How we handle personal information

This policy explains how Glass Half Full collects, uses and keeps personal information from website visitors, enquiries and client work.

Last updated: September 27, 2026

Information we collect

Your name and phone number when you send an enquiry, plus your email address if you choose to provide it.
Business needs you choose to describe in the enquiry form, plus information and documents you share separately through project discussions and support requests.
Technical information used to operate and protect the website, including IP addresses, rate-limit identifiers and diagnostic logs. When Google Analytics is enabled, it also collects website usage, device, referral and approximate location information.
Client records such as scope, project notes, agreements, payment status and implementation or support history. Please leave passwords and sensitive customer information out of the website enquiry form.

How we use it

To respond to enquiries, discuss your needs, prepare proposals and deliver or support agreed work.
To operate the website, understand which content is useful, prevent abuse and investigate faults.
To administer agreements and payments, and meet legal, tax and record-keeping obligations.

Storage and retention

Enquiries and attachments are handled through our forms and business systems. We keep records for as long as needed to respond, administer the relationship and meet legal or contractual obligations.
Project and proposal records may include approved source information, generated drafts and a history of approvals or actions. They are not temporary website-session data.
When information is no longer needed, we take reasonable steps to delete it, de-identify it or securely archive it from active systems. Providers may retain information under their own terms.

Service providers and sharing

We do not sell personal information.
Hosting, database, forms, email and security providers process information needed to operate the website and respond to enquiries. Google processes website analytics when that service is enabled.
For client work, we may use Notion and Google Workspace for records and documents, PandaDoc for agreements, and Stripe for payments. The services used depend on the engagement.
When AI-assisted proposal generation is enabled, approved project information is sent to OpenAI to prepare a draft. This is subject to the configured processing policy and provider terms; it is not a promise of zero provider retention.
Some providers may process or store information outside Australia. We take reasonable steps to protect the information and can discuss the providers and arrangements relevant to your engagement.
We may disclose information when required by law, to enforce an agreement, to protect rights and safety, or with your consent.

Security

We use reasonable technical and organisational measures to protect personal information against misuse, loss, unauthorised access, modification and disclosure.
We limit access to enquiry and client records to what is needed for the work. No internet service is risk-free.

Access, correction and privacy concerns

You can ask to access or correct information we hold about you, or request deletion where we no longer need it for a legitimate business, legal or record-keeping purpose.
Contact us using the privacy email link below. We may need to verify your identity before acting on a request.
If you have a privacy concern, describe what happened and the outcome you are seeking. We will review it, ask for any information needed and respond with the outcome or next steps.

Australian privacy principles

This policy is informed by the Australian Privacy Principles, including the principles for transparent information handling, collection, use, access, correction, security, and retention. You can read more on the Office of the Australian Information Commissioner website.