Privacy

What happens to what you send me.

Last updated 20 September 2026

Who is responsible

Adrien Oliva, sole trader, Brisbane, Queensland, Australia. For the purposes of the EU General Data Protection Regulation I am the data controller for anything submitted through this site. Contact: contact@adrien-oliva.com.

What this site collects

Only what you type into the enquiry form: your name, email address, organisation, the enquiry type you pick, and your message — plus the IP address the submission came from, which is included in the email for abuse prevention. There is no analytics, no tracking pixel, no advertising network, and no cookie set by this site. The pages contain no JavaScript at all.

Fonts are loaded from Google Fonts, which means Google receives your IP address when a page loads. That is the only third party involved in simply reading the site.

Why, and on what legal basis

• To answer your enquiry and take pre-contractual steps — GDPR Article 6(1)(b). You asked me a question; I need your message and a way to reply.
• To keep records of business correspondence — GDPR Article 6(1)(f), my legitimate interest in running a consulting practice, and Australian tax record-keeping obligations.

Who else sees it

The form is not sent through your own email client. It goes from this site's server to my inbox via Resend, a transactional email API that relays the message and is not otherwise given access to this site or its data. Nothing is sold, and nothing is shared with anyone else unless you ask me to.

I am based in Australia, so data you send reaches a country outside the EEA. Australia does not hold an EU adequacy decision; transfers rely on your enquiry being necessary to take steps at your request under Article 49(1)(b).

How long I keep it

Enquiries that do not lead to work: deleted within 24 months. Enquiries that become an engagement: kept for the duration plus seven years, which is the Australian record-keeping requirement for business records.

Please do not send me sensitive data through this form

The enquiry form is not a secure channel for clinical or personal health data. Never include patient-identifiable information, genomic data, credentials or API keys in it. Where an engagement involves such data, it stays in your environment under an NDA and a data processing agreement signed before anything is transferred.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct or delete it, object to my processing it, or ask for it in a portable format. Email me and I will action it within 30 days. If you are in the EU or UK you may complain to your national supervisory authority; in Australia, to the Office of the Australian Information Commissioner.