The short version: we collect what you send us through the contact form or the chat assistant, what you tell our AI receptionist if it answers your call, plus anonymous statistics about which pages get read. We do not sell your details, we do not run advertising or retargeting trackers, and there is no mailing list.
Who we are
Newcastle Web Co is a web design and SEO studio based in Cameron Park NSW 2285. You can reach us at admin@newcastlewebco.com.au or on 0429 085 979. We are responsible for the personal information collected through this website.
When you fill in the contact form
The form asks for your name, phone number, email address and message. When you submit it, those four fields are sent to us as an email and nothing else happens to them. They are not written to a database, they are not added to a list, and they are not shared with anyone.
The email is delivered by Resend, an email sending service, and it lands in our inbox at admin@newcastlewebco.com.au. It stays there the way any email does, unless you ask us to delete it.
The form also contains one hidden field that people never see and never fill in. Anything typed into it identifies the sender as an automated script, and the submission is discarded rather than sent. If you are using a browser that fills it in for you, nothing you typed reaches us — email us directly instead.
When you use the chat assistant
Most pages of this site have a chat window answered by an AI assistant, not a person. It says so in the window. Anything you type into it is sent to our server, and from there to Anthropic, the company whose model writes the replies, so it can answer you. The conversation is stored in a database run by Supabase, along with your IP address, so the window can pick the conversation up again if you reload the page and so we can block abuse.
If you give the assistant your name and phone number, it passes them to us as an email, the same way the contact form does, and we call you back. Nothing you type is used to train anyone's AI, and the chat assistant cannot book anything, take payment, or see anything about you beyond what you tell it.
A conversation where you leave no details is deleted after 30 days. If you do leave details, the transcript is deleted after 90 days and your name and number are removed from our records after two years, unless you ask us to remove them sooner.
When our AI receptionist answers your call
If we cannot get to the phone, an AI receptionist may answer instead. It tells you in its first sentence that it is an AI and that the call is recorded, and you can hang up and email us instead. The call is handled by Retell AI, which runs the voice, the recording and the transcript. Your number comes from caller ID. The details you give it, your name, suburb and what you need, are emailed to us and kept with the transcript in the same Supabase database in Sydney as the chat.
If you ask it to book a time for us to call you back, it puts an event in our own Google Calendar with your name, your number and one line on what you need, and we get an email with the time. It only offers times we have set aside, and we can move a booking if we need to. The recording is held by Retell; ask us and we will have it deleted. Your name, number and transcript are removed from our records two years after the call, and a booking's details two years after the booked time, unless you ask us to remove them sooner.
Spam checking
Form submissions are checked by Cloudflare Turnstile, which works out whether a submission came from a person or a bot. To do that, your IP address is sent to Cloudflare along with a single-use token generated in your browser. Turnstile does not ask you to solve a puzzle and does not track you across other websites.
Analytics
We use Google Analytics 4 to see which pages are read and how people arrive. It records the pages you visit, the site or search that sent you, your approximate location at country and region level, and your device and browser type. Google states that Analytics 4 does not log or store IP addresses.
Analytics sets two cookies in your browser, named _ga and _ga_ followed by an identifier. They exist to tell one visit apart from the next. They are not used for advertising.
The analytics script is deliberately loaded late, after the page has finished rendering, so it costs you nothing in loading speed. If you leave within a few seconds without scrolling or tapping, it never loads at all and your visit is not recorded.
Hosting
The site is hosted on Cloudflare Pages. Like every web host, Cloudflare keeps short-term server logs of requests — IP address, the page requested, the time, and your browser's user-agent string — which it uses to serve the site and to block attacks. We do not read those logs to identify individuals.
What we never do
- Sell, rent or trade your personal information. Ever, to anyone.
- Run any tracking beyond the one tool named above, Google Analytics. There is no advertising pixel on this site.
- Add you to a mailing list because you sent an enquiry.
- Take payment details on this website. Invoicing happens separately.
- Ask you for anything we do not need in order to reply to you.
Refusing cookies
Every browser can block or delete cookies — it is in the privacy or site settings. Blocking them does not break anything on this site; nothing here needs a cookie to work. Google also publishes a browser add-on that opts you out of Google Analytics on every site at once.
Where your information goes
Google, Cloudflare, Resend, Anthropic and Retell all operate globally, so information handled by them may be processed on servers outside Australia, including in the United States. The chat database is held by Supabase in Sydney, and so are the details and transcripts of calls the AI receptionist answers. We have no control over which of their data centres handles a given request. Each of those companies publishes its own privacy policy, linked above.
How long it is kept
Enquiry emails stay in our inbox until you ask us to remove them, or until we no longer have a business reason to keep them. Chat conversations, phone calls and call-back bookings are kept for the periods in their sections above. Analytics data is held by Google for the retention period set on the property, after which Google deletes it. Cloudflare's server logs are short-lived and governed by its own policy.
Seeing or deleting what we hold
Email admin@newcastlewebco.com.au and ask. You can request a copy of what we hold about you, ask us to correct something, or ask us to delete it. There is no form to fill in and no charge. We will come back to you within a reasonable time, and in practice that means a day or two.
We handle personal information in line with the Australian Privacy Principles. If something we have done with your information bothers you, tell us first and we will try to fix it. If you are not satisfied with how we handle it, you can take the matter to the Office of the Australian Information Commissioner.
Changes to this policy
If what the site collects changes, this page changes with it and the date at the top moves. There is no version history, so the date is the thing to check.
Newcastle Web Co, Cameron Park NSW 2285. Last updated 26 September 2026.