Privacy Policy

• Enquiry details. When you ask for a free mockup we collect your website address, your email address and, if you give it, your phone number. We use these to build the mockup and to reply to you.
• Your organisation’s public website content. To build a mockup or a rehomed site we read the pages your organisation already publishes: text, images, logos and links. We do not log in to anything or read private pages.
• Prospect and contact records. We research nonprofit organisations using public sources and their official websites. We keep organisation details, published role contact details, the source pages and checks supporting them, and records of messages, replies, bookings, design choices and requests not to be contacted. A public address alone does not give us permission to send marketing.
• Customer details. If you become a customer we hold your name, organisation, contact details, domain and hosting details, and the content you ask us to publish.
• Visitor data on rehomed.app. Our hosting provider records basic technical information such as IP address, browser and pages requested to serve the site and keep it secure. We do not run advertising trackers on rehomed.app.
• Review-page engagement. After a visitor interacts with an unlisted website review and spends time viewing it, we may record engagement against that organisation’s page to understand how the ideas are being explored and choose a relevant follow-up message. This does not verify who viewed the page or establish consent to receive email. This measurement uses no advertising cookie or stored visitor profile. Short-lived security tickets and rotating keyed hashes help limit duplicate or automated counts. We respect browser Do Not Track and Global Privacy Control signals for this measurement.

We may prepare an unlisted first-draft mockup before an organisation contacts us. Anyone with its review link can view it. It is not the organisation’s live website, and you can ask us to remove it.

• to assess whether Rehomed could help an organisation, prepare website ideas and respond to enquiries;
• to manage relevant outreach, follow-ups, bookings and requests not to be contacted;
• to provide, host, maintain and change your rehomed website;
• to answer support requests and send invoices;
• to keep our service secure and meet legal obligations.

We do not sell personal information. Before sending marketing email, we check that we have a permitted consent basis. Each message identifies us and explains how to opt out. We retain opt-out records to avoid contacting you again.

We use AI tools to analyse public website content and images, prepare and review website drafts, and draft outreach messages and call briefs. These tasks may include published role contact details and recorded organisation activity. The selected AI provider receives the material supplied for that task. We review website and message drafts before publication or sending and use source evidence for facts, people, animals and testimonials.

When we host your organisation’s website, you decide what is published and you are responsible for the personal information it contains. Donations, memberships, adoption applications and similar forms stay with the providers you already use. We link to them; we do not receive card details or donor records.

• Vercel hosts rehomed.app and customer sites using its global hosting network.
• Supabase stores Rehomed’s enquiries, prospect and customer records, source evidence, design files, review decisions and activity history, as well as any agreed customer database content.
• Resend delivers our transactional email (United States).
• GitHub stores the code for sites we build (United States).
• OpenAI processes material for the AI tasks described above.
• Instantly stores approved outreach messages and recipient details and manages delivery, replies and opt-outs when outreach is enabled.
• Cal.com processes booking details when you book a call through it.

We also keep working copies of source material and job evidence in Rehomed’s private working storage. Some service providers process information outside Australia. Processing locations depend on the provider and service. Contact us if you need more detail before providing information.

We hold enquiry, prospect, correspondence and customer records, including evidence of what was reviewed or sent and requests not to be contacted. You can email us to request access, correction or deletion. Some records may need to be retained for service, security or legal reasons, which we will explain when responding to your request.

Sites we host are served over HTTPS. Access to customer content is limited to authorised people and service providers involved in delivering the service. No system is perfectly secure, and if a breach is likely to cause serious harm we will tell you and the regulator as the law requires.

If you have a concern, email us first and we will respond within 30 days. If you are not satisfied you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Kyle Behrend Pty Ltd (ABN 88 699 700 000). Email hello@kylebehrend.com.