1. Who is responsible
Naked Tech is operated by Peter Reginald, ABN 57 221 340 918, a sole trader trading as Digital Sanctum and Naked Tech (“Naked Tech”, “we”, “us” or “our”). This policy applies to personal information handled through nakedtech.au, enquiries, bookings, service delivery, invoices and related communications.
2. Information we collect
Depending on how you deal with us, we may collect:
- your name, email address, phone number and service address;
- your enquiry, the technology problem you describe and your communication preferences;
- booking, quote, invoice, payment-status and transaction records;
- concise service notes about the agreed work, devices, products and outcomes;
- correspondence, feedback, access or correction requests, and complaints;
- website request information such as IP address, date and time, requested page, browser and device information used for delivery, reliability and security; and
- if you enable optional tracking, the analytics or advertising information described below.
Please do not send passwords, authentication codes, recovery material, banking PINs, card security codes, government identifiers or other sensitive information through an enquiry form. During a service, you enter credentials yourself. We do not record, photograph, copy, transmit or retain them.
3. How we collect information
We usually collect information directly from you when you use the contact form, call, email, request or accept a quote, book a service, receive a service, pay an invoice or make a privacy request. Website infrastructure also receives ordinary technical request information when your browser connects. If another person makes an enquiry for you, we may receive your details from that person and will use them only where it is reasonable to do so.
You can browse the public website without telling us your name. You may use a preferred name for a preliminary enquiry, but we may need accurate contact, address and billing details before confirming or delivering a service. If you do not provide enough information, we may be unable to respond, assess suitability, confirm a booking or provide the requested service.
4. Why we use information
We use personal information where reasonably necessary to:
- respond to enquiries and assess whether a service is suitable;
- quote, schedule, provide and follow up agreed services;
- communicate about appointments, safety, products and service outcomes;
- issue invoices, record payments and meet tax, accounting and other legal obligations;
- handle feedback, disputes, consumer-law matters and privacy requests;
- protect customers, systems and the business from misuse, fraud and security threats; and
- measure website use or advertising campaigns when you have enabled the relevant optional tracking category.
Submitting a service enquiry is not a subscription to unrelated email or SMS marketing. If we offer optional marketing in future, we will use an appropriate consent and unsubscribe process.
5. Contact form and browser storage
The embedded contact form is delivered from forms.digitalsanctum.com.au through Digital Sanctum’s Sanctum Forms system. It asks for your name, email address and message, with a phone number optional. To operate and trace the enquiry, Naked Tech attaches the landing and form page paths, relevant service category, browser and server timestamps, a random correlation code, and whether supported attribution signals were present, missing, withheld or unavailable. Landing and referring URLs have their query strings and fragments removed. This operational context is separate from the answers you enter and does not include your raw network address.
If Analytics is enabled, the form context may also include the referring site and the campaign parameters utm_source, utm_medium, utm_campaign and utm_content. If Advertising is enabled, it may include a supported advertising click identifier such as gclid or fbclid. Without the matching choice, the value is not attached; only its withheld state may be recorded. Other URL parameters are not passed.
As you type, the form saves an unfinished draft in local storage for the forms.digitalsanctum.com.au site in that browser. A successfully submitted draft is cleared. If you do not submit it, the draft remains until you or your browser clears that site’s stored data. The form also stores its colour-theme choice locally.
Naked Tech separately stores your colour-theme choice and a record of your tracking preferences on nakedtech.au. The tracking record is necessary to remember an acceptance or rejection; rejecting optional tracking does not itself load Google Analytics or Meta Pixel.
A random enquiry-correlation code and the bounded operational context are kept in session storage so the same browser tab can carry the original landing context to the form. The session copy normally expires when that tab or browser session ends. Campaign and click-identifier values are not put into that session record before the matching optional choice and are removed if that choice is rejected or withdrawn.
To protect the enquiry form from automated misuse, Sanctum Forms may compare keyed pseudonyms derived from selected identity fields and the request network address with recent submissions. The security evidence does not contain the raw identity values or raw network address, is kept separately from optional tracking, and is scheduled for deletion after 30 days. A suspicious submission may be held in quarantine and will not trigger an owner notification, lead webhook or advertising-conversion event.
When the risk rule requires additional verification, the form loads Cloudflare Turnstile. Cloudflare may process security signals such as IP address, TLS fingerprint, browser user-agent, site key and form origin to distinguish people from bots; Naked Tech does not send Cloudflare the words, email address, phone number or other answers entered in the form. Turnstile is a necessary security control rather than Analytics or Advertising, so it may run even when optional tracking is rejected. See Cloudflare’s Turnstile Privacy Addendum.
6. Optional analytics and advertising
Analytics and advertising tracking are off until you select the relevant category. The choices are separate and neither checkbox is preselected.
| Category | Provider and information | Purpose |
|---|---|---|
| Analytics | Google Analytics 4 may receive page and interaction events, campaign information, predefined search-demand categories, approximate location derived from IP address, and browser or device information. It may set or read analytics cookies and similar identifiers. | Understand visits, service-page use, privacy-safe service selection, unmet service demand, referral interest, phone-link activations and successful enquiries so we can improve the site and service offering. |
| Advertising | Meta Pixel may receive page views, service-view, phone-contact and successful-enquiry events, campaign information, IP address, and browser, device, cookie or similar identifier information. | Measure advertising performance and understand which campaigns lead to enquiries. |
We do not intentionally send Google or Meta the text you enter in the contact form, your email address, phone number, service address or the enquiry-correlation code through these website events. A successful-enquiry event may include a separate opaque event identifier to prevent or detect duplicate conversion reporting. Their own handling is described in the Google Privacy Policy and Meta Privacy Policy.
Site-search words stay in your browser and are not sent to Naked Tech, Google or Meta. If Analytics is already enabled, Google Analytics may receive only a predefined service or referral category, the result state, the search entry point, the current page path, an allowlisted internal service destination and whether you expressed service or referral interest. It never receives the words you typed, and a search made before consent is not queued for later reporting.
You can accept, reject or change these categories at any time using . Turning off an active category reloads the page and prevents that provider from loading on later pages. It does not recall information already sent to the provider; you can also clear existing cookies and site data in your browser.
7. When we disclose information
We do not sell or rent customer lists. We may disclose only the information reasonably needed to service providers that help us host the website and forms, protect the form through Cloudflare Turnstile, operate business email and storage, issue invoices, process a payment method you choose, maintain systems, or provide professional advice. We may also disclose information when authorised or required by law, to protect safety or legal rights, or with your direction or consent.
Google receives analytics information only when Analytics is enabled. Meta receives advertising-event information only when Advertising is enabled. Products, internet services or accounts you ask us to configure may have their own privacy terms; we will ask you to review those terms where relevant rather than accepting optional data uses for you.
8. Overseas processing and disclosure
Some technology providers use global infrastructure. Cloudflare may process the security signals used by Turnstile in the United States, European Economic Area or other locations in its global network. If you enable Analytics or Advertising, information may be disclosed to or processed by Google or Meta in the United States and other countries where those providers and their service providers operate. Other hosting, communications, storage, security or payment suppliers may also process information outside Australia. Provider locations and subcontractors can change; you may ask us for the current information reasonably available about providers relevant to your information.
9. Retention and security
We retain personal information only while it is reasonably needed for the purpose collected, customer support, security, a dispute, or legal and record-keeping obligations. Tax, invoice and transaction records may need to be retained for at least five years. When information is no longer needed and no law requires it to be kept, we take reasonable steps to delete it or de-identify it. Backup copies may remain inaccessible until they are overwritten through the normal backup cycle.
Form correlation and attribution context follows the enquiry record rather than becoming a separate marketing profile. Quarantined or spam enquiries are scheduled for deletion after 30 days; actioned enquiries are scheduled for deletion 730 days after closure, unless a legal hold or another lawful record-keeping need applies. Notification content is normally scrubbed after 30 days and its delivery metadata, including the correlation code, deleted after 90 days.
We use reasonable technical and organisational safeguards appropriate to a small service business, including protected business accounts and access controls. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Tracking providers retain information under their own policies and our available account settings.
10. Access, correction and deletion requests
You may ask what personal information we hold about you, request access or correction, or ask us to delete information that we no longer need to retain. Contact the Privacy Officer at privacy@nakedtech.au or call 03 7068 5422. We may need to verify your identity. If a law permits or requires us to refuse or limit a request, we will explain that where required.
11. Privacy questions and complaints
Send a privacy question or complaint to privacy@nakedtech.au with enough detail for us to investigate. We will acknowledge it and aim to provide a substantive response within 30 days. If you are not satisfied, and the Privacy Act applies to the matter, you may be able to complain to the Office of the Australian Information Commissioner. The OAIC generally expects you to complain to the organisation first and allow it time to respond.
12. Changes to this policy
We may update this policy when our information handling changes or the law requires it. The effective date at the top identifies the current version. Material changes apply from publication and do not authorise a new use of information where further notice or consent is required.