Privacy Policy

Only three forms on this site collect personal information, and only when you choose to fill one in:

• Enquiry / quote form: your name, brand or company name (optional), email address, and whatever project details you type.
• Testimonial form: your name, brand (optional), the words you write, an optional star rating, and an optional screenshot image you attach.
• Performance metrics form: your name and brand (optional), the campaign numbers you report (views, saves, click-through rate, sales, ROAS), an optional link to the content, any note you add, and whether you have ticked the box allowing those numbers to be shown publicly.

Separately, the site records basic anonymous usage information: a randomly generated session ID stored in your browser, which pages you viewed, how long you stayed, which referring website you arrived from, and which portfolio items or social links you tapped. This is not linked to your name or email, and no advertising or cross-site tracking cookies are used. This measurement starts as soon as a page loads and there is no opt-in step; the session ID lives only in your browser's session storage and is discarded when you close the tab. Your IP address is not stored.

That anonymous measurement also includes how long individual portfolio items or category filters stay in view as you scroll a carousel, and whether the quote form was opened. In addition, the site owner sometimes shares links that carry a label in the web address (for example ?src=email-signature or a per-brand code such as?for=nike-a8x2). Where such a label is present it is recorded alongside that anonymous session, purely so the owner can tell which of her own links a visit came from. The label is written by the owner in advance - it is never derived from you, and no name, email address, IP address or device fingerprint is collected through this system. Visits to the plain public address carry no label at all.

Sensitive information (health, financial details, government identifiers, etc.) is never requested and should not be sent through these forms.

• Enquiry details are used to reply to you and quote on the work you are asking about.
• Testimonials are used, with your knowledge, as social proof on this portfolio. Nothing you submit is published automatically - Amy reviews every submission and chooses whether to make it visible.
• Reported campaign metrics are used to understand how content performed. They are only displayed publicly if you tick the box giving permission, and even then Amy has to approve them first.
• The anonymous usage information is used to understand which portfolio pieces resonate, so the site can be improved.

Your information is never sold, rented, or used to send marketing. There is no mailing list on this site.

Submissions are stored in a managed Supabase (PostgreSQL) database, and any images you upload are stored in a private storage bucket - the files are not publicly listable and are served through short-lived signed links. Database access is restricted by row-level security so that only the site owner, signed in to the private admin area, can read enquiries, testimonial submissions, metric reports, or analytics. Traffic to and from the site is encrypted over HTTPS.

Data is held on infrastructure that may be located outside Australia (Supabase hosting and the email provider below), which means your information may be stored or processed overseas.

Enquiries and submissions are kept for as long as they are useful as a business record - typically no longer than seven years - and can be deleted sooner on request.

• Supabase - hosts the database and file storage.
• Lovable - hosts the website and sends the notification emails; those emails are delivered through Resend.

When you submit a form, a notification email containing what you submitted is sent to Amy's own inbox so she can respond. No other person or company receives your details, and nothing is shared with advertisers or data brokers. Information may be disclosed if required by Australian law.

Anonymous behavioural analytics - how long a category, video or photo stayed on screen - is automatically deleted after 180 days. Enquiry and testimonial submissions are kept only as long as needed for the business relationship, and can be deleted sooner on request.

Where a brand has been sent its own tracking link, Amy may share a read-only summary page of that link's aggregate engagement with the brand. It contains no names, accounts, IP addresses or individual visitor records.

You can ask at any time for a copy of the personal information held about you, ask for it to be corrected, ask for a published testimonial to be taken down, or ask for your data to be deleted entirely. Email hello@amycollectiveco.com.au and it will be actioned within 30 days. There is no charge for this.

If you are unhappy with how a privacy request was handled, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

If a breach happens that is likely to cause you serious harm, you will be notified by email at the address you supplied, along with what happened, what information was involved and what to do about it - and the Office of the Australian Information Commissioner will be notified, in line with the Notifiable Data Breaches scheme. To report a suspected breach or a security issue with this site, email hello@amycollectiveco.com.au with "Security" in the subject line.

The only emails this site generates are transactional notifications sent to Amy when a form is submitted, plus any direct reply Amy sends you about your enquiry. You will not be added to any marketing list. If Amy ever does email you commercially, that message will identify her clearly and include a working unsubscribe link, as required by the Spam Act 2003 - and you can opt out at any time by replying to any email.

If this policy changes, the updated version will appear on this page with a new "last updated" date.