Privacy policy

This website is operated by Mateo Concepcion Veneracion (sole trader), ABN 67 108 957 529 (“we”, “us”), based in Western Australia. This policy explains how we handle information when you use Westmark Scan. We aim to handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information we collect

Website addresses and audit results

When you run an audit we store the web address you submitted, the address that was finally audited, the date, and the audit results (Lighthouse scores, measurements, findings and recommendations). Audit results describe a public web page, not you.

Abuse-prevention data

To prevent abuse and control costs, we derive a short keyed hash from your IP address for rate limiting. We do not store your full IP address with audits, and the hash changes daily. Rate-limit records are deleted after a few days.

Enquiries

If you submit the contact form, we collect your name, business name, email address, optional phone number, website address, your message, and (if you came from a report) the associated audit. We record whether you opted in to marketing emails and when.

Usage analytics

We record simple product events (for example, “audit started” or “PDF downloaded”) without cookies or personal identifiers. We also use Vercel Web Analytics, which provides aggregated page-view statistics without cookies.

Cookies

The public website does not set advertising or tracking cookies. Administrators who sign in to the dashboard receive essential authentication cookies.

How we use information

• To run audits and display, share and export reports.
• To respond to your enquiry.
• To send marketing emails, only if you opted in. You can unsubscribe at any time.
• To prevent abuse, maintain security and understand how the product is used.

We do not sell personal information. Running an audit does not add you to any mailing list.

Shared reports

Each report has a long, random link. Anyone with the link can view the report, so only share it with people you trust. Reports contain audit data only — never your contact details.

Third-party service providers

• Google (PageSpeed Insights API) — receives the web address to run Lighthouse.
• Anthropic (Claude API) — receives structured audit results to write recommendations. No contact details are sent.
• Supabase — database hosting (Sydney, Australia region).
• Vercel — website hosting and cookie-free analytics.
• Resend — delivers our internal notification email when you submit an enquiry (includes the details you entered).
• Google Workspace — the business email inbox that receives those notifications.

Our database is hosted in Australia. Some of these providers process data outside Australia, including in the United States and Japan. We use reputable providers that protect information under their own security and privacy commitments, and we only share what each service needs to do its job.

Data retention

• Audits and reports: automatically deleted after 180 days.
• Rate-limit records: deleted after about 3 days.
• Product events: deleted after about 13 months.
• Enquiries: automatically deleted 2 years after they are submitted, unless you ask us to delete them sooner.

Access, correction and complaints

You can ask to access or correct your personal information, ask us to delete an enquiry or a report, or make a privacy complaint by emailing hi@westmarkdigital.com.au. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

Mateo Concepcion Veneracion, ABN 67 108 957 529, Western Australia. Email hi@westmarkdigital.com.au, or use the contact page.