Privacy Policy

Who we are

This policy covers The Clockwork Cloud Pty Ltd (ACN 688 627 143, ABN 34 688 627 143), which trades as Abundant Kindling, The Clockwork Cloud and Huge Nerd (“we”, “us”). It applies to abundantkindling.com.au, to theclockworkcloud.com.au (which redirects there), to hugenerd.com.au, and to personal information we handle in running the business.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect, and how

We collect personal information directly from you. We do not buy lists or collect information about you from data brokers.

What we collect depends on what you do:

• Contact and enquiry forms, including the Stack Review and AI Firebreak enquiries: your name, email address, your message, the organisation where the form asks for it, and which page you used.
• AI Governance Pack download: your name, work email and organisation, and your role if you give it.
• Effective Challenge enquiry: your name, work email, organisation, role or board position, the number of seats, and anything else you add.
• Energy bill upload (The Clockwork Cloud): your name, email address, company name if you give it, and the bill itself. An energy bill usually shows the account holder's name, the supply address, an account number, a meter identifier and consumption history.
• Email and client work: whatever you send us, and the records of work we do for you.
• Browsing our sites: Vercel Analytics counts page views in aggregate and does not use cookies. Google Analytics, loaded through Google Tag Manager, sets cookies and records usage such as pages viewed, device and browser type, and approximate location. Our hosting provider processes your IP address to deliver the site and to limit abuse of our forms, and an IP address can appear in server logs when a form submission is rejected.

hugenerd.com.au runs entirely in your browser and collects nothing.

We do not ask for sensitive information, such as health information, and would ask you not to send it.

Why we collect it

• To reply to your enquiry, send you what you asked for, or prepare the energy bill review you requested.
• To provide services when you engage us.
• To understand, in aggregate, how our sites are used.
• To keep business records and meet our legal obligations.

We may contact you about your enquiry or the resource you requested. We do not add you to a mailing list, we do not send bulk marketing, and we do not sell, rent or trade personal information.

Who handles it for us

We use these providers to run our sites and business. Each processes your information under its own terms and privacy policy.

• Vercel

  What it does for us

  Hosts our websites and provides cookieless page-view analytics

  Where the information is held

  United States, with a global delivery network

• Supabase

  What it does for us

  Stores form submissions

  Where the information is held

  Australia (Sydney)

• Resend

  What it does for us

  Sends the emails our forms generate

  Where the information is held

  United States

• Google

  What it does for us

  Email, where form submissions and uploaded bills arrive; file storage; Tag Manager and Analytics

  Where the information is held

  United States and other countries where Google operates

• Anthropic

  What it does for us

  Its Claude models run our assistant, which reads and summarises the emails our forms generate so we can sort and answer them

  Where the information is held

  United States

• Voyage AI

  What it does for us

  Turns our assistant's notes into search vectors so it can find them later; those notes can mention people who have contacted us

  Where the information is held

  United States

• Substack

  What it does for us

  Hosts our articles. Our Insights page reads Substack's public feed and sends it nothing about you; if you subscribe on Substack, its own policy applies

  Where the information is held

  United States

This means your personal information is likely to be disclosed overseas, mainly to the United States.

How long we keep it

• Enquiries and downloads: two years after our last contact with you, then deleted, unless the enquiry becomes a client engagement.
• Energy bills uploaded for a review: deleted within 90 days of sending you the review, unless you then engage us.
• Client engagement records: seven years after the engagement ends, because professional and legal record-keeping requires it.
• Analytics: held by Google and Vercel under their own retention settings.

Keeping it secure

Information is held in access-controlled accounts protected by multi-factor authentication, and our work devices are encrypted. No system is perfectly secure, and we keep only what we need for as long as we need it.

Access, correction and deletion

You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@abundantkindling.com.au. We may need to confirm your identity first. We will respond within 30 days and there is no charge. We will delete information on request unless the law requires us to keep it, and if so we will tell you why.

Complaints

If you think we have mishandled your personal information, email hello@abundantkindling.com.au. We will acknowledge your complaint within five business days and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes

We will update this policy when what we do changes, and show the date of the change at the top of the page.

Contact

Our Website Terms of Use covers the rest of your use of the sites.