Privacy

This page explains what personal information ZDNK PTY LTD, trading as BZ Digital, collects through this website, why we collect it, who else handles it and how you can contact us about it. It describes this website specifically. A project engagement may involve additional information, which is covered by that project’s agreement.

What we collect

This website collects personal information from you directly in two places: the enquiry form on our contact page, and the booking form where you choose a meeting time. When you submit the enquiry form we receive:

• your name and email address
• your phone number, if you provide one or ask us to call you
• your business or organisation name and existing website address, if provided
• which services you are interested in, and optionally an approximate budget and timeframe
• your preferred contact method
• the project details you write in the message field

If you book a meeting through this website, we also receive your name, email address, phone number where you give one, the meeting time and the timezone your browser is set to, and anything you write in the notes field.

Please do not include sensitive information (health, financial account details, passwords, credentials or government identifiers) in the enquiry form. If we need anything of that kind during a project we will arrange a more appropriate way to share it.

Why we collect it

We use it to respond to your enquiry, to understand and scope the work you are asking about, and to communicate with you about it. We do not add enquiry addresses to a marketing list, and we do not sell, rent or disclose your information for advertising or profiling.

How it is handled

Enquiries are first stored in a database on the server that hosts this website. Access is restricted to people who need it to respond to and administer enquiries. A notification copy is then delivered to us through a transactional email provider. That provider processes the contents of your enquiry in order to deliver it, and may store it on servers outside Australia. By submitting the form you are consenting to that overseas handling for the purpose of delivering your enquiry to us.

The database record includes the form fields you submit, when the enquiry was created and updated, its email-delivery status, and a one-way cryptographic hash of your IP address. We do not store the raw IP address, your browser user agent, or an email provider response body with the enquiry. After delivery, a copy also sits in our email system alongside our other business correspondence.

Bookings

A booking is stored in the same database as enquiries. The record holds the details above, the meeting time, a reference code, a one-way hash of your IP address, the history of the booking (when it was made, moved or cancelled) and whether our confirmation email reached you. When you book after making an enquiry, the two records are linked so we can see them together.

The confirmation email contains a link to a page where you can change or cancel the meeting. That link is the only credential for it: anyone who has it can change or cancel that booking, which is why we ask you not to post it anywhere public. It is stored on our side only as a one-way hash, so not even we can read it back out of the database. Those pages are never indexed by search engines. You can ask us to delete a booking record the same way you can ask about anything else on this page.

Automatically collected information

When you open a referral link containing an r parameter, we record its referral code, landing page and visit time in our own database. This does not store your IP address or use tracking cookies. The latest referral code stays in this tab for the session and is attached to enquiries and bookings you submit, so we can understand which referrals lead to client enquiries. These referral counts operate independently of optional Google Analytics.

We store your analytics choice in your browser’s local storage. If you decline, no analytics script is loaded. If you accept, Google Analytics may set or read analytics cookies. The enquiry form itself does not use cookies.

One cookie is set by this site, and only if you submit the enquiry form. It is called bz_handoff. It holds a signed reference to the enquiry you just sent. It contains no name, email or phone number. If you go on to book a call, we use the reference to fill the booking form in for you instead of asking you to type it all again. It lasts two hours, it is readable only by our server and not by any script running in your browser, and it is deleted as soon as a booking is made. There is a “Not you? Start fresh” control on the booking page that clears it at any time. It is not used for analytics or advertising and it does not identify you across visits, which is why it is not part of the analytics choice above.

To limit automated abuse of the enquiry form we apply rate limiting. This uses a one-way cryptographic hash of your IP address rather than the address itself, so what is stored cannot be read back as an IP address. It is retained only for the length of the rate-limiting window.

Our hosting provider keeps standard server logs, which typically record IP addresses, request times, requested URLs, referrers and browser user-agent strings. These are used for security and diagnosing faults. We deliberately do not log the contents of enquiry submissions.

Analytics and advertising

Where Google Analytics is configured, we ask before loading it. Until you choose “Accept analytics”, no Google Analytics script or request is made. If you accept, Google may receive information about pages viewed, interactions, browser and device characteristics, and an IP address as part of the network connection. We enable IP anonymisation and use the information to understand aggregate site usage. We do not use advertising trackers. You can withdraw consent below; this prevents future analytics loading on this browser but does not itself delete cookies Google already set.

Who else is involved

The third parties that may handle information from this site are:

• our website hosting provider, which serves these pages and keeps server logs
• Google Analytics, only if it is configured and you explicitly accept analytics
• our transactional email provider, which delivers enquiries to our inbox
• our email provider, where enquiries are then stored and read
• our rate-limiting service, where a hashed identifier is briefly held, where one is configured

How long we keep it

We keep the database record and enquiry correspondence for as long as they are useful for the purpose they were sent for, and for as long as we are required to keep business records. Booking records are kept for the same period and deleted at the same time, because they are part of the same enquiry. Where an enquiry does not lead to work and there is no reason to keep it, we delete the database record and correspondence.

Security

This site is served over HTTPS, form submissions are validated on the server, the enquiry database is not exposed to the public internet, and access to our email, database and hosting accounts is restricted. No system can be guaranteed secure, and we do not claim otherwise. We hold as little personal information as the work requires.

Accessing or correcting your information

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us using the details below and we will respond. If we cannot do what you have asked, we will explain why.

Complaints

If you are concerned about how we have handled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this page

If we change how this website handles personal information, we will update this page and the date at the top of it.

Contact us

Email hello@bzdigital.com.au or phone +61 426 831 215.