Privacy policy

This policy explains how the Australian Small Business Guide (australiansmallbusiness.com.au) handles information.

Who we are

This website is owned and operated by The Trustee for carparts.com.au (ABN 83 290 386 585), referred to in this policy as “we”, “us” and “our”.

What we collect

Reading this site doesn't require an account and we don't ask you to hand over personal information to access any guide. Our web server keeps standard technical logs (IP address, browser type, pages requested) for security and to keep the site running. Requests to our analytics service also involve technical network information. Our analytics integration does not send names, contact details or an account identifier.

Contacting us

If you use our contact form, we send your name, reply email, chosen subject and message through Resend to our team. If you email us, we receive your email address and message. We use these details to handle your enquiry. Sending an enquiry does not subscribe you to the newsletter.

Newsletter signup and confirmation

Our newsletter contains small-business guides, tools and occasional product updates. To join, enter your email address and tick the consent box. We then send a confirmation email through Resend. Your subscription starts only when you use that link and choose to confirm on our website. Opening the email or the confirmation page does not subscribe you. The confirmation link expires after 48 hours. If you're already confirmed, we may not send another confirmation email.

We keep newsletter records in a private database on our own server. These records include your email address, the consent wording and its version, which signup form you used, when you requested the subscription and when you confirmed it. We use them to send the newsletter, record your permission and manage your choices. We don't send your email address or confirmation token to Umami analytics.

Unsubscribing and keeping records

Each newsletter includes an unsubscribe link. Once you complete the unsubscribe action, we stop newsletter emails immediately. You don't need to log in or provide any extra personal details. You can also contact us for help.

We remove unconfirmed signup records after 30 days. When you unsubscribe, we erase your readable email address from our newsletter database. We retain a coded version of it (a keyed hash), along with limited consent and unsubscribe records, so we can recognise your choice and avoid adding you back without fresh confirmation. This is a record of your choice, not an active subscription.

Our private newsletter database backups are kept for seven days, so a recently removed address may remain in a backup until it expires. To limit abusive signup attempts, we also keep coded identifiers for rate limits for no more than seven days. These retention periods apply to our newsletter system; Resend separately processes email delivery data as described below.

Cookies and analytics

Our BAS-agent directory uses the TPB's openly licensed public register dataset. We display professional names, suburbs, states and registration details, and link to the official record for contact information. Directory analytics records the selected state, result count, page and clicks to official records. We do not send the name, suburb or registration number you type into the directory to Umami, or forward your search to an agent. Filtered directory URLs are excluded from Google indexing.

We use cookieless Umami analytics, served from analytics.6-e.com, to understand which guides and tools people use and where the site needs improvement. The integration runs on our production website and does not use advertising cookies, session recordings, heatmaps or a custom user identifier.

Analytics includes page paths and titles, referring website origins, browser language and screen size, and performance measurements such as loading speed and responsiveness. Events record internal and external link clicks and their page placement. External links keep only the destination origin, with a redacted path also included for resources linked in authored article text. Events also include download types, clicks on email and telephone links (without their addresses or numbers), table-of-contents positions, FAQ openings, article views, scroll milestones at 25%, 50%, 75% and 100%, and active reading milestones at 30, 60 and 120 seconds. Reading time pauses when the page is hidden, unfocused, outside the article body, or inactive for 30 seconds.

We measure whether suggested guides are visible, clicked and followed by active reading. This uses the source and destination page paths, recommendation placement and reading milestone. A short-lived handoff kept in page memory links a click to reading in the same tab; it does not add a visitor identifier or store a browsing history.

We also record search terms after redaction, search filters, result counts and positions, search timing and errors, tool starts, steps, completions, print actions and fixed error categories, and subscription form views, starts, attempts and outcomes. These events do not include your email address, phone number, calculator inputs or results, business plan answers, marketing ratings, or the website address submitted to the marketing check.

Before sending analytics, we remove URL query parameters, fragments and credentials, restrict event fields, and redact obvious email addresses, phone numbers, URLs and credentials in text. Search text is limited to 120 characters. This is a best-effort filter: unusual formats, names or other personal details may not be recognised, and useful text can sometimes be redacted too. Please do not put personal, confidential or sensitive business information into site search.

Your analytics choice

We respect Global Privacy Control and Do Not Track browser signals. You can also turn analytics off below. Your choice uses the localStorage setting umami.disabled in this browser, without a tracking cookie. It applies to this browser and site origin; clearing site data removes the saved choice. Analytics stays off if the saved preference cannot be read. Turning it off stops future analytics events and discards queued events; it does not recall requests already sent. Re-enabling may reload this page if the tracker was blocked while loading.

Information used by our tools

Calculator numbers stay in the page and reset on refresh. Business plan answers and Sprint progress are saved in your browser's localStorage so you can return to them. The free Sprint also stores a simple “started” marker. It doesn't need your email address or a newsletter subscription. If an earlier visit saved an enrolment email, opening the Sprint replaces it with that marker while keeping your work. These values are not analytics data; you can remove them by clearing this site's browser data.

The marketing health check sends the website address you submit to our server so it can fetch the site and produce a report. That address and report content are not included in analytics. Using the tool does not sign you up for the newsletter.

Third parties

The site is served through Cloudflare, which processes technical request data to deliver the site securely. Resend delivers confirmation emails, newsletters and contact form messages for us. This involves processing email addresses and message content, potentially in the United States and other countries where Resend and its service providers operate. See Resend's data processing agreement for details. Our Umami service processes the site usage described above. External links (for example to ato.gov.au) take you to sites with their own privacy policies.

Privacy questions and requests

Use our contact form to ask about this policy, request access to or correction of your information, ask for removal, or raise a privacy concern. Tell us what you need without including sensitive details that aren't relevant. We may need to verify that the information belongs to you before responding to an access or correction request. Unsubscribing through an email link doesn't require that check.

Last updated 11 September 2026.