Version 1.0. Current at 22 August 2026. This page says what we actually do. If any of it stops being true, we change the page rather than the practice.
Who you are dealing with
Anum Pty Ltd, ABN 80 697 129 525, ACN 697 129 525. Registered 14 April 2026. Melbourne, Victoria.
Email hello@anum.com.au. Every message sent through this site is read by the person who would do the work.
Where we stand under the Privacy Act, plainly
Anum is a small business operator under section 6D of the Privacy Act 1988 (Cth). Our annual turnover is under the three million dollar threshold and none of the exceptions in section 6D(4) apply to us, so the Australian Privacy Principles do not currently bind us. We have not opted in to being treated as an organisation under section 6EA.
We have written this policy to the standard set by Australian Privacy Principle 1.4 anyway, and we intend to behave as though the Principles applied.
Two honest reasons, and neither of them is that we are required to. The first is that we sell governance and data handling advice, and a firm that sells that with no published position of its own is not worth listening to. The second is that some of our clients are covered even though we are not, and when they hand us anything about their own customers, their obligations become the standard the work has to meet.
What we will not do is claim a legal status we do not have. If our turnover crosses the threshold, or the law changes, this page changes with it.
What we collect
Two forms on this site, and nothing else.
The guide form. Your name and your email address. That is the whole form.
The enquiry form. Your name, your email address, and a description of what is going on in your business. Your company name and your phone number are optional and the form works without them.
Our website host also records ordinary server and request information, including IP addresses, when a page is served.
Anything you tell us on a call or by email afterwards is held as ordinary business correspondence.
What this site does not do
This site sets no cookies. It runs no analytics, no tag manager, no advertising or conversion pixel, no session recorder and no third party script of any kind. Type is served from this domain rather than from a font host, so loading a page here does not tell anyone else that you visited.
We do not buy contact lists, we do not sell or rent your details, and we do not receive a benefit for passing your details to anyone.
Why we collect it, and what we do with it
The guide form exists to send you the guide and to let us know who is reading it. The enquiry form exists so we can reply to you about your enquiry. That is the purpose in each case, and we do not use either for a different one.
We do not run a mailing list, a newsletter or an automated email sequence, and submitting either form does not put you on one. If we ever want to send you something other than a reply, we will ask you first, separately, and it will be a question you can answer with no.
Where the information goes, and which countries
Two providers hold information you send us, and both are outside Australia. We name them rather than describe them.
Netlify, in the United States. This site is hosted by Netlify and both forms are Netlify forms, so a submission is received and stored on Netlify's infrastructure in the United States.
Google, in the United States and Ireland. Form notifications and our email arrive in a Google Workspace mailbox, so anything you send us is held by Google.
We treat both as a disclosure of your information overseas rather than as mere storage, because that is the more honest reading of the arrangement. We are not relying on an exception, and we do not claim that United States law is substantially similar to the Australian Privacy Principles, because it is not. If we are ever an entity bound by the Principles, an act by either provider that would breach them is treated by section 16C as ours, and we accept that.
How long we keep it
We delete website form submissions from the host within 30 days of dealing with them. Email correspondence is kept for seven years, because tax and business records law expects it. Where you ask us to delete something earlier and we are not required to keep it, we will.
Getting a copy, and correcting it
Email hello@anum.com.au and ask. We will tell you what we hold about you and give you a copy, and if any of it is wrong we will correct it. We aim to answer within 30 days and we do not charge for it. We may ask you to confirm who you are first, which is the only reason we would delay.
If you are unhappy with how we handled your information
Tell us first, at hello@anum.com.au, and put "privacy" in the subject line. It goes to the person who would have handled the information in the first place. We will acknowledge it within five business days and give you a written answer within 30 days, setting out what we found and what we are doing about it.
If that answer does not satisfy you, you can raise it with the Office of the Australian Information Commissioner. Because we are not currently an entity bound by the Australian Privacy Principles, the Commissioner may not be able to take a complaint about us, and we would rather tell you that here than have you find out after you have filled in a form.
If something goes wrong
If we become aware of unauthorised access to, or loss of, information we hold about you, we will assess what happened within 30 days. If we think the incident is likely to cause you serious harm, we will tell you what happened, what information was involved and what we suggest you do, and we will notify the Office of the Australian Information Commissioner.
The Notifiable Data Breaches scheme does not currently apply to us. That paragraph is a commitment we are making, not a legal status we are claiming.
Changes to this page
This page carries a version number and a date at the top. When we change it we change both. We review it every six months and whenever we change a provider.