Your details, handled plainly

Last updated: 28 October 2026

Who is responsible for your information

Breakwater Web Co is operated by Dzevad (Jevad) Huseinbegovic, trading as Breakwater Web Co, ABN 30 395 825 899, based in Warrnambool, Victoria.

This policy explains how I handle personal information when you contact me, visit my website or engage me to build or care for a website.

For privacy questions or requests, contact [email protected] or 0478 527 613. You can ask for a copy of this policy by email.

Information I collect

Depending on how you deal with me, I may collect:

Your name, business name, email address, phone number and the details you provide in an enquiry.
If you call my business number: your phone number, a recording and transcript of the call, and what you tell my AI receptionist, such as your name, contact details, business name and what you need.
Project instructions, quotes, invoices, payment-status records, correspondence and approvals.
Content you ask me to put on your website, such as business contact information, staff names, photographs and testimonials.
Account identifiers and access permissions needed to carry out agreed work.
Technical information recorded by hosting, form or security services, such as IP addresses, browser information, requested pages, timestamps and error or security logs.

Please do not send sensitive personal information, payment-card details or passwords through the general enquiry form. Where project access is needed, I will arrange an appropriate method with you.

You can make a general enquiry without identifying yourself where practical. If you do not provide contact details, I may be unable to reply. I need sufficient identity and billing information to provide contracted services.

How I collect and use information

I usually collect information directly from you through my website form, email, phone calls (including calls answered by my AI receptionist), shared project material and our business dealings. I may also receive information from a person you authorise to act for your business, or from service providers involved in your project.

I use information to respond to enquiries, prepare quotes, deliver and support agreed services, communicate with you, manage payments and business records, protect accounts and systems, and meet legal obligations.

Public website content you approve for publication will be accessible to others online and may be indexed by search engines. Please only supply personal information about others where you have an appropriate basis to share and publish it.

Sending an enquiry does not subscribe you to marketing emails. If I introduce a mailing list, I will explain it separately and provide a way to unsubscribe. I do not sell personal information or provide enquiry lists to third parties for their own advertising.

Service providers and overseas processing

I share information only where reasonably necessary for the purposes above, including with providers of hosting, enquiry processing, business email, file storage, invoicing and payments, and with professional advisers or authorities where required or permitted by law. Any contractor given project access must use it only for the authorised work and protect it appropriately.

Some providers may store, access or process information outside Australia. The services used and relevant countries are listed below.

Website hosting and security: Cloudflare (Cloudflare Pages): hosts this website and protects it from attacks. Information: Technical requests and security logs. Where: United States and other countries in Cloudflare's global network.
Enquiry form: Formspree: receives the website form and emails it to me. Information: Form fields and associated technical data. Where: United States.
Business email and files: Google Workspace: email, calendar and file storage. Information: Enquiries, correspondence, quotes, invoices and project files. Where: United States and other countries where Google operates.
Invoicing and payments: Invoices are sent by email; payment is by bank transfer to my Australian bank account. Information: Billing details, invoices and payment records. Where: Australia (invoices are also stored in Google Workspace, above).
AI tools for building and writing: AI models, accessed through OpenRouter, help me write website text and build website code. Information: Only the business content a client gives me for their website, such as services, service areas and approved text. Website form enquiries, passwords and private files are not put into these tools. Where: United States and other countries where the AI providers operate.
Website monitoring: My monitoring service checks that websites are online, secure and working, and an AI model helps write the technical reports. Information: Publicly available website pages and technical records (for example DNS and security settings). It does not access enquiries or email inboxes. Where: United States and other countries where the AI providers operate.
Phone calls: Twilio provides my business phone number, connects calls and records them. Information: Your phone number, the call recording and transcript. Where: United States.
AI receptionist: An AI voice assistant (an OpenAI GPT voice model, accessed through OpenRouter) answers calls and takes your message. Information: What you say on the call, including your name, contact details and business details. Where: United States.
Call messages: n8n Cloud passes the message from your call to my reception app, which emails it to me. Information: Your name, contact details, business name and message. Where: Germany (European Union).

When you call my business number, an AI receptionist answers. At the start of the call it tells you that you are speaking with an AI assistant and that the call is recorded. If you would rather not talk to it, you can email me instead.

Provider privacy notices: Cloudflare, Formspree, Google, OpenRouter, OpenAI, Twilio and n8n.

Cookies, browser storage and analytics

This website stores your light/dark theme and animation preference in your browser's local storage. These settings let the website remember your choices. You can remove them through your browser's site-data controls; doing so resets those preferences.

I do not use advertising pixels or third-party marketing analytics on this website. Hosting and security providers may still collect technical logs and may use storage required to deliver or protect the service. This website does not set cookies. The Facebook and Instagram icons are ordinary links: nothing from those sites loads here unless you click them.

If I introduce analytics or advertising tools, I will update this policy and provide any notice or choice required before using them. This policy does not authorise a future undisclosed use of your information.

Client websites and their visitors

A website I build for a client is normally operated by that client. The client is responsible for explaining its own collection and use of visitor information; this policy is not automatically the privacy policy for that website.

Where I can access client website enquiries, logs or backups to provide support, I use that access only for the authorised service, security or legal purposes. The client's service agreement should record the systems involved, access controls, and return or deletion arrangements.

Security and retention

I take reasonable steps to protect personal information from misuse, loss and unauthorised access or disclosure. These include limiting access to people and services that need it, protecting business accounts and using appropriate methods to transfer project information. No online service can promise absolute security.

I keep information only as long as reasonably needed for the purpose for which it was collected, for agreed services, and for applicable recordkeeping, legal or dispute requirements. When it is no longer needed, I take reasonable steps to delete or de-identify it. Copies in protected backups may remain until the normal backup cycle expires and will not be used for unrelated purposes.

In practice:

Enquiries that don't go ahead are deleted within 12 months.
Call recordings and transcripts are deleted within 90 days. The message taken from a call is kept like any other enquiry.
If you ask me to delete your details, I will do so within 7 days, unless I must keep them by law.
Invoices and payment records are kept for 5 years, as required for tax records.
Care plan backups are copies of the website files and everything published on the website during that time, which can include names, phone numbers and email addresses shown on the site. They are kept while the care plan is active and deleted within 30 days after the website is handed over.

I can only delete copies held in systems I control. Where a provider keeps its own copies, I will explain how to ask them.

Access, corrections and deletion requests

You can ask what personal information I hold about you, request access, ask for a correction or request deletion using the contact details above. I may need to verify your identity before releasing or changing information. I will ask only for verification reasonably needed for the request.

I aim to respond within 30 days. If I cannot meet a request in full, including because information must be retained by law or concerns another person, I will explain the reason and the available next steps. Requesting deletion does not automatically override legal recordkeeping requirements.

Privacy concerns

If you believe I have mishandled personal information, contact me with the details. I aim to acknowledge complaints within five business days and respond within 30 days. If I need more time, I will explain why and keep you updated.

If the issue remains unresolved, you can seek guidance from the Office of the Australian Information Commissioner at oaic.gov.au. Whether the OAIC can investigate a complaint about this business depends on its jurisdiction and whether the relevant privacy law applies. Nothing here limits any rights you have under applicable law.

Updates

I may update this policy as the business or its services change. The current version and effective date will appear on this page. Where a change materially affects how existing information is handled, I will provide an appropriate notice and obtain consent where required.

Back to the home page