What we collect, and what we do with it.

Short version: we collect what you type into the form, how you move around this site, and what your browser tells us when you visit. We don't sell it, we don't run ad trackers, and you can ask us to delete the lot at any time.

Last updated 30 July 2026. This policy covers hushcog.com.au and the work we do for clients.

Who we are

HushCog is an automation business run by Rob Cot, based in Melbourne, Victoria, working with businesses across Australia. If you want to talk to a human about anything on this page, email hello@hushcog.com.au.

A note on the law, because we'd rather be straight with you than quietly convenient. The Privacy Act 1988 currently exempts most businesses turning over less than three million dollars a year, and today that probably includes us. We follow the Australian Privacy Principles anyway. Our clients hand us access to their systems, so treating privacy as optional would be an odd way to earn that.

What we collect

When you fill in the form

The enquiry form at the bottom of every page asks four questions about your business, then your name and email, with phone and a message as optional extras. We also record which page you were on when you sent it, so we know what you were reading.

When you book a call

The booking calendar is Google's. When you pick a time, Google collects your name, email and anything you type into the booking notes, and puts the appointment in our calendar with a Google Meet link.

When you just read the site

We use PostHog to count visits and see which pages get read. It collects the pages you view, roughly where you are (worked out from your IP address, which is then discarded rather than stored against you), your device and browser type, and the site that sent you here. It uses a cookie to tell a returning visitor from a new one.

Session recordings

PostHog also records how people move through the site: the pages you open, where you click, how far you scroll, where the mouse goes. Played back, it looks like a video of the page you were looking at. We watch these to find the parts of the site that confuse people. That is the only reason we watch them.

Anything you type is masked before the recording leaves your browser, so your name, email, phone number and message never appear in one. We also can't see anything outside this site: not your other tabs, not your other windows, not a single keystroke anywhere else. Which options you tapped in the four questions is visible, because tapping one changes what's on the screen.

Recordings delete themselves within three months. If you'd rather not be recorded at all, turn on "Do Not Track" in your browser and we'll skip you, or email us and we'll exclude you.

We don't run advertising or social media tracking pixels, and nothing on this site follows you around the internet afterwards.

When you become a client

Building automations means we're given access to systems that hold your business data, and sometimes your customers' data. We only touch what the job needs, we don't copy it anywhere it doesn't belong, and what happens to it is written into your agreement before we start. If your work involves health records, NDIS participant information or anything similarly sensitive, we handle it under the obligations that apply to you, and we'll say so in writing.

Why we collect it

• To answer your enquiry and work out whether we can actually help.
• To turn up to the call you booked.
• To do the work you've hired us to do, and to invoice you for it.
• To see which pages are worth keeping, in aggregate.

We won't add you to a mailing list because you filled in the form. If we ever start a newsletter, you'll have to ask for it.

Who else sees it

These are the only third parties involved in running this site:

Those are overseas recipients, which means your information is handled outside Australia and outside the reach of the Privacy Act. We chose each one deliberately and we keep the list short. Beyond them, we disclose personal information only if you ask us to, or if a law requires it.

We have never sold personal information and we're not going to.

How long we keep it

Enquiries stay in our inbox while there's a conversation happening, and for up to two years after it goes quiet, because people often come back later. Client records are kept for seven years, which is what the tax rules require. Analytics expires after twelve months and session recordings within three. Ask us to delete something sooner and we will, unless we're legally required to hold onto it.

Keeping it safe

The site is served over HTTPS. Accounts that hold your information use multi-factor authentication and a password manager. Access to client systems is granted per job and revoked when the work ends. No one can promise a system is unbreakable, but if something does go wrong and it's likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner, promptly.

Seeing it, fixing it, deleting it

Email hello@hushcog.com.au and ask. You can request a copy of what we hold about you, have something corrected, or have it deleted. We'll reply within a few days and we won't charge you. We may need to confirm who you are first, which is usually as simple as replying from the email address we already have.

To opt out of analytics, turn on "Do Not Track" in your browser and we'll stop collecting on this site, or use a content blocker, or just email us and we'll exclude you.

If you're unhappy with us

Tell us first: hello@hushcog.com.au, and we'll come back to you within thirty days with what we've done about it. If that doesn't sort it out, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001. That's your right and we won't take it personally.

Changes to this policy

If we add a tool or change what we collect, we'll update this page and change the date at the top. We won't quietly start doing something with your information that this page says we don't do.