainly and describe what it does before relying on it.