Privacy Policy

This policy explains how NCH Consultancy (Bijin Johnson, ABN 12 429 332 646) collects, uses, and protects your personal information. I take privacy seriously and handle information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you have any question about this policy, contact me at hello@nchconsultancy.com.

What I collect

• When you contact me: your name, email address, any company or organisation you provide, whether you identify as a Christian non-profit or church, and the content of your message.
• If you become a client: the business and billing details needed to deliver services and issue invoices — for example contact details, ABN, and the information you enter in the client portal.
• When you visit the site: privacy-respecting, cookie-less analytics (aggregate page views and referrers). I do not use advertising trackers or third-party profiling cookies.
• Security metadata: to protect the contact form from abuse I store a one-way hash of your IP address and your browser’s user-agent string. The raw IP is not retained.

How I use it

• To respond to your enquiry and provide the services you ask for.
• To create and manage invoices and client records.
• To understand, in aggregate, how the site is used and improve it.
• To protect the site and its users from spam and abuse.

I do not sell your personal information, and I do not share it except as needed to run the service (see below) or where required by law.

Where it’s stored and who processes it

Client and enquiry data is stored on infrastructure I control, encrypted in transit and at rest, with access restricted to me. A small number of trusted providers process specific data on my behalf:

• Cloudflare — content delivery, network security, and the Turnstile anti-spam check on the contact form.
• Resend — delivery of transactional email (for example, sending you an invoice or replying to an enquiry).
• Encrypted offsite backups — backups are encrypted on my systems before they leave, so the backup provider cannot read their contents.

How long I keep it

Enquiry messages are kept while they remain useful for correspondence and then removed. Client and financial records are kept for as long as required to meet Australian tax and legal obligations, then deleted or de-identified.

Your rights

You can ask me what personal information I hold about you, request a correction, or ask me to delete it (subject to any records I’m legally required to keep). Email hello@nchconsultancy.com and I’ll respond promptly. If you’re not satisfied with how I’ve handled your information, you may contact the Office of the Australian Information Commissioner (OAIC).

Changes

I may update this policy from time to time. The “last updated” date above reflects the current version.