Privacy policy

Karnowski Design is the design and web practice of Adrian Karnowski, based on the Sunshine Coast, Queensland. This policy explains what personal information is collected through this website and the client reporting dashboard, why it is collected and how it is handled. It is written to meet the Australian Privacy Principles under the Privacy Act 1988 (Cth).

If you have any question about it, email adrian@karnowski.com.au.

Browsing the site does not require you to identify yourself and the site sets no tracking or advertising cookies.

Contact form. When you send an enquiry, the name, email address and message you enter are delivered to me by email through Web3Forms, a form delivery service. That information is used only to reply to you and to discuss the work you have asked about. It is not added to a marketing list.

Site analytics. The site uses Vercel Analytics and Speed Insights to measure page views and load performance. These are cookieless and record aggregated figures such as page, country and device type. They do not identify individual visitors.

Hosting and delivery. The site is hosted on Vercel and serves images through ImageKit. Like any web host, these services keep standard server logs, including IP address and browser type, for security and reliability.

Clients of Karnowski Design can sign in to a private reporting dashboard at karnowski.com.au/vip using an access code I issue. It is not open to the public.

Session cookie. Signing in sets a single cookie that keeps you logged in for up to 90 days. It holds a signed reference to which client you are and nothing else. No other cookies are set.

Google data. The dashboard shows reporting drawn from Google Search Console, Google Analytics 4 and Google Ads, for accounts each client has already granted me access to as part of their engagement. That data is retrieved from Google when a report is viewed, held in a short lived server cache, and is not written to a database or kept beyond the reporting period. Each client sees only their own accounts.

Third party SEO data. Some sections use market data from DataForSEO, such as competitor rankings. This is information about websites and search results, not about individuals.

Karnowski Design connects to Google services through Google sign in in order to read Search Console, Analytics and Google Ads reporting for client accounts. That access is read only. It is used solely to prepare and display performance reporting for the client the data belongs to, and for keyword and content research carried out on their behalf.

Google data is never sold, never shared with any other client or third party, never used for advertising to anyone, and never used to build or train any model. Use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

A client can withdraw that access at any time by removing Karnowski Design from their Google account permissions, or by emailing me to ask.

Enquiry emails and project correspondence are kept in my business email and file storage for as long as needed to complete the work and meet record keeping obligations. Access credentials for the dashboard and for Google services are held only in encrypted server configuration and are never shared.

All traffic to this site and the dashboard is encrypted with HTTPS.

Personal information is not sold or rented. It is shared only with the services named above, and only to the extent needed for them to do their job: Web3Forms to deliver enquiries, Vercel to host the site, ImageKit to serve images and Google to provide reporting data. Each operates under its own privacy policy.

Some of these providers store data outside Australia, mainly in the United States.

You can ask to see the personal information I hold about you, ask for it to be corrected, or ask for it to be deleted. Email adrian@karnowski.com.au and I will respond within a reasonable time. If you are not satisfied with the response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

This policy may be updated when the site or the services behind it change. The date at the top shows when it was last revised.