Privacy

I run this site myself.

This policy explains what information chrismatthews.au collects, why I collect it, who else sees it, and what you can do about it. It covers this website and the emails I send from it.

• You give me an email address and I send you a newsletter.
• I don't sell, rent or trade your details.
• No advertising trackers, no third-party analytics, no cookies used to follow you around the internet.
• Every email carries an unsubscribe link.
• Email hello@chrismatthews.au if you want a copy of what I hold on you, or want it deleted.

• Email subscribers — anyone signed up to Winging It, or to the waitlist for my book.
• Website visitors — anyone reading this site, whether or not they've ever subscribed.
• People who email me — directly, or through a form on the site.

I don't collect:

• Your name, phone number, postal address or date of birth.
• Payment or card details. Nothing on this site takes money today. If that changes, I'll say so here first.
• Your precise location.
• Advertising cookies, advertising identifiers, or tracking pixels from ad networks.
• Analytics run by anyone else. Nothing here sends your visit to Google or Meta.
• Anything bought or received from a list broker or data supplier.

Each thing I do with your information, and the reason I'm allowed to do it:

• To send you the newsletter or book updates — because you asked for them. That's your consent.
• To see which editions get opened and which links get clicked — your consent, plus my legitimate interest in improving the newsletter.
• To reply when you write to me — because you contacted me first.
• To keep the site working and spot breakage — legitimate interest.

I don't use your information to build an advertising profile, to decide what to show you elsewhere on the internet, or for anything you didn't sign up for. No computer program makes decisions about you on this site — no profiling, no automated anything.

Until you tell me otherwise. When you unsubscribe, your address is marked as removed and nothing further is sent to it. If you'd rather the record were deleted outright, ask and I'll do it.

Email activity records are kept while your subscription is active. Site visit counts are anonymous and kept only as totals. A deleted record may remain in a backup until that backup ages out. During that period it is not used for anything.

• My email delivery provider, Resend — it sends the newsletter on my behalf, so it processes your address and reports opens, clicks, bounces and complaints back to me. It isn't licensed to use your address for anything else.
• Your browser's notification service — if you turn on new-edition alerts, the alert is delivered through the push service run by your browser maker (for example Apple, Google or Mozilla). It carries only a link to the edition.
• The platform that hosts this site and its database — it stores the records for me, and doesn't sell them.

No advertisers, no data brokers, no marketing partners.

If a law or a court order compels me to disclose something, I will comply, and I'll tell you where I'm allowed to.

Under Australia's Privacy Act, these are yours. Each one is free, and each one is answered by me:

• Be informed — this page tells you, and I'll answer specific questions about your own data.
• Access — ask, and I'll tell you what I hold on you and send you a copy.
• Correction — tell me what's wrong and I'll fix it.
• Deletion — ask, and I'll remove your record.
• Withdraw consent — the unsubscribe link at the bottom of every email I send.
• Object or restrict — ask me to stop processing something and I'll tell you what I can and can't do, and why.

If you're not satisfied with my answer, or don't hear back within 30 days, you can complain in writing to the Office of the Australian Information Commissioner: 1300 363 992, oaic.gov.au, or GPO Box 5288, Sydney NSW 2001.

The site runs over an encrypted connection. Subscriber records sit in a database behind access controls, and the admin area that can read them requires a second factor of authentication — so a stolen password on its own isn't enough to reach your address.

No system connected to the internet is completely secure. If a breach affects your information and I'm required to notify you, I will.

Wherever you read this from, your information is handled outside Australia. My email provider, Resend, processes subscriber records and email activity in the United States, and the platform that hosts this site stores its database on servers abroad. By subscribing, you accept that.

You keep broadly similar rights wherever you are: to be told what I hold, to have it corrected, deleted, or handed back to you in a usable form, and to object to me using it. The reasons I'm allowed to use it at all are the ones set out under "Why I use it" above — your consent, and my legitimate interest in running and improving the newsletter. You can also complain to your own local privacy authority rather than the Australian one.

For anyone in California: I don't sell or share personal information as the CCPA and CPRA define those words, and I haven't in the past twelve months. You can ask to know what I hold on you, to have it deleted or corrected, and you won't be treated any differently for asking. The categories of information collected in the past twelve months are exactly the ones listed under "What I collect" — nothing more.

This site and the newsletter aren't aimed at anyone under 18, and I don't knowingly collect a child's email address. If I learn that I'm holding one, I delete it.

If this policy changes, the date at the top changes with it and the new version sits here. Where a change materially affects you — a new provider, a new purpose — I'll also say so in the newsletter.

Questions, requests, or something you'd like dealt with: hello@chrismatthews.au. I answer these myself.

Found a security problem with the site? Please tell me at the same address rather than posting it publicly, and I'll fix it and thank you for it.