Privacy policy.

Who we are

The No Staff website at nostaff.com.au is operated by JKA LEE PTY LTD trading as No Staff Developments (ABN 83 123 919 219). No Staff is our short brand name. In this policy, “No Staff”, “we”, “us” and “our” refer to that company in connection with this website and enquiries about its services.

For privacy questions, access or correction requests, or complaints, contact Jonno at jonno@nostaff.com.au.

This policy covers website visits, enquiries, existing newsletter records and unsubscribe requests, and information previously supplied through our website tools. A client project or product may need separate privacy information before it handles personal information on a client’s behalf.

What is available now

You can browse the website and contact us by email. Selecting an email link opens your email application; it does not send a message automatically.

The previous enquiry forms, document uploads, AI chatbot, onboarding submissions and new newsletter subscriptions are paused. Pausing these features does not automatically delete earlier records. The former newsletter archives, delivery schedules and administration tools are retired. Existing unsubscribe links remain available.

Optional Google Analytics and Microsoft Clarity tools operate on the public homepage only after you accept their respective cookie categories. Our planned CRM and AI telephone receptionist are not live customer services.

Information we collect and hold

When you email us, we receive your email address, message, attachments and other information you choose to provide. This may include your name, telephone number, business details and information about the services you are interested in.

If you previously used our website forms or tools, records may include contact and business details, website and competitor information, existing tools, goals, challenges, budget information, uploaded files, correspondence and generated business research. Earlier onboarding tools also used publicly available company and competitor website content, which could include personal information.

Existing newsletter records may include an email address, optional first name, selected newsletters and subscription or unsubscribe information.

When your browser connects to the website, hosting systems receive technical request information. This may include your IP address, requested page, browser or device details and request time. Our cookie controls also store your choices in your browser, as explained below.

Please do not send passwords, payment-card details, identity documents, health information or confidential information about other people in an initial enquiry. Contact us first if a project needs more detailed information.

You can browse without identifying yourself. You may make a general enquiry using a name of your choice where practical, but we need a working contact method to reply and enough information to understand your request.

How we use information

We use enquiry information to respond, discuss requested services and maintain a record of those discussions. Legacy newsletter delivery and administration tools are retired. Existing newsletter information may remain in provider accounts and is used when processing unsubscribe or privacy requests.

Technical information and browser preferences support website delivery, privacy choices, troubleshooting, security and prevention of misuse. Information may also be needed to handle privacy requests or complaints and applicable legal recordkeeping requirements.

A cookie choice is not permission to send marketing emails. New newsletter subscriptions are paused. If you already receive a newsletter, use its unsubscribe link or email jonno@nostaff.com.au for help.

Service providers and overseas handling

Our website is hosted by Vercel. Email enquiries pass through email providers, and legacy newsletter functions used Resend for contacts and email delivery. Existing unsubscribe links still use Resend to remove the relevant subscription; the retired website does not send new newsletters.

Earlier website tools were configured to use Google Drive for uploads and OpenAI for chat responses, onboarding analysis and personalised email content. Those public intake endpoints are now paused and do not process new submissions or forward their contents to those services. Earlier information may remain in provider accounts, correspondence or backups where it was previously received and retained.

These services can involve processing outside Australia, including in the United States. Vercel identifies the United States as its primary processing location, and Resend states that its stored data is held in the United States. Other processing locations depend on the provider, account settings, support access and subprocessors. This is not an assurance that information stays in Australia. Contact us if you need information about the handling of a particular record.

For provider information, see Vercel’s Data Processing Addendum and Resend’s security information. We may also need to disclose information where required or authorised by law.

Cookies and browser storage

Our cookie declaration at /cookies explains cookies, local storage and session storage used by the website. These are different technologies.

The website uses first-party local storage to remember cookie choices and their notice version and timing. A valid choice is honoured for 180 days, or until the notice or configuration changes. The saved item can remain in the browser until a later visit discards it or you clear site data.

A session-storage fallback can keep optional tools blocked when a changed preference cannot reliably be saved. The retired newsletter administration portal previously used session storage after sign-in. Its sign-in and administration routes no longer operate, but an older browser entry may remain until the tab session ends or you clear site data. The cookie declaration gives the relevant names and lifetimes.

You can change optional categories through Cookie settings or clear site data in your browser. Clearing site data may reset your preferences and remove historical browser entries.

Google Analytics loads only after you accept Analytics. Microsoft Clarity loads only after you accept Experience insights. You can reject both, choose either separately or withdraw a choice using Cookie settings. Without the relevant opt-in, our integration does not load that provider’s tracking script. Rejecting optional tools does not stop technical hosting or security processing needed to serve the website.

Withdrawing a category stops new collection by that tool through our integration and reloads the page so its previously loaded script does not keep running. An in-flight request or final buffer containing information collected while consent was valid may finish sending during shutdown. Withdrawal also removes the first-party measurement cookies accessible to this website. It does not recall information already transmitted, delete data already held by a provider or delete cookies on a different provider domain; you can manage those cookies through your browser and use the provider’s privacy controls.

Optional analytics and experience insights

Google Analytics 4 helps us understand visits to the public homepage. With Analytics enabled, it receives homepage page-view and technical measurement information, which can include browser or device details, identifiers, session information and approximate location derived from the network connection. Our integration does not send enquiry messages, uploads or CRM records to Google Analytics, and does not load it on forms, administration or other non-homepage routes. Google Signals and advertising personalisation signals are disabled in our website tag; advertising consent remains denied. See Google’s Privacy Policy for its handling of information.

Microsoft Clarity helps us understand homepage navigation through heatmaps and session replays, such as clicks, scrolling and pointer movements. With Experience insights enabled, Microsoft receives interaction and device/browser information, identifiers and page content permitted by the masking configuration. This is not an audio or telephone recording. Our integration excludes form, administration, CRM and other non-homepage routes. Microsoft acts as a data controller; its Privacy Statement describes its collection, use and protection of information. Our integration sends advertising-storage consent as denied. These controls are not a claim that all information is anonymous or that Microsoft acts only on our instructions.

Google and Microsoft operate internationally, including in the United States. Their provider policies describe overseas processing and relevant privacy controls.

Cookie lifetime is different from provider-data retention. Our Google tag requests first-party cookies lasting up to 180 days without renewing their expiry on each visit; browsers may shorten this. Google Analytics server retention depends on the data category and property settings, and standard aggregated reports are not subject to its user/event retention setting. We do not represent that all Google data is deleted when a browser cookie expires.

Microsoft’s published Clarity retention is 30 days for ordinary playback, and 9 months for labelled or favourited sessions and heatmap/click data. Microsoft also states that deleting a particular user’s Clarity data requires deleting the whole project. Withdrawing consent stops future collection through this website, but is not a promise of individual deletion from already collected Clarity records.

Keeping information and protecting it

Information may be held in correspondence, provider accounts, uploaded-file storage and associated backups. The period for which a particular record is needed depends on its purpose, any ongoing enquiry or service, applicable recordkeeping requirements and legal rights or disputes. No single retention period applies to every type of record.

Pausing a website feature or removing a file from a browser does not itself erase copies already held elsewhere. You can contact us to ask whether we hold information about you and request deletion. Some records may need to be retained, and provider or backup restrictions may affect when a copy can be removed.

The current website limits new intake by disabling the former public submission, upload and chatbot endpoints. Information you choose to send by email still passes through email systems. No internet service can guarantee absolute security, so please contact us before sending sensitive or confidential material.

Access and correction

Email jonno@nostaff.com.au to request access to information we hold about you, correct information you believe is inaccurate, request deletion or get help with a newsletter subscription. Describe the information or interaction concerned so we can locate it.

We may need enough information to verify your identity before releasing or changing a record. Please do not attach identity documents unless we have discussed an appropriate method. If we cannot provide the requested access or change, we will explain relevant limitations and available next steps, subject to applicable law.

Privacy complaints

Send privacy complaints to jonno@nostaff.com.au. Tell us what happened, approximately when it happened, which information is involved and the outcome you are seeking. Include a way for us to contact you.

We will review your concerns and respond. If we need further information or more time, we will let you know. If the matter is unresolved, you can contact the Office of the Australian Information Commissioner to find out whether it can consider your complaint. Its jurisdiction depends on the circumstances and applicable law. The OAIC generally asks you to give the organisation 30 days to respond first.

Updates and future services

We may update this policy when our services or information handling change. The last-updated date identifies the current version. An updated policy does not itself give permission for a new use that needs consent.

The CRM and AI receptionist remain planned services. Relevant disclosures and safeguards must be in place before those features handle real customer information, including any future call recording or transcription.