Privacy Notice

Information we handle

• Basic site analytics, such as page views, device/browser information, referring pages, and approximate location signals provided by analytics tools.
• Affiliate and outbound click events, such as which vendor button was clicked and the page it was clicked from. These events help us understand which recommendations readers find useful.
• Information you choose to send by email, including your email address, use case, budget, compliance framework, timeline, and any other details you include.

How we use it

• To improve content, navigation, template coverage, and buying guides.
• To respond to direct requests for shortlist help, compliance template help, or security reports.
• To measure affiliate link performance while keeping rankings editorially independent.
• To protect and maintain the site.

Email newsletter (subscriptions)

• What we collect: only your email address, plus the consent record (the date, time, and IP address captured when you request and when you confirm), which is needed to prove your subscription was lawful.
• Lawful basis: your consent (GDPR Art. 6(1)(a)). For Australian readers, this is a clear opt-in under the Australian Privacy Principles and the Spam Act 2003. We do not add anyone who has not explicitly subscribed.
• Double opt-in: after you submit the form you receive a confirmation email and are only added once you click the link in it. Unconfirmed requests are deleted automatically within 48 hours. We never pre-tick the consent box.
• Where it lives (APP 8 / APP 11): your address is stored on our own Australian-hosted server, in a directory outside the web root, protected by access controls. No third-party email platform holds the list. There is no overseas disclosure of your address.
• Unsubscribe: every email includes a one-click unsubscribe link (no login, no questions), and you can ask us to remove you at any time via hello@aestech.com.au. Unsubscribing stops all newsletter email.
• Retention: we keep your subscription until you unsubscribe or ask for deletion. On unsubscribe your address is deleted; we retain only a one-way hash and the opt-out date, so we can prove when you unsubscribed without keeping your address.
• No selling: we never sell, rent, or share your email address with third parties for their own marketing.

Third-party services

The site uses Google Analytics 4 for traffic measurement (only after you accept analytics in the cookie banner), and affiliate networks for some outbound vendor links, which may be handled by vendor or affiliate-network systems after you leave the site. The email newsletter involves no third party: it runs on our own server. Each remaining provider acts under its own privacy terms.

Cookies and consent choices

• What we set: Google Analytics 4 cookies (_ga and related) are the only analytics cookies on this site, and they are not set until you choose "Allow analytics" in the cookie banner. Decline, and no analytics code loads at all.
• Your choice is remembered in your browser's local storage (a strictly functional record, not a tracking cookie), so the banner does not nag you on every visit.
• Change your mind any time: use the Cookie preferences link in the footer to reopen the banner, or clear the site's data in your browser.
• Strictly necessary storage: the site also uses session storage for anonymous, on-device measurements (for example scroll depth per page) that are only transmitted if analytics is enabled.
• The site is fully readable with analytics declined or blocked.

Retention

Analytics and affiliate reporting are retained in the relevant third-party tools according to their settings. Direct emails are kept only as long as needed to respond, maintain a practical business record, or handle follow-up requests.

Your rights and choices

You can exercise the following rights over your personal information, subject to practical and legal limits:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or out-of-date information.
• Erase your data ("right to be forgotten"), including removal from our newsletter list.
• Withdraw consent at any time, which is as easy as giving it, by unsubscribing or contacting us. Withdrawing consent does not affect processing already carried out.
• Restrict or object to certain processing, and request portability of data you provided, where those rights apply.

To exercise any of these, email hello@aestech.com.au (our privacy contact). We aim to respond within 30 days. We will verify your identity before acting on a request.

Complaints: if you are in Australia and believe we have mishandled your information, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the EU/EEA or UK, you may lodge a complaint with your local data protection supervisory authority.

Related pages

See the affiliate disclosure for how commercial links work and the security policy for vulnerability reporting.