// legal

Privacy Policy

Last updated: 7 November 2026

The short version: I only collect what you choose to send me: your name, email and message when you make an enquiry, and your email if you join the mailing list. There are no analytics, no advertising trackers and no tracking cookies. I never sell your information. You can ask me to see, correct or delete it at any time.

1. Who I am

dkvb.dev is the freelance web and app development business of Daniel van Blerk, a sole trader based in the Herbert River region, Queensland, Australia (“I”, “me”, “my”). This policy explains how I handle personal information collected through dkvb.dev and in the course of providing my services.

I aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you are in the EU or UK, this policy also explains the legal grounds I rely on under the GDPR / UK GDPR.

Contact for any privacy question or request: dkvb.dev@gmail.com.

2. What I collect

Information you give me

Enquiry forms: your name, email address and message. Optionally, the service, project type, industry, business type or budget range you select, and whether you ticked the mailing-list box.
Mailing list: your email address and the date you signed up.
Clients: if we work together, the details needed to quote, deliver and invoice the work, such as business name, contact details, project materials and payment records.

Information collected automatically

Hosting logs: the site is hosted on GitHub Pages. GitHub may record technical data such as your IP address for security and to keep the service running. I don't have access to those logs and don't use them to identify you.
Form processing: when you submit a form, the form processor (Formspree) receives the details you entered plus technical data such as your IP address, which it uses to deliver the message and filter spam.
Browser storage: a small note in your browser that remembers your privacy choice and, if you allow it, whether you've closed the mailing-list pop-up. See the Cookie Policy.

I don't use analytics, advertising pixels, social-media trackers or fingerprinting, and I don't collect sensitive information. Please don't include sensitive information (for example health or financial details) in a message.

You can contact me without giving your real name if you prefer, but I'll need a working email address to reply.

3. How I use it

To reply to your enquiry and prepare a quote (GDPR basis: steps at your request before entering a contract).
To deliver, support and invoice work for clients (contract and legal obligations).
To send the dkvb.dev mailing list, only if you opted in (consent). Every email identifies me and includes a working unsubscribe link, as required by the Spam Act 2003 (Cth).
To keep the site and forms secure and free of spam (legitimate interests).

I won't use your details for any other purpose without your consent, unless the law requires or allows it.

I never sell or rent personal information. I share it only with the service providers I need to run the business:

Provider	What for	Where data may be held
Formspree	Receiving website form submissions and forwarding them to my inbox	United States
Google (Gmail)	My business email, where enquiries arrive and replies are sent	United States and other countries
GitHub (GitHub Pages)	Hosting the website	United States

Because these providers are overseas, your information may be stored or processed outside Australia. I choose established providers with published security and privacy commitments. If I start using an email-newsletter service or another provider that handles your information, I'll update this list.

I may also disclose information if required by law, or to professional advisers (such as an accountant) bound by confidentiality.

5. How long I keep it

Enquiries that don't go ahead: deleted within 2 years of our last contact, or sooner on request.
Client and invoicing records: kept for 5 years, as required by Australian tax record-keeping law.
Mailing list: until you unsubscribe. After that, I keep your email on a suppression list so you aren't re-added by mistake.

6. Security

The site is served only over HTTPS, uses a strict Content Security Policy, and loads no third-party scripts. I take reasonable steps to protect the information I hold, and I'm the only person with access to it. No system is perfectly secure. If a data breach is likely to cause you serious harm, I'll notify you and, where required, the Office of the Australian Information Commissioner (OAIC).

7. Your rights and choices

Access and correction: ask for a copy of the information I hold about you, or ask me to fix it.
Deletion: ask me to delete your information, unless I have to keep it by law.
Unsubscribe: use the link in any mailing-list email, or email me. I'll process it within 5 business days.
Withdraw consent: at any time, without affecting anything done before you withdrew it.
EU/UK visitors may also object to or restrict processing, ask for data portability, and complain to their local data protection authority.

Email dkvb.dev@gmail.com to make a request. I'll respond within 30 days, at no charge.

8. Complaints

If you have a concern about how I've handled your information, please email me first and I'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

9. Children

This site and my services are intended for adults and businesses. I don't knowingly collect personal information from anyone under 16. If you believe a child has sent me their details, contact me and I'll delete them.

10. Other websites

The site links to other sites, such as GitHub, LinkedIn, Figma and client websites. Those sites have their own privacy practices, which this policy doesn't cover.

11. Changes to this policy

I'll update this page if my practices change, and change the “Last updated” date at the top. If a change is significant, I'll highlight it on the site or tell mailing-list subscribers.