Privacy Policy
Last updated: 5 January 2026
finalcoat.dev is operated by James Turner (sole trader), ABN 29 769 463 862 ("we", "us"). We respect your privacy and handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). This policy explains what we collect, why we collect it, and your choices.
What we collect
- Contact details such as your name, email address, phone number and business name, when you contact us, book a call or buy a package.
- Project information you choose to share, such as links to your app or code, descriptions of your product, and your goals and deadlines.
- Payment information. Payments are handled by Stripe. We receive your name, email, billing address and limited card details (such as card type and last four digits). We never see or store full card numbers.
- Communications such as emails, call notes and messages you send us.
- Website usage. We use privacy-friendly, cookie-free analytics (Cloudflare Web Analytics) that report aggregated information such as page views and referring sites. They do not identify you or track you across other websites.
You can browse our website without telling us who you are. To buy services, we need enough information to deliver them and invoice you.
Information in your systems
During an engagement we may be given access to your systems, which may contain personal information about your own customers or users. We access and use that information only as needed to provide our services to you, we don't use it for any other purpose, and we keep it confidential and secure. You remain responsible for your product's own privacy obligations to your users.
How we use your information
- To respond to enquiries and provide the services you've bought
- To invoice, take payments and keep business records
- To improve our website and services
- To send you occasional updates, but only if you've opted in. Every marketing email includes an unsubscribe link, as required by the Spam Act 2003 (Cth).
- To meet our legal obligations
Who we share it with
We don't sell your personal information. We share it only with:
- service providers who help us run our business: Stripe (payments), Cloudflare (website hosting and analytics), and Google Workspace (email);
- independent specialists (subcontractors) working on your engagement, who are bound by confidentiality obligations;
- our accountants and professional advisers; and
- authorities, where we're required to by law.
Overseas disclosure
Some of our service providers store or process information outside Australia, including in the United States and other countries where they operate. We choose reputable providers with strong security practices and take reasonable steps to ensure they handle your information in a way consistent with the Australian Privacy Principles.
Cookies
Our website doesn't use advertising or tracking cookies. When you go to Stripe's checkout, Stripe may set cookies that are needed for secure payments and fraud prevention. These are covered by Stripe's privacy policy.
Security and retention
We protect personal information using access controls, encrypted services and secure credential storage. We keep it only for as long as we need it. Financial records are kept for seven years, as required by Australian tax law. After that, we securely delete or de-identify it.
Access and correction
You can ask to see the personal information we hold about you, or ask us to correct it, by emailing [email protected]. We'll respond within 30 days. In limited cases the law allows us to refuse access, and if so we'll explain why.
Complaints
If you have a concern about how we've handled your personal information, please email us first and we'll respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.
Contact
Privacy questions: [email protected]