Privacy policy

TrustHawk is run from Perth, Western Australia. For privacy questions, contact us and choose Privacy. For visitors in the European Union or the United Kingdom, TrustHawk is the controller of the personal information described here.

• You can read the site without giving us any personal information. There are no accounts and no sign up.
• If you use the contact form, we collect your name, email address, the topic you choose, your message, and anything else you decide to include.
• When the form is submitted, our server briefly uses your IP address to limit repeat submissions. We do not store it with your message.
• Our hosting provider records standard server logs, such as IP address, browser type, the pages requested and the time of the request.

• To read, reply to and keep a record of messages you send, including corrections, questions about our method, press or partnership enquiries, and general feedback.
• To deliver the site, keep it secure, prevent abuse of the contact form, and fix problems.
• To understand in aggregate how people use the site so we can improve it.
• We do not use your information for advertising, we do not sell it, and we do not use it to make automated decisions about you.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We collect only what we need for the purposes on this page, we take reasonable steps to keep it accurate and secure, and we delete or de-identify it when we no longer need it.

You can read TrustHawk anonymously. You can contact us under a pseudonym, but we need a working email address to reply.

We use these providers to run the site. They may store or process information outside Australia, mainly in the United States.

• Neon (database for the ratings data; United States). It holds no visitor or contact form information.
• Cloudflare (website hosting, server logs, domain name service, email delivery from the contact form, and cookieless analytics; United States, with servers worldwide).
• Google (the Gmail inbox that receives contact messages; United States and other countries where Google operates).

Each provider handles information under its own terms and privacy policy. We may also disclose information if the law requires it. We do not share personal information with advertisers.

We use cookieless Cloudflare Web Analytics.

• Contact messages: kept while we handle your message and any follow-up, then for up to 24 months, then deleted.
• Server logs: kept by our hosting provider for a short period under its own policies.

The site is served over HTTPS. We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. No method of sending information over the internet is completely secure. If a data breach is likely to cause you serious harm, we will act in line with the Notifiable Data Breaches scheme where it applies to us.

You can ask for access to the personal information we hold about you, and you can ask us to correct it or delete it. You can also complain to us about how we have handled it. Contact us and choose Privacy. We will respond within a reasonable time, usually within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au (opens in a new tab).

If the EU or UK General Data Protection Regulation applies to you:

• Our lawful bases are legitimate interests (to run and secure the site, and to reply to messages you send).
• You also have the right to ask us to erase your information, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time, without affecting earlier use.
• Your information is transferred to Australia and the United States. Where required, we rely on our providers' safeguards for international transfers, such as standard contractual clauses.
• To ask for access, correction, deletion, or any other right on this page, contact us and choose Privacy.
• You can complain to your local data protection authority, for example the Information Commissioner's Office in the UK.

TrustHawk is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us a message, contact us and choose Privacy, and we will delete it.

We may update this policy. If we start collecting more information or using it in a new way, we will update this page before that change starts. This policy was last changed on 5 November 2026.

For a privacy question, or a request for access, correction, deletion, or a complaint, contact us and choose Privacy.