Privacy policy

Enquiry forms collect your name and email address, and a business name for business listings and digital-service enquiries. You may also provide a topic, message, business location or relevant link. Email correspondence may contain the same kinds of information.

Newsletter signup records your email address, consent and subscription status. Information sent about a business or local story may be used to research and prepare editorial content. Please avoid including sensitive personal details that are not needed.

Chatswood Edit uses contact details to review and respond to enquiries. Business information may be checked for a listing or editorial update. Sending an enquiry does not subscribe you to a newsletter or automatically publish a listing or your correspondence.

An enquiry is saved privately and emailed to the Chatswood Edit inbox so it can be handled. The owner is the sole person responsible for enquiries, privacy requests and complaints, and the only person who routinely accesses enquiry records and the inbox. The service providers described below process information to operate these services. Your email address is included as the reply address. Delivery records help identify notifications that fail or need attention; they contain message identifiers, delivery status and timestamps.

Technical checks use request timing and protected identifiers derived from network and email information to limit spam and duplicate submissions. Hosting and email providers may also process technical logs, including IP addresses, for security and service operation.

Newsletter records are used to maintain the subscriber list and respect unsubscribe requests. Signing up does not require an account or an email confirmation click.

Vercel hosts the website. Supabase stores site records, private enquiries, delivery records and newsletter consent. Resend delivers enquiry notifications and manages the newsletter contact list. Google Gmail holds enquiry notifications and subsequent email correspondence.

The live website uses Google Analytics to understand how the site is used. This can involve cookies or similar technologies and information about pages visited, devices and browsers. You can manage cookies through your browser settings. The current Analytics property retains event-level data for two months and user-level data for 14 months, with the user retention period resetting on new activity. These settings do not limit standard aggregated reports.

Service providers may process information outside Australia. The enquiry database is hosted in Sydney, Australia. Resend states that stored email data is held in the United States. Vercel may process data in the United States and other countries where it or its providers operate; Google also processes information on servers around the world. A database hosted in Australia does not mean all provider processing occurs here.

We use the following retention periods. Database cleanup runs daily, while case closure, inbox deletion and exceptions require the owner’s review. Information is deleted or de-identified when it is no longer needed, subject to applicable legal obligations and the separate provider retention limits below.

• Ordinary enquiries and related email correspondence: up to 12 months after the enquiry is closed.
• Spam and unsolicited submissions: up to 30 days after identification, unless a limited record is needed to investigate ongoing abuse.
• Delivery-monitoring records: up to 90 days after successful delivery or resolution of a delivery problem.
• Privacy requests and complaint files: up to 24 months after closure, keeping only what is needed to record the issue, decision and action taken.
• Newsletter details: while subscribed. Minimum consent, unsubscribe and suppression records may be retained for as long as needed to honour preferences, with an annual review.
• Publication permissions and essential verification records: while the relevant material remains published, with an annual review of what is still needed and a further review when material is removed.

An enquiry is closed when it has been dealt with, declined or withdrawn. An inactive enquiry normally closes after 90 days without meaningful contact, unless a follow-up is still agreed. You can request earlier deletion.

Records needed for a legal obligation or an active dispute may require a different period. Any exception should have a recorded reason and review date. Paid-service, accounting and contractual records need a separate schedule appropriate to those obligations.

Deletion must cover the enquiry store and related inbox copies. Provider logs and backups expire separately. Resend documents 30-day email and log retention on its standard plans and a seven-day backup period. Gmail normally retains messages in Trash for 30 days unless they are permanently deleted sooner; Google states that encrypted backup copies can remain for up to six months, and deletion may take longer for specified operational or legal reasons. Vercel currently provides a one-hour runtime-log window on the site’s hosting plan; this is not a promise that every category of provider data is erased within an hour. Operational backups and provider-held copies follow separate recovery and expiry arrangements. Mailbox and provider handling must be completed before an end-to-end deletion timeframe can be confirmed. A restored backup must not put information back into routine use after an accepted deletion request.

You can contact us to request access to, correction of or deletion of information you have provided, or to ask to leave the newsletter list. Limited consent, unsubscribe and suppression records may need to be retained to respect your preferences.

Send a request or privacy concern to chatswoodedit@gmail.com. Include enough detail to identify the information concerned, without sending identity documents in your initial message. Any identity check should be proportionate to the request and protect information from disclosure to the wrong person.

Our target is to acknowledge a request within two business days and give a substantive response within 30 calendar days. If information cannot be provided, changed or deleted, the response should explain why and identify any relevant review options.

Use the same email address to explain what happened, when it happened and the outcome you are seeking. There is no charge to make a complaint. Suspected unauthorised access or disclosure should be identified clearly so it can be assessed promptly.

Our complaint process is to acknowledge the complaint within two business days, review the relevant records and provide a written response within 30 calendar days. The response should explain the findings and any corrective action. If more time is needed, we will explain the delay before the target date, give a revised date and keep you updated.

If you remain dissatisfied, or have not received a response after 30 days, you can consult the Office of the Australian Information Commissioner about available options. Its ability to investigate depends on whether the matter and organisation fall within its jurisdiction. The available external review options depend on the applicable law and the nature of the concern.

Links to sources, businesses and service providers take you to websites with their own information-handling practices. Review their policies when using those services.