Legal
Privacy Policy
I'm Bernhard Budiono, and I run A Blank Canvas (ablankcanvas.com.au), an AI and automation consultancy based in Brisbane, Australia. This policy explains what personal information I collect through this site, why I collect it, and how you can access, correct, or delete it. I handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What I collect
Contact details you send me. If you email me or otherwise get in touch, I keep your name, email address, and whatever you include in the message so I can respond and follow up.
Booking details. When booking is available on this site, signing in with Google shares your name, email address, and profile picture with me — nothing more. I also keep the details of the booking itself: the meeting time, the meeting link, and any notes you choose to provide. I never receive access to your calendar, contacts, or files.
Analytics. This site uses self-hosted, cookieless analytics (Plausible) running on my own infrastructure. It records aggregate page views only — no cookies, no personal profiles, no cross-site tracking, and the data never leaves infrastructure I control.
How I use it
Only to run the consultancy: responding to enquiries, scheduling and holding meetings, delivering engagements, invoicing, and understanding which parts of the site are useful. I don't use your information for anything you wouldn't reasonably expect from contacting a consultant.
What I don't do
I don't sell or rent personal information. I don't run third-party advertising or ad-tracking scripts. I don't share your information with data brokers or marketing platforms. Information is disclosed only where a service genuinely requires it to function (for example, Google Calendar holds meeting invitations, and Stripe processes payments) or where the law requires it.
Storage, security and retention
Information is stored on infrastructure I control, encrypted in transit, with access limited to me. I keep personal information only as long as it's needed for the engagement or enquiry it relates to, and for business records I'm required to retain (such as invoices). Analytics data is aggregate and doesn't identify you.
Access, correction and deletion
You can ask me at any time what personal information I hold about you, ask me to correct it, or ask me to delete it. Email [email protected] and I'll action the request within 30 days. Some records (for example, tax invoices) must be retained for as long as Australian law requires.
Complaints
If you think I've mishandled your personal information, email me at [email protected] and I'll do my best to put it right. If you're not satisfied with my response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
If this policy changes, I'll update this page and the date at the top. Significant changes that affect how your information is handled will be flagged clearly.