Privacy

This policy explains how we handle personal information, and how to reach us about it.

Who we are

Shab, ABN 45 074 849 006, of Adelaide, South Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect, and why

When you visit this site. The site is hosted on Cloudflare Pages. Cloudflare receives your IP address and basic request information — the page requested, the time, your browser and device type — and holds it briefly to deliver the page and to protect the site from attack and abuse. We do not use that information to identify you.

Analytics. We use Cloudflare Web Analytics to understand which pages are read. It sets no cookies, does not track you across other websites, and reports only aggregate figures. No individual visitor is identified to us.

When you email us. Mail sent to our address is forwarded by Cloudflare Email Routing into a mailbox hosted by Microsoft. We keep your message and contact details so we can reply, and so we can carry out work for you if we go on to do so.

When you book a call. The booking button opens a scheduling page provided by Cal.com. Anything you enter there — typically your name, email address and a note about what you want to discuss — is collected by Cal.com and passed to us. Cal.com handles it under its own privacy policy as well as this one.

Cookies

This site sets no cookies. Fonts are served from this domain rather than from a third-party font service, so reading a page does not report your visit to anyone beyond our host.

Storage, security and how long we keep things

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access or disclosure. In practice that means access is limited to people who need it, accounts are protected by multi-factor authentication, and information is held in reputable hosted services rather than on unmanaged devices.

We keep business correspondence and engagement records for seven years, which reflects Australian record-keeping obligations, and destroy or de-identify personal information when we no longer need it and are not required to keep it.

Who we disclose it to, including overseas

We do not sell personal information, and we do not disclose it for anyone else's marketing. We disclose it only to the service providers we use to operate the business — Cloudflare for hosting, Cal.com for scheduling, and, for email, Cloudflare Email Routing, which forwards messages sent to us into a mailbox hosted by Microsoft — and where the law requires it.

Some of those providers are located outside Australia. Cloudflare, Cal.com and Microsoft are based in the United States and operate infrastructure in several countries, so information handled through this site, its booking page, or an email you send us is likely to be stored or processed overseas.

Access and correction

You may ask what personal information we hold about you, ask for a copy, and ask us to correct it if it is wrong or out of date. Write to hello@shab.com.au and we will respond within a reasonable period. We will tell you if we cannot give you access, and why.

Complaints

If you think we have mishandled your personal information, write to hello@shab.com.au and we will look into it and respond. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme.

Changes to this policy

We update this policy when what we do changes. The current version is shown below; if we make a significant change we will say so on this page.

Last updated 5 September 2026.