Privacy policy

Last updated 3 August 2026

This policy explains what personal information we collect, why we collect it, who we share it with, and how you can reach us about it. We keep the amount of personal information we hold as small as the service allows.

What we collect

• Contact and business details you give us: name, business name, email address, phone number, postal address, ABN.
• Engagement records: briefs, approvals, correspondence, and the publicly available performance figures for the accounts we record a baseline against.
• Billing records: invoice history and the outcome of a payment. Card numbers are entered directly into Stripe and never reach us. We hold no full card data at any time.

We do not buy contact lists, we do not sell or rent personal information to anyone, and we do not use your information for advertising.

Why we collect it

To quote for work, to perform the service, to invoice and be paid, to keep the records the tax law requires us to keep, and to reply when you contact us. We do not use it for anything else without asking you first.

Who we share it with

• Stripe, our payment processor, which handles card data under its own privacy terms and may process data outside Australia.
• Our accountant and bookkeeper, for invoicing, BAS and tax records.
• Software we use to run the business, including email, file storage and project tools, some of which store data outside Australia.
• Anyone the law requires us to disclose to.

A current list of the third parties we use is available on request. We do not disclose your client information, your commercial figures or your unpublished material to anyone outside this list.

Public research material

Our research uses public sources: regulator releases, published market data, company websites, public social accounts and published media. Where an individual is named in something we produce, they are named in a public professional capacity and only on the basis of material they have themselves published.

Website

This site does not set advertising or tracking cookies and does not run analytics that profile you. It loads web fonts from Google Fonts, which means your browser makes a request to Google's servers to fetch them.

How long we keep it

Engagement and financial records are kept for as long as the tax law requires, currently five years from the date of the relevant transaction. Working material and drafts are deleted when they are no longer needed. If you ask us to delete your information and we are not required to keep it, we will.

Security

Information is held in access-controlled accounts with multi-factor authentication. No system is perfect, and if a breach occurred that was likely to cause you serious harm we would tell you and the relevant authority promptly.

Access, correction and complaints

You can ask us what we hold about you, ask us to correct it, or make a complaint, by writing to hello@nathanswan.com. We respond within one business day and resolve within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact

hello@nathanswan.com . Brisbane, Queensland, Australia