Legal

Privacy Policy

Last updated: February 2026

RedKey Digital ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal information when you use our website (redkey.au) and services including web design and NEXUS SEO intelligence.

1. Information We Collect

When you use our website or services, we may collect the following types of information:

Contact Information: Name, email address, phone number, and business URL that you provide through our contact form or during consultations.

Usage Data: Pages visited, time spent on site, browser type, device type, and referring URLs. This data is collected through Vercel Analytics and Google Analytics 4.

Search Console Data: If you engage our SEO services, we access Google Search Console data for your domain including search queries, click-through rates, impressions, and page performance. This data is accessed with your explicit authorisation through Google OAuth.

Business Data: Website performance metrics, SEO data, and analytics information necessary to deliver our NEXUS intelligence services. This may include data from Google Analytics 4, Google Search Console, Bing Webmaster Tools, and Lighthouse audits.

2. How We Use Your Information

We use collected information for the following purposes:

To deliver our web design and SEO intelligence services as agreed in your service plan.

To operate the NEXUS engine system on your behalf, analysing data from up to 5 connected sources across 25 analysis engines.

To communicate with you about your project, share reports, and provide recommendations.

To improve our website, services, and NEXUS system based on aggregate usage patterns.

To comply with legal obligations and protect our legitimate business interests.

3. Data Storage and Security

Your data is stored securely using industry-standard practices:

Website hosting: Our website is hosted on Vercel's infrastructure with automatic HTTPS encryption.

Client data: NEXUS analytics data is stored in Supabase (PostgreSQL) with row-level security enabled. All database connections are encrypted.

Access controls: Only authorised RedKey Digital team members (currently two senior strategists) have access to client data. We do not employ juniors, offshore teams, or third-party contractors who would access your data.

No third-party selling: We never sell, rent, or share your personal information with third parties for their marketing purposes.

4. Cookies and Tracking

Our website uses minimal tracking:

Vercel Analytics: Privacy-focused analytics that does not use cookies. Collects page views, web vitals, and audience data without personal identifiers.

Google Analytics 4: Used for deeper traffic analysis. Collects anonymised browsing data. You can opt out using the Google Analytics opt-out browser extension.

No advertising cookies: We do not run advertising pixels, retargeting scripts, or third-party tracking cookies.

Essential cookies only: We may use session cookies necessary for website functionality such as form submissions.

5. Your Rights

Under the Australian Privacy Act 1988 and applicable privacy laws, you have the right to:

Access: Request a copy of the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to legal retention requirements.

Portability: Request your data in a portable format when technically feasible.

Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

To exercise any of these rights, contact us at privacy@redkey.au.

6. Data Retention

We retain your information for the following periods:

Contact form submissions: 12 months after last contact, unless you become a client.

Client project data: Duration of the service agreement plus 24 months for reference and continuity.

NEXUS analytics data: Duration of the service agreement. Data is deleted within 30 days of service termination upon request.

Website analytics: Aggregated data retained indefinitely. Individual session data retained per platform defaults (Vercel: 30 days, GA4: 14 months).

7. Third-Party Services

We use the following third-party services in delivering our work:

Vercel (website hosting and analytics) - vercel.com/legal/privacy-policy

Supabase (database and authentication) - supabase.com/privacy

Google (Search Console, Analytics 4, Business Profile) - policies.google.com/privacy

Bing (Webmaster Tools) - privacy.microsoft.com

Each service has its own privacy policy governing their handling of data. We encourage you to review them.

8. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised date. Material changes will be communicated to active clients via email.

9. Contact

For privacy-related enquiries:

RedKey Digital

Email: privacy@redkey.au

Phone: +61 456 131 471

Location: Melbourne, Australia

ABN: Available on request