Privacy Policy

1. Introduction
Welcome to my portfolio. Your privacy is important to me. This Privacy Policy explains how I collect, use, disclose, store, secure, and manage your personal information when you visit my website www.nicoledownes.au or contact me via the contact form provided.

By using this site or submitting information through it, you accept the practices described in this policy.

2. Who I am and my contact details

  • Business name: Nicole Downes

  • ABN / ACN (if applicable): 49 616 366 294

If you have questions or concerns about the handling of personal information, please reach out via the contact form provided.

3. What kind of personal information is collected
This site may collect the following types of personal information:

Contact details, full name, email address, phone number, messages you send via the contact form, IP address, browser type, device type, pages visited, date/time stamps, and tracking data via cookies, Google Analytics or similar services.

This site will only collect personal information that is reasonably necessary for the purposes described in this policy.

4. How your personal information is collected
This site collects personal information in several ways, including:

  • When you voluntarily submit it (e.g. via the contact form)

  • Via cookies, analytics or tracking tools when you browse the site.

  • Automatically via server logs or web hosting/website backend systems

If your information is collected indirectly (e.g. via analytics), I will endeavour to inform you (for example via a cookie banner or notice).

5. Purposes for which your personal information is used
Your personal information may be used for the following purposes:

  • To respond to your enquiries, provide you with information or services you have requested.

  • To send occasional communications (if you opt in) about our services, updates, or news.

  • To understand how our site is used and improve its performance and user experience.

  • To comply with legal obligations, prevent fraud or misuse, and enforce our legal rights.

I will not use your personal information for purposes inconsistent with the ones specified, without your consent (unless required by law).

6. Disclosure to third parties & overseas transfers
Your personal information may be disclosed to:

  • Service providers who assist me (e.g. web hosting, email processing, analytics, CRM).

  • Professional advisers (e.g. legal, accounting) or insurers.

  • Government, regulatory, law enforcement or security agencies, where required by law.

If your personal data is transferred overseas (for example, to servers located in other countries via third-party cloud or analytics providers), I will:

  • Only transfer it to jurisdictions with adequate data protection laws or under contractual safeguards

  • Inform you of the likely countries involved

  • Implement reasonable measures to protect the data (encryption, contractual terms, etc.).

7. Cookies, tracking & analytics
This site may use cookies and tracking technologies (e.g. Google Analytics) to:

  • Understand how visitors use our website

  • Improve website performance and content

  • Tailor user experience

You can control or disable cookies via your browser settings, though this may limit certain features of the site.

8. Data security
Reasonable steps are taken to protect your personal information from misuse, interference, loss, unauthorised access or modification. These measures may include:

  • Secure servers, firewalls and intrusion detection.

  • Encryption (where appropriate)

  • Access controls and staff training

  • Regular audits and security reviews

However, no system is perfect. If a data breach occurs and is likely to result in serious harm, I will comply with the Notifiable Data Breaches scheme under the Privacy Act, and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

9. Data retention
Personal information will be retained only for as long as needed for the purposes for which it was collected, or as legally required. When no longer needed, it will be securely destroyed or the data de-identified.

10. Access, correction & deletion
You may request access to, update, correct, or delete any personal information held about you (subject to legal exceptions). To make such a request, please contact us via the contact form provided and I will respond to your request in a timely manner (generally within a reasonable period).

11. Opting out & unsubscribing
If you receive communications from me (e.g. newsletters or updates), you may opt out at any time by:

  • Clicking an “unsubscribe” link in the email

  • Contacting me directly and requesting removal

I will promptly cease using your personal information for those communications once you opt out.

12. Complaints & disputes
If you believe your personal information has been mishandled, or that this Privacy Policy has been breached, please contact me first so I can investigate and attempt to resolve your complaint.

If you remain unsatisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). Their contact and further information is available on their website (privacy.gov.au).

13. Changes to this Privacy Policy
I may update or revise this policy from time to time (e.g. when business or technology practices change). When I do, I will:

  • Update the “Last updated” date at the top

  • Publish the revised version on our site

  • Use reasonable steps to notify previous contacts or users if material change occurs

14. Effective date
This policy is effective as of 3 October 2025, and was last updated on 3 October 2025.