---
title: "Privacy Policy | Croissant & Baguette"
description: "What Croissant & Baguette collects when you use this site, why, who helps us handle it and how to ask us to see, fix or delete it."
url: "https://croissantbaguette.com.au/privacy/"
---

# Privacy

https://croissantbaguette.com.au/privacy/

What Croissant & Baguette collects when you use this site, why, who helps us handle it and how to ask us to see, fix or delete it.

## Privacy policy

What we collect when you use this site, why, who helps us handle it, and how to see, fix or delete it.

- **Who we are** Croissant & Baguette is the trading name of C&B Marketing Pty Ltd (ABN 31 635 268 352), a small Sydney studio. "We" and "us" in this policy means us. We handle personal information in line with the Australian Privacy Principles.
- **What we collect and why** Only what you type into a form, plus the usual technical details of a visit. Contact form. Your name, email, company if you give it, the topics you tick, your message and any files you attach. We use them to reply and, if we work together, to quote and deliver. Free AI visibility report. Your business name, website, where your customers are (and your suburb if they are local), what you do, two competitors, your name, your email and what you are interested in. We use them to build the report, email it to you and follow up once. Messages from a report page. Your name, email and message, sent with the report's business details so we know which report you mean. Visits. Google Analytics records the pages you view, how you arrived, your device and browser, and an approximate location worked out from your IP address. When you arrive from one of our Google ads, Google also records that ad click so we can see which ads bring enquiries. Spam and abuse checks. Our forms use Cloudflare Turnstile to check that a person is sending them. The report form also keeps a one-way hash of your IP address, not the address itself, to limit how many reports one connection can request. We do not sell personal information and we do not add you to a mailing list.
- **Who helps us handle it** We use a few service providers, each for one job: Cloudflare hosts this site, runs the Turnstile check and stores report requests. Basin receives contact form and report page messages and passes them to us. Resend sends the report email. ntfy sends us a short alert when a message or report request comes in. Anthropic and DataForSEO receive the business details from a report request (never your name or email) to write the report's questions and ask ChatGPT, Claude, Gemini and Google's AI Overviews about your business. Google provides Analytics and Ads, and PageSpeed Insights tests the website you enter for the report. When you send a form, we may share a hashed (scrambled, one-way) copy of your email address with Google so it can tell us whether the enquiry came from one of our ads. Google cannot read the address from the hash.
- **Information stored overseas** Some of these providers store or process information outside Australia, including in the United States. We choose established providers and send each one only what it needs.
- **Cookies and browser storage** Google Analytics and Google Ads set cookies to tell visits apart and to connect an enquiry to the ad that led to it. You can block or delete cookies in your browser, install Google's Analytics opt-out add-on or change your Google ad settings. The site still works without them. When you request a free report, your name and email are saved in your own browser so the report page can fill in its message form for you. They stay on your device.
- **How long we keep it** We keep enquiries and report requests for as long as we need them to reply, deliver the report and keep our business records, and we delete them when you ask. Google Analytics keeps visit data for 14 months.
- **Seeing, fixing or deleting your information** Ask us through the contact page, or reply to any email we have sent you. We will answer within 30 days and may need to confirm who you are first.
- **Complaints** If you think we have mishandled your information, tell us first through the contact page and we will try to put it right. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner.
- **Changes to this policy** When what we collect or who helps us changes, we update this page and the date at the top.