Get in touch

Privacy Policy

Last updated: August 2026

Who I am

I am Fabrice Ficerai, a sole trader operating under ABN 47 143 635 197, based in Australia. I build websites, marketing systems, and AI integrations for founder-led businesses. This policy explains how I handle personal information collected through this website and in the course of client work.

I work with clients in Australia and in Europe. This policy is written to satisfy both regimes: the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and the EU General Data Protection Regulation (GDPR) where it applies to you.

For the purposes of the GDPR, I am the data controller for personal data collected through this website. You can reach me at hello@fabriceficerai.com about anything in this policy.

What information I collect

I only collect information that is necessary. This may include:

  • Contact details - name, email address, and any other details you provide when reaching out via the contact form or email.
  • Project information - details about your business and project that you share during onboarding or in the course of working together.
  • Technical data - basic server logs (IP address, browser type, pages visited) collected automatically when you visit this site, used to keep the site running and secure.
  • Website usage data - I run my own self-hosted, cookieless analytics to understand which pages are useful. It records the page URL, the referring page, your browser language and screen size. It sets no cookies, uses no device storage, and does not fingerprint your browser. Your IP address is used only in memory, at the moment of the request, to derive an approximate location, and is then discarded - it is never stored, and the usage data is not linked to your identity.

I do not run advertising trackers, pixel tags, or any third-party analytics service such as Google Analytics on this website. The analytics described above is software I host myself: the data goes to my own server and is never shared with or sold to anyone. The site sets no cookies of any kind - see the Cookie Policy.

How I use your information

Information you provide is used solely to:

  • Respond to your enquiry and discuss your project.
  • Deliver agreed services and communicate about ongoing work.
  • Send invoices and manage the business relationship.

I do not sell, rent, or share your personal information with third parties for marketing purposes.

A small number of service providers process data on my behalf so the site can function:

  • Resend - delivers contact-form submissions to my inbox. The name, email address, company and message you submit pass through Resend's systems, which are located in the United States.
  • Cloudflare - hosts and serves this website, and processes request data (including IP address) to deliver pages and protect against abuse.

Because these providers operate overseas, your information may be processed outside Australia and outside the EU/EEA - Resend in the United States, and Cloudflare across a global network. Where data is transferred out of the EEA, it is covered by the providers' Standard Contractual Clauses. I share only the minimum necessary for each provider to perform its function, and neither is permitted to use your data for its own purposes.

Note that the analytics is not in this list: it runs on infrastructure I control, so no third party or sub-processor is involved in it at all.

Legal bases for processing (GDPR)

If you are in the EU or EEA, the GDPR requires me to tell you the lawful basis for each kind of processing. There are only three:

  • Enquiries and client work - processed to take steps at your request before entering a contract, and to perform that contract (Article 6(1)(b)). Without your name, email and a description of the project, I cannot reply or deliver the work.
  • Website analytics - processed under my legitimate interest in understanding which pages are useful and keeping the site working (Article 6(1)(f)). The balancing test is straightforward here: the analytics is cookieless, stores no identifiers, and discards the IP address in memory, so the impact on your privacy is minimal. No consent banner is required because nothing is stored on or read from your device.
  • Invoicing and records - processed to comply with legal obligations, principally tax and accounting law (Article 6(1)(c)).

I do not use personal data for automated decision-making or profiling, and I do not process special categories of personal data.

How long I keep it

  • Enquiries that do not become projects - up to 24 months, then deleted.
  • Client project files and correspondence - for the engagement and roughly seven years afterwards, to meet Australian taxation and record-keeping requirements.
  • Website analytics - retained in aggregate. No IP address or personal identifier is stored at any point, so there is nothing in it that identifies you.
  • Server logs - short-lived, kept only for security and troubleshooting.

Storage and security

Your information is stored in tools I use day-to-day, primarily email and project management software hosted by reputable providers (e.g. Google Workspace). I take reasonable steps to protect information from misuse, interference, loss, and unauthorised access. No internet transmission is completely secure, but I do my best to protect your data.

Client project files and communications are retained for the duration of the engagement and for a reasonable period afterwards for legal and accounting purposes, typically seven years in accordance with Australian taxation requirements.

Your rights

Under the Australian Privacy Act, you have the right to:

  • Request access to the personal information I hold about you.
  • Ask me to correct information that is inaccurate or out of date.
  • Request that I delete your information (subject to any legal obligations I have to retain it).

If you are in the EU or EEA, the GDPR gives you these rights in addition:

  • Access - a copy of the personal data I hold about you (Art. 15).
  • Rectification - correction of inaccurate or incomplete data (Art. 16).
  • Erasure - deletion of your data where I have no overriding legal reason to keep it (Art. 17).
  • Restriction - to have processing paused while a dispute is resolved (Art. 18).
  • Portability - your data in a structured, machine-readable format (Art. 20).
  • Objection - to processing based on legitimate interest, including the website analytics (Art. 21).

To exercise any of these rights, email me at hello@fabriceficerai.com. I will respond within 30 days, and within one month where the GDPR applies. There is no charge.

In practice, most of what people ask about is the analytics, and because it stores no identifiers at all, there is genuinely nothing held about you to access, export or erase. Enquiries and client correspondence are the data that actually exists.

Complaints

If you think I have mishandled your personal data, please contact me first and I will try to put it right. You also have the right to complain to a supervisory authority.

  • Australia - the Office of the Australian Information Commissioner (oaic.gov.au).
  • Luxembourg - the Commission nationale pour la protection des données (cnpd.public.lu).
  • Elsewhere in the EU/EEA - the data protection authority in the country where you live or work.

External links

This website may link to third-party sites. I am not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

Changes to this policy

I may update this policy from time to time. Material changes will be noted by updating the date at the top. Continued use of this site after any changes constitutes your acceptance of the updated policy.

Contact

Questions or complaints about privacy can be directed to: hello@fabriceficerai.com

If you are not satisfied with my response, you can contact the Office of the Australian Information Commissioner (OAIC).