Privacypolicy.

Reddrop Group Pty Ltd (ABN 70 626 690 622), trading as Gavin Reddrop, is responsible for the personal information described here. In this policy, we, us and our mean that company.

It covers this website, gavinreddrop.com, and the keynote, workshop, advisory and program services delivered under the Gavin Reddrop name.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This section describes the website specifically, because a general list would overstate it. There are no accounts on this site, no passwords, and no payments are taken here.

The enquiry form

The booking form on the contact page and the interest form on the AI Agents page collect your name, your email address, your organisation if you choose to give it, and whatever you write in the message field.

That information is sent as an email to Gavin through our email provider so he can reply. It is not stored in a database on this website and it is not added to a mailing list unless you ask to be added.

Analytics

We use Google Analytics 4 to understand how the site is used. It records the pages you view, roughly where you are in the world based on your IP address, the type of device and browser you use, and how you arrived at the site. It sets cookies in your browser to do this.

Google Analytics is not used to identify you by name, and we do not send it your name or email address.

Advertising measurement

A Google Ads account is linked to the same Google tag, which means Google receives a signal when someone reaches the site from an advertisement. This uses advertising cookies.

Video

The speaking page embeds a video player from YouTube in its privacy enhanced mode. Google receives a request from your browser when that page loads, and sets cookies if you play the video. We do not receive anything about you from that player.

Hosting

The site runs on Vercel, which keeps standard server logs of requests, including IP addresses, for security and diagnostics.

Outside the website, and usually because you have contacted us or engaged us, we may hold:

Contact and business details such as your name, role, organisation, email address and phone number

Event details, correspondence, contracts, proposals and briefing notes for a booking

Billing and payment records, which our accounting and payment providers hold on our behalf

Registration and attendance details for a workshop, program or event

Subscription details for our email list, including whether a message was opened

Testimonials, reviews, photographs and case study material you have given us

We collect this from you directly in almost every case. Where we collect it from someone else, for example an event organiser or a speaker bureau booking you into a session, we will tell you on request.

We do not seek out sensitive information as the Privacy Act defines it, such as health information, racial or ethnic origin, political opinions, religious beliefs or sexual orientation. If it is ever needed for a specific purpose we will ask for your consent first.

Dietary and accessibility requirements you give us for an event are used only to run that event and are deleted afterwards.

Cookies are small files a website stores in your browser. The ones this site involves fall into two groups: analytics cookies set by Google Analytics, and advertising cookies set by Google Ads and by the YouTube player if you use it.

You can block or delete cookies in your browser settings, and every current browser lets you do this. Google also publishes a browser add-on that turns off Google Analytics on every site you visit.

Nothing on this site stops working if you block cookies. There is no login to keep you signed in and no cart to remember.

To answer your enquiry and discuss a possible booking

To deliver a keynote, workshop, advisory engagement or program you have booked, and to prepare properly for it

To invoice you and keep the financial records the law requires

To send you articles, updates and offers, where you have asked for them or have engaged us and have not opted out

To understand which pages and articles are useful, so the site can be improved

To meet our legal obligations, resolve a dispute, or protect the site from abuse

We do not sell your personal information, and we do not disclose it to anyone for their own marketing.

Marketing email is sent only where you have asked for it or where you have engaged us and would reasonably expect it. Every marketing email carries an unsubscribe link, as the Spam Act 2003 requires, and a request to unsubscribe is actioned promptly.

Messages about something you have booked, such as a confirmation, an invoice or a change of arrangements, are not marketing and will still be sent.

If you would prefer not to be contacted for marketing at all, say so through the contact form and it will be actioned.

Given the subject of the work, it is worth being explicit about this.

We use AI tools in the ordinary running of the business, for drafting, research, summarising and analysis. Which tools we use changes as the field changes, so this section describes how your information is handled rather than naming products that will be out of date within a year.

Our practice is to keep information that identifies you out of these tools wherever the work can be done without it, and to use the least identifying version of something that will do the job. Where a tool is given information that identifies you, we take reasonable steps to use providers whose published terms restrict the use of customer inputs for training their general models. We do not put sensitive information, as the Privacy Act defines it, into any AI tool.

No decision that materially affects you is made by an automated system without a person reviewing it. If you believe one has been, ask us and a person will review it.

We share personal information only where it is needed to run the business, and only with:

Service providers who operate parts of the business for us, including Vercel for hosting, Resend for delivering enquiry emails, Google for analytics and advertising measurement, and our email, accounting, scheduling and video conferencing providers

Event organisers, venues and speaker bureaus, where sharing a detail is necessary to run an engagement you are part of

Our accountants, lawyers, insurers and other professional advisers

A government agency, regulator, court or law enforcement body, where the law requires or authorises it

A buyer, if the business or part of it is ever sold, in which case this policy continues to apply to the information transferred

Each of these providers has its own privacy policy, and we encourage you to read the ones that matter to you.

Several of the providers above are based outside Australia, mainly in the United States. That means your information may be stored or processed overseas.

Before using a provider we take reasonable steps to satisfy ourselves that it handles personal information to a standard consistent with the Australian Privacy Principles. By using this site or engaging us, you consent to your information being handled in this way.

The whole site is served over an encrypted connection. Access to accounts and records is limited to the people who need it, and protected by strong, unique credentials and multi-factor authentication where the provider supports it.

No system is perfectly secure and we will not claim otherwise. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

Enquiries that do not lead to an engagement: up to two years, so we can pick up the conversation if you come back

Client and engagement records: seven years after the engagement ends, to meet Australian tax and record keeping requirements

Financial and invoicing records: seven years, for the same reason

Email subscriber details: until you unsubscribe or ask us to delete them

Analytics data: retained by Google under the retention setting on the property, and it holds no name or email address

When information is no longer needed for any of these purposes, it is deleted or de-identified.

Under the Australian Privacy Principles you may:

Ask what personal information we hold about you, and get a copy of it

Ask us to correct anything inaccurate, incomplete or out of date

Ask us to delete it, which we will do unless the law requires us to keep it

Opt out of marketing at any time

Complain about how we have handled it

Send any of these requests through the contact form on this site, marked for the attention of the Privacy Officer. We will confirm receipt and respond within 30 days. We may need to confirm who you are first, so that we do not hand your information to someone else.

There is no charge for making a request. If a request is complex enough to involve real cost, we will tell you what that is before doing the work, and you can withdraw the request.

If you think we have mishandled your personal information, tell us through the contact form, marked for the attention of the Privacy Officer. Set out what happened and what you would like done about it. We will investigate and respond within 30 days.

If you are not satisfied with the response, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au, or by phone on 1300 363 992.

This site and these services are aimed at businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe we hold information about a child, tell us and it will be deleted.

This policy will change as the business and the tools it uses change. The current version always sits on this page, with the date it took effect at the top.

Where a change materially affects how your information is handled, we will say so prominently on the site or by email.

Privacy questions, requests and complaints all go to the Privacy Officer at Reddrop Group Pty Ltd, ABN 70 626 690 622, through the contact form on this site. Mark the message for the attention of the Privacy Officer and it will be routed there.

Go to the contact form