Privacy policy

What we collect

This website collects personal information in two places: the enquiry form on our contact page, and a phone call to our published number, which our own AI receptionist answers and which has its own section below. When you submit the form we receive:

• Your name
• Your work email address
• Your company name
• Your phone number, if you choose to give it
• The service you selected
• What you told us you would like to automate
• Anything you added in the optional "anything else" field
• Whether an AI assistant sent you to us, if you chose to tell us, so we know which assistants are sending people our way
• Whether you ticked the boxes for getting started soon and for receiving occasional tips, and when you ticked them
• The page you arrived on, the page that linked you here, and any campaign tags in the address, so we know which page led to your enquiry
• The version of this policy that was showing when you submitted, and the date and time you submitted

What we do not collect

We do not ask for payment details, identity documents or any sensitive information as defined by the Privacy Act. Please do not include information of that kind in the free-text fields.

If you email us directly, we hold whatever you choose to tell us in that message. Phone calls are described in the next section.

Phone calls to our published number

Calls to 0483 982 033 are answered by our own AI receptionist, and it says so in its first sentence. The call is transcribed as it happens so a person can follow up. It is not recorded: no audio is stored by us or by the voice platform, and nobody can play a call back. If you give the receptionist an email address, we send one short acknowledgement to it, the same as for the form, and nothing else automatically. If you would rather not be transcribed, say so and the receptionist takes only your name and number for a callback. Nothing else you said is kept: any details already given are cleared, and there is no transcript or summary.

From a call we keep:

• The number you called from, when the call started and ended, and how long it lasted
• A transcript of the conversation, which a scheduled job deletes after 90 days
• A short summary of what you asked and what happened, and any details you gave the receptionist, which are the details the enquiry form above asks for, without its optional question about an AI assistant
• Whether a strategy call was booked, and for when

Where it goes

A form submission goes to one place, and one email service then tells us about it. A phone call passes through one more, the voice platform, before it lands in the same place:

• Supabase, the database platform where we store enquiries and call records so we can reply to them and keep track of who we owe an answer. The database itself checks what the form sends, limits how often one address can submit, and keeps a record of every email it asks to be sent.
• Resend, the email delivery service that sends us a notification with your enquiry and sends you one short acknowledgement. That acknowledgement contains none of what you typed, only that we received it and when to expect a reply.
• Vapi, the voice platform our phone receptionist runs on. During a call it turns your speech into text, produces the replies you hear, and writes the transcript and summary that go into the database. It uses its own speech, voice and language-model providers to do that, in real time, and keeps no recording.

Overseas disclosure

Supabase, Resend and Vapi are overseas providers and store or process your information on servers outside Australia, in the United States. By submitting the form, or by continuing a call after the receptionist has said what it is, you consent to that disclosure. Nothing you submit through the form or say on a call is sent to any other third party.

How we use it

We use your information to reply to your enquiry, arrange and run your strategy call, and prepare a proposal if you ask for one.

When you submit the form we send you one automatic acknowledgement so you know it arrived. We send nothing else automatically.

If you ticked the box asking for occasional practical AI tips, we record that consent with its date, and we may send you those tips once there is something worth sending. Every such email will say how to stop them, and you can ask us to stop at any time by replying to any message or emailing us.

We do not use your information to train AI models, and we do not use it for automated decision-making.

Cookies and tracking

This website sets no cookies of its own. It runs no analytics, no advertising pixels and no tracking scripts, so we cannot see who you are or which pages you read unless you contact us. There are no third-party scripts on the site.

The one thing the site remembers on its own is the page you arrived on, the page that linked you here, and any campaign tags in the address. That is held in your browser for the length of your visit, sent to us only if you submit the enquiry form, and forgotten when you close the tab. It is not a cookie and it is never sent anywhere else.

Our web host keeps standard server logs, which include the IP address making each request, as part of running and securing the site.

Spam protection

The enquiry form contains a hidden field that people never see and automated scripts tend to fill in. If it is filled in we discard the submission. Nothing about you is collected or sent by that check. The database also refuses more than a few submissions from one email address in a short time, and more than a set number from everyone in an hour; if that ever stops a real enquiry, the form says so and gives our email address.

How long we keep it

We keep enquiries and call records for as long as we may reasonably need them for the relationship they started, and no longer than seven years, which covers our record-keeping obligations. Call transcripts go sooner, after 90 days; the summary and your details stay with the enquiry. A scheduled job in the database deletes anything past those limits. You can ask us to delete yours sooner and we will, unless we are required by law to keep it; when we do, we keep only a record that a deletion happened, not what was deleted.

Security

The site is served over HTTPS, so what you type into the form is encrypted in transit. Access to stored enquiries is limited to the people at Durbacti who need it to do their job. No system is perfectly secure, but if a breach ever put you at likely risk of serious harm we would notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Getting a copy, a correction or a deletion

Email info@durbacti.com and tell us what you would like. You can ask for a copy of what we hold about you, ask us to correct anything wrong, or ask us to delete it. We will respond within 30 days and we do not charge for this.

If you are not happy with how we handled your request you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we change how we handle personal information we update this page, and the date at the bottom changes with it. That date is generated from the build of this site, so it always reflects when this page was genuinely last edited.