Legal

Privacy.

Last updated: 27 April 2026

BM Solutions (“BM Solutions”, “we”, “our”) is an Australian fractional digital agency based in Melbourne. We respect your privacy and are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This page sets out, in plain English, what information we collect, why, and what we do with it.

What we collect

We only collect information you give us, or that’s automatically generated when you interact with our site:

  • Contact details you submit through the contact form: name, email, company (optional), services of interest, rough budget, and the message you wrote.
  • Email correspondence when you reach out to hello@bmsolutions.com.au directly.
  • Server logs: your IP address, user-agent, and the URL you visited, retained for up to 30 days for security and abuse prevention.
  • Analytics: if you accept analytics in the cookie banner, we use Google Analytics 4 to count page views and track which pages people read. IP addresses are anonymised by Google before storage, we have Google Signals turned off (so no cross-device tracking), and we have ads personalisation turned off (so the data isn’t fed to Google’s advertising graph). We don’t run Meta Pixel, LinkedIn Insight Tag, or any other advertising tracker.

We do not collect special categories of personal information (health, religion, sexuality, etc.) and we don’t ask for them.

How we use it

  • To respond to your enquiry and discuss whether we’re a fit.
  • To send you information you specifically asked for (a proposal, a follow-up note).
  • To run the website itself: server logs, abuse prevention, basic performance monitoring.

We don’t use your information for unrelated marketing without your consent. We don’t sell or rent your information to anyone, ever.

Who we share it with

Limited to:

  • Our hosting provider (cPanel/LiteSpeed, Australian data centre), required to serve the site and store form submissions in transit.
  • Email infrastructure (the same hosting provider’s mail relay), required to deliver the email we send to ourselves when you submit the form.
  • Google LLC: receives anonymised analytics data via Google Analytics 4 if you accept analytics cookies. See Google’s privacy policy.
  • Government, regulators, or law enforcement, if we’re legally required to.

Where any future third party is added (a different analytics tool, an email service provider for newsletters), we will list them here with a link to their own policy.

Where it’s stored

Form submissions arrive as email and are stored in our own inbox (Australia). The web server logs sit on the same Sydney-based cPanel host. We don’t transfer personal information offshore. We keep enquiry emails as long as the engagement remains relevant (typically 1–3 years), and delete or anonymise on request.

Cookies

We try to keep the cookie footprint small. Here’s the full list.

  • bm-consent-v1: a tiny localStorage entry (technically not a cookie, but treated the same) that remembers whether you accepted or declined analytics, so we don’t ask twice. Set by us, never sent to anyone, never expires until you clear your browser storage.
  • _ga, _ga_VC383JJ6HJ: Google Analytics 4 cookies. Only set if you accept analytics. Used to distinguish unique visitors and sessions. First-party (set on bmsolutions.com.au), expires after 2 years.
  • Keystatic admin session cookie: set when an editor signs in to /keystatic/. Scoped to the admin route, never reaches public visitors.

You can change your analytics choice at any time via the Cookie preferences link in the footer. Declining wipes the GA4 cookies on your next page load.

Your rights

Under the APPs, you can:

  • Ask what we hold about you (APP 12).
  • Ask us to correct anything that’s wrong (APP 13).
  • Ask us to delete your information once it’s no longer needed.
  • Withdraw consent for any future direct marketing.

Email hello@bmsolutions.com.au with the request and we’ll action it within 30 days.

Complaints

If you’re not happy with how we’ve handled your information, please tell us first. We’d rather know. If you remain unsatisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au.

Changes

We’ll update this page as our practices change. This isn’t a one-and-done document. The “Last updated” date at the top changes every time. Material changes (new tools, new sharing) will trigger a banner on the site for 30 days.

Contact

Privacy questions: hello@bmsolutions.com.au with “Privacy” in the subject line.