Privacy Policy.
Last updated: June 2026
Baxoptimized (ABN 43 943 532 568), operated by Baxter Hanley, is committed to protecting the privacy of clients, website visitors, and individuals whose personal information we may handle in the course of delivering our services. This Privacy Policy explains what information we collect, how we use it, how we store it, and your rights in relation to that information.
This policy applies to the Baxoptimized website (baxoptimized.com.au), all client communications, and all services delivered by Baxoptimized including website design, hosting, maintenance, local SEO, Google Business Profile management, and content creation.
By using our website, engaging our services, or providing us with personal information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.
Information We Collect
1.1 Information You Provide Directly
We collect personal information that you voluntarily provide to us, including:
Your name, business name, ABN, email address, phone number, and physical address when you enquire about or engage our services
Content and materials you provide for your website project, including photos, logos, written copy, testimonials, and business information
Login credentials and account access details you share with us for the purpose of managing your website, domain, Google Business Profile, Google Analytics, Google Search Console, or other platforms
Payment information (processed through our invoicing and payment platforms — we do not store credit card details directly)
Communications between you and Baxoptimized, including emails, messages, and notes from discovery calls or meetings
1.2 Information Collected Automatically
When you visit the Baxoptimized website, certain information is collected automatically through standard web technologies:
Google Analytics 4 (GA4) — collects anonymised data about how visitors interact with our website, including pages visited, time on site, device type, browser, screen resolution, approximate geographic location (city/region level), and referral source. GA4 does not collect personally identifiable information by default.
Cookies — our website uses cookies for analytics purposes. You can control cookie settings through your browser preferences. Disabling cookies may affect your experience on the site.
Server logs — our hosting provider (Vercel) may collect standard server log data including IP addresses, browser type, and pages requested. This data is used for security and performance monitoring.
1.3 Information We Collect on Behalf of Clients
In the course of delivering our services, we may have access to personal information belonging to our clients' customers. This includes:
Contact form submissions on client websites (name, email, phone number, message content)
Google Analytics data from client websites (anonymised visitor data)
Google Search Console data from client websites (search queries, click data)
Google Business Profile enquiries, reviews, and messages on client listings
Email addresses or phone numbers submitted through client booking or enquiry systems
We handle this information solely for the purpose of delivering the agreed services to our client. We do not use, sell, or disclose this information for any other purpose.
How We Use Your Information
We use the information we collect for the following purposes:
To deliver the services you have engaged us for, including website design, hosting, maintenance, SEO, and content creation
To communicate with you about your project, including updates, questions, reports, and invoicing
To set up and manage third-party accounts on your behalf (Google Analytics, Google Search Console, Google Business Profile, hosting, domain registration)
To monitor and maintain the performance, security, and uptime of websites we host and manage
To prepare monthly performance summaries and growth reports for clients on Managed and Growth service tiers
To improve our own website and services based on anonymised analytics data
To comply with our legal and regulatory obligations
We do not use your personal information for direct marketing unless you have given us explicit consent to do so. We will never sell, rent, or trade your personal information to third parties.
Data Storage and Security
4.1 Where Your Data Is Stored
Your information may be stored in Australia and overseas, depending on the third-party services involved. In particular, Vercel and GitHub store data on servers in the United States. Google services may process data across multiple international locations. By engaging our services, you consent to the transfer and storage of your information in these locations.
4.2 How We Protect Your Data
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:
Using a password manager (1Password or Bitwarden) to store client login credentials securely
Using HTTPS (SSL/TLS encryption) on all websites we build and host
Restricting access to client accounts and data to Baxter Hanley only (sole operator — no team access)
Using two-factor authentication on critical accounts where available
Storing code and website files in private GitHub repositories
No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
4.3 Data Retention
We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including:
Active clients — for the duration of the service engagement, plus 12 months after the engagement ends
Completed projects (Launch tier) — project files and communications retained for 24 months after handover, then securely deleted unless otherwise agreed
Invoices and financial records — retained for a minimum of five (5) years as required by Australian tax law
Website analytics data — retained in accordance with Google Analytics' data retention settings (typically 14 months for GA4, configurable per property)
Login credentials — securely deleted from our password manager within 30 days of a service engagement ending, unless ongoing access is required
Your Rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to your personal information:
Access — you may request access to the personal information we hold about you at any time
Correction — you may request that we correct any inaccurate, incomplete, or out-of-date personal information
Deletion — you may request that we delete your personal information, subject to our legal obligations to retain certain records (e.g., tax records)
Complaint — if you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us directly. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
To exercise any of these rights, contact us using the details in Section 9 below. We will respond to all requests within 30 days.
Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete that information as soon as practicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The updated policy will be published on our website with a revised “Last updated” date. We encourage you to review this policy periodically. For active clients, we will notify you of any material changes via email.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about how we have handled your personal information, please contact us:
Baxoptimized
Baxter Hanley
ABN: 43 943 532 568
Email: baxoptimized@gmail.com
Location: Illawarra, NSW, Australia
If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC):
Website: oaic.gov.au
Phone: 1300 363 992
Baxoptimized — Baxter Hanley — Illawarra, NSW, Australia
This Privacy Policy should be read in conjunction with our Terms and Conditions of Service.