Privacy
Last updated 12 October 2026
This page explains how Idionic Pty Ltd handles personal information. It covers this website, enquiries you send us (by email or through our contact form), and the work we do for clients. It is written in plain language. It is not legal advice, and it does not replace the agreement for a piece of client work.
Who we are
Idionic Pty Ltd (ABN 14 699 014 045) is a consulting business based in Perth, Western Australia. We build bespoke AI-for-sales solutions for Western Australian small and medium businesses. That includes answering and qualifying leads, fast follow-up, reviving old leads, booking appointments, asking for reviews and referrals, and automating admin.
We deliver work ourselves and with vetted contractors who work under the Idionic name. In this page, "we", "us" and "our" mean Idionic Pty Ltd and the people working on our behalf.
Privacy questions go to hello@idionic.com.
What this page covers
We handle personal information in two different roles, and this page covers both.
- Information we handle for ourselves. This is information about people who visit this website, people who email us or use our contact form, prospective clients, and our clients and their staff. We decide what we collect and why, and this page is our notice to you.
- Information we handle for our clients. When we do work for a client, we may see personal information about that client's own customers and leads. Examples are lead records, enquiry details and messages. That information belongs to our client. The client collected it, and the client is responsible for telling its customers how it is handled. We handle it only to deliver the work, on the client's instructions and under our agreement with them. See "Information we handle for our clients" below.
There is no account, shop or booking calendar on this website. You can contact us by email, or through the "Ask for an introduction" form on the Contact page.
Our approach to Australian privacy law
The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) set the rules for how many organisations handle personal information. Idionic is a small business, and businesses with an annual turnover of A$3 million or less are generally not covered by the Act. So we are not currently required to follow the APPs. We choose to follow them anyway, because we think it is the right way to handle information, and some client agreements also require it. If the law changes, or our business grows, so that the Act applies to us, we will comply with it.
In practice, that means we:
- are open about how we handle personal information (this page)
- collect only what we need, by fair and lawful means, and tell people what we are collecting
- use and share it only for the purpose we collected it for, or a related purpose you would reasonably expect, or as the law allows
- send marketing only with consent, and always with an easy way to opt out
- take reasonable steps when information goes overseas
- keep it secure, and delete or de-identify it when we no longer need it
- let you ask for access or a correction, and deal with complaints fairly.
What we collect
What we collect depends on how you deal with us.
If you visit this website
- The site is a set of static files. Our host keeps standard request logs for that service. They include IP address, date and time, the page requested, and browser type. Some links to this site include a short code showing which channel you came from (the part of the address after "?from="). Those codes may appear in the request logs. We do not run our own visitor database. Your self-check result and stall-cost estimate are never put in the part of a web address that our host logs.
- We do not use analytics, advertising pixels, chat widgets or booking tools. The only content from another service is the Cloudflare Turnstile spam check on the Contact page (see "The 'Ask for an introduction' form").
If you email us
- Your email address, your name if you include it, and whatever you write. That may include a business name, a phone number, and details of your business and its sales.
If you use the "Ask for an introduction" form
- Your name, your business, your email address, and the sales outcome you need. These fields are required so we can reply.
- How you heard about us, if you choose to tell us. This field is optional.
If you use the self-check on the Contact page
Before the form, the Contact page offers five short questions to help you spot where leads may be stalling. You can skip them and go straight to the form. Your answers are scored in your browser. They are not stored on your device or sent to us. Your result is shown on the form as a note you can remove ("Your self-check pointed to: …"). If you leave it in and submit the form, your result is sent to us with your other details and appears in the email Gerry receives. Your individual answers are not sent. If you remove the note, or don't submit, we never see your result.
The Contact page also has an optional stall-cost estimate. The numbers you type into it are used only in your browser. They are not stored, sent to us, or put in the web address. If you choose “Add this estimate to the form”, the rounded monthly range is shown on the form as a note you can remove (“Estimated stall: …”). If you leave it in and submit the form, that range is sent to us with your other details and appears in the email Gerry receives. It is not included in the acknowledgement we send you. The numbers you typed are never sent.
The Contact page also has a rough stall-cost estimate. It works in your browser. If you leave the estimate on the form and submit it, we receive the estimate range and a note saying whether you entered your own numbers or used the example numbers. The numbers you type aren't sent to us separately. If you remove the estimate or don't submit, we never see it.
If you are a prospective client or a client
- Contact details for the people we deal with, such as name, role, email and phone.
- Business details needed for a proposal, an agreement, invoicing and payment.
- Notes from meetings and calls.
- For a Stall Review, notes from interviews with members of your team about how leads are handled. We take written notes only and do not record interviews. We tell each person why we are talking to them and how the notes will be used.
- Details of the logins we are given to your systems. We are added as a member of your accounts and removed when the work ends.
Sensitive information
We do not ask for sensitive information, such as health information, racial or ethnic origin, or criminal records. Please do not send it to us, by email or in the form. If a client's records happen to contain it, we handle it as described in "Information we handle for our clients".
We do not ask you to create a password, pay on this site, or upload files here.
How we collect it
We collect personal information directly from you where we can: when you email us, fill in our contact form, talk to us, or work with us. Sometimes we get it from someone else. Examples are a colleague who introduces you, your employer when you are on a client's team, or public sources such as a business website or LinkedIn profile when we research a prospective client.
When we collect information about you from someone else, we take reasonable steps to make sure you know about it, for example by pointing you to this page. You can deal with us without giving your name when you only want general information. Usually we need your contact details to reply.
The "Ask for an introduction" form
The Contact page has a short form you can use to ask for an introduction. Here is what happens when you use it.
- Where your details go. When you press send, a small program on our website host (Vercel, in the United States) passes your details to our email-sending service, Resend, which is also based in the United States. Resend emails your submission to Gerry Wagner, our director, at his Idionic mailbox. The website itself does not store your submission.
- Your acknowledgement. Resend also sends you an automatic email confirming we have your request and that Gerry will reply personally, usually within one business day. That email only confirms receipt. It contains no marketing.
- No marketing sign-up. Using the form does not sign you up for marketing, and we do not add your details to a marketing list.
- Spam check. To keep out automated spam, the form uses Cloudflare Turnstile. Turnstile does not read what you type into the form. To tell people from bots, Cloudflare processes signals such as your IP address, browser details (including the user agent and a TLS fingerprint) and the website you are on. The check runs in a small frame loaded from Cloudflare. It may set security cookies, and it stores an identifier in your browser's local storage under Cloudflare's own domain, which our site does not read. Cloudflare describes these as strictly necessary for bot detection, and they are not used for advertising. Cloudflare runs the check on our behalf. It also uses Turnstile signals to improve its bot detection, under its own Turnstile Privacy Addendum and privacy policy (cloudflare.com/turnstile-privacy-policy).
- What we use it for. We use your submission to reply to you and to arrange an introduction. If you include your self-check result or stall-cost estimate, we use them to prepare for the conversation. We use the optional "How did you hear about us?" answer to understand which channels work for us.
- If you prefer not to use the form, email hello@idionic.com instead.
How we use it
We use personal information we handle for ourselves to:
- reply to enquiries and form submissions, arrange introductions, and prepare proposals
- deliver, manage and invoice the work we have agreed with a client
- run the business, keep business records, and meet legal and tax duties
- send marketing, if you have agreed to it (see "Direct marketing").
We do not sell personal information. We do not use this website to build advertising profiles, and we do not measure visits with an analytics tool. We do not use personal information for unrelated purposes unless you agree, or the law requires or allows it.
Direct marketing
We send marketing emails about our services only to people who have agreed to receive them. Every marketing email will identify us and include a simple way to unsubscribe. We will act on an unsubscribe request within five working days. We follow the Spam Act 2003 (Cth) and APP 7.
You can ask us to stop at any time by using the unsubscribe link or emailing hello@idionic.com. We do not sell or give our contact lists to anyone else for their marketing. Emailing us or using our contact form does not add you to a marketing list, and the automatic acknowledgement the form sends is not a marketing message.
Information we handle for our clients
This section is for people whose details are held by one of our clients: their customers, leads, callers and staff.
Who is responsible. Our clients are businesses that run their own sales and customer contact. The client decides what information it collects about its customers and leads, and why. The client is responsible for its own privacy policy and for giving its customers any notice or getting any consent the law requires. We work on the client's behalf.
How we handle it. We build everything inside the client's own accounts. That includes its CRM, phone system, SMS and email tools, AI services and hosting. The client pays the running costs. We are added as a user so we can build and support the systems, and we are removed when the work ends. We access client customer information only as needed to deliver the agreed work, follow the client's instructions and our agreement with them, and do not use it for our own purposes.
If you are a customer or lead of one of our clients, please contact that business first about your information. It holds the records and can act on your request. If you contact us, we will pass your request to the client and help them respond where we can.
Stall Review. At the start of an engagement we review how the client handles its paid leads. With the client's permission, this usually involves:
- read-only access to around 90 days of the client's paid-lead data. The data stays in the client's own systems. If we need to export any of it for analysis, we take the minimum needed, use it only for the review, and delete it within 30 days of presenting our findings to the client. We use anonymised or summarised figures in our report wherever we can.
- interviews with members of the client's team about how leads are handled
- test enquiries. With the client's written consent, we send three to five test enquiries through the client's own channels, such as its website form, phone line or email. These show how quickly and how well enquiries are handled. Client staff may deal with these enquiries in the normal way. A test enquiry uses only the minimum personal information needed to look like a real enquiry. We send them only through the client's channels and never to the client's customers. We note only what is needed to measure the response, such as timing and content. The client decides whether to tell its staff about the tests in advance.
We do not record calls. Idionic does not record phone calls, and the solutions we build do not record the audio of calls. Where a solution answers calls, it captures the details of the enquiry, such as the caller's name, contact details and what they need. If a client's phone solution creates a written note or transcript of an enquiry, that note is stored in the client's own systems and kept under the client's own retention rules.
Messages to customers. Follow-up messages, revived-lead messages and review or referral requests are sent from the client's own accounts, in the client's name. The client is responsible for having a lawful basis to contact each person and for honouring unsubscribe requests. We build unsubscribe handling into these systems.
When the work ends, our access to the client's accounts is removed. We delete or return any client customer information we hold within 30 days of the engagement ending, unless our agreement with the client says otherwise.
How we use AI
Our work uses artificial intelligence (AI) tools, including large language models (LLMs). This section explains how.
- What AI does. In client solutions, AI tools may answer and qualify enquiries, draft replies and follow-up messages, note the details of enquiries made by phone, sort or prioritise leads, suggest booking times, and help with admin. To do this, the AI service processes the information in the enquiry or record, such as the person's name, contact details and what they said.
- A person approves every written message. AI drafts written messages. A person on the client's team reviews and approves each message before it is sent to a customer. For live phone answering, the AI assistant follows a script the client has approved, tells the caller it is automated, and hands the caller over to a person.
- People are told when they are dealing with AI. By design, our AI assistants, voice and text, say that they are automated and offer a way to reach a person.
- Whose AI accounts. AI services in client solutions are set up in the client's own accounts, under the client's agreement with the AI provider. We may also use AI tools in running our own business, for example to help draft documents. Where we do, we choose services and settings that do not use our inputs to train the provider's models, where that option is available.
- No training of public models. We do not use client data, or the personal information of client customers, to train public or shared AI models. We choose settings and services that do not use inputs to train the provider's models where those options are available.
- AI can make mistakes. AI output can be wrong or incomplete, which is one reason a person stays involved. We do not promise any particular sales result or outcome from using AI. Nothing on this page limits any rights you have under the Australian Consumer Law.
Automated decisions
From 10 December 2026, privacy policies must explain when an organisation uses a computer program to make, or substantially help make, decisions that could significantly affect a person's rights or interests, using their personal information.
Our own decisions. We do not use automated decision-making to make decisions about website visitors, people who email us or use our contact form, or our clients and their staff. The one automated step is the spam check on the contact form, which may block a submission that looks automated. It does not decide anything else about you. If the form will not send, email hello@idionic.com.
The self-check on the Contact page scores your answers automatically, in your browser, to suggest which stall point is most likely. The result is a general pointer only. It doesn't decide anything about you, and we see it only if you send it to us.
The stall-cost estimate is a simple calculation from the numbers you enter, done in your browser. It doesn't decide anything about you.
Client solutions. In systems we build for clients, AI may sort, score or prioritise leads. For example, it may flag which enquiries look most likely to buy, or suggest a reply. These systems support the client's team rather than replace it: a person approves customer messages, and the client decides how to act on any score or suggestion. They are not designed to make decisions that significantly affect a person's legal rights or access to services, such as credit, employment or eligibility decisions. If a client uses a solution in a way that does, the client is responsible for describing it in its own privacy policy. We will help them do that.
Sending information overseas
Some of the providers above store or process information outside Australia:
| Provider | What it handles | Where |
|---|---|---|
| Vercel (website host) | Website request logs, and form submissions passing through our form handler | United States (US East region, iad1) |
| Resend (email sending) | Form submissions, acknowledgement emails and delivery logs | United States |
| Cloudflare (DNS and Turnstile spam check) | Connection data such as IP addresses, and Turnstile signals such as IP address and browser details | Cloudflare's global network, with Turnstile cookie data processed in the United States by default |
| GitHub (code) | Site code only, no personal information | United States |
| Our email and business software providers | Emails sent to us, contact details, and business and invoicing records | Australia, the United States or other countries |
| AI and large language model providers (in client solutions, and any AI tools we use in our own business) | Enquiry, message and call content the AI processes | Often the United States, and sometimes Australia or other countries, depending on the provider and the data region chosen |
| Contractors and service providers | Information needed for the client work they help with | Australia or other countries |
Before information goes overseas, we take reasonable steps to make sure the recipient will handle it in line with the APPs. For example, we choose established providers with strong security and privacy terms, and we limit what we send. For client solutions, the client chooses its providers and data regions, and we can help it choose Australian regions where they are available.
Storage and how long we keep it
This website does not store your enquiry or form submission. Emails, including form submissions, sit in our mailbox, and business records sit in our business tools. We keep personal information only as long as we need it for the purpose we collected it for, or as the law requires. Then we delete it or de-identify it.
| Record | How long we keep it |
|---|---|
| Enquiries, including form submissions, that do not become work | 2 years after our last contact |
| Copies of form submissions and acknowledgement emails held by Resend | Kept by Resend for a limited period under its own settings, then deleted |
| Turnstile spam-check signals | Kept by Cloudflare under its own policies. We do not receive them. |
| Client engagement records: agreements, invoices, correspondence and our reports | 7 years after the engagement ends, to meet tax and company record-keeping duties |
| Stall Review working notes and interview notes | 12 months after the report is delivered, then deleted or kept only in anonymised form |
| Lead data exported for a Stall Review | Deleted within 30 days of presenting our findings |
| Other client customer information we hold outside the client's systems | Deleted or returned within 30 days of the engagement ending, or sooner if the client asks |
| Our access to client accounts | Removed within 5 working days of the engagement ending |
| Marketing contact list | Until you unsubscribe. We keep a minimal record of the unsubscribe so we do not contact you again. |
| Website request logs | Kept by Vercel under its own service settings. We do not run them on a database of our own. |
Information inside a client's own systems, such as lead records and messages, is kept for as long as the client decides.
Security
We take steps that are reasonable for a small consulting business, including:
- limiting access to our mailbox and records to the people who need it for the work
- using strong, unique passwords and multi-factor authentication where available
- asking for read-only access to client systems wherever that is enough, and having our access removed at the end of the work
- keeping client customer information in the client's own systems instead of copying it to ours
- requiring contractors to keep information confidential and follow our security practices
- sending form submissions over encrypted connections, protecting the form with a spam check, and not storing submissions on the website
- asking only for what the enquiry or engagement needs.
Email, including the emails our form sends, is a normal way to reach us. It is not a sealed channel. Please do not send highly sensitive documents, such as identity records or payment card numbers, unless we have agreed another way.
We do not claim a security certification on the strength of this website.
Data breaches
As a small business, we are not currently covered by the Notifiable Data Breaches scheme in the Privacy Act. We still follow its approach voluntarily. If we suspect a data breach involving personal information, we act quickly to contain it and assess the risk. If a breach is likely to cause serious harm, we will tell the people affected and explain what they can do. Where appropriate, we will also tell the Office of the Australian Information Commissioner (OAIC).
If a breach involves information we handle for a client, we tell the client promptly and cooperate with them. The client may have its own duty to notify, and we will help it assess the breach and notify people where needed.
Access, correction and complaints
You can ask us what personal information we hold about you, and you can ask us to correct it if it is wrong, out of date or incomplete. Write to hello@idionic.com. We may need to check that you are the person the information is about. We aim to answer within 30 days, and we do not charge for a request. If we cannot give you access or make a correction, we will explain why in writing, unless that would be unlawful.
If your request is about information a client holds about you, such as a business you enquired with or called, please contact that business first. We will pass on requests we receive and help where we can.
If you are unhappy with how we have handled personal information, please contact us first. We will acknowledge your complaint within 5 working days, look into it, and give you our response within 30 days. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner:
- Website: oaic.gov.au
- Phone: 1300 363 992
Children
This website and our services are for owners and staff of businesses. They are not directed at children, and we do not knowingly collect personal information from children.
Changes to this page
We may update this page when the site, our services or the law changes. The date at the top is the date of the latest version. If we make a significant change to how we handle personal information we already hold, we will let affected clients know.
Contact
Idionic Pty Ltd · ABN 14 699 014 045 · Perth, Western Australia
Privacy questions, access and correction requests, and complaints: hello@idionic.com