Privacy Policy

Who I am

Medium XL is a Sydney web and graphic design business run by Shady. In this policy, "I" and "me" mean Medium XL. I handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988.

What I collect

When you send the contact formYour name, email address and message. It's emailed to my business inbox and isn't saved in a database on this website.
Spam protectionTo stop the form being flooded, the website keeps a scrambled, one-way code made from your internet (IP) address, with the times you sent a message. The code can't be turned back into your address, and it's deleted automatically after about a day.
When we work togetherThe contact and billing details, content, files and logins you give me for your project.
Server logsLike every website, my hosting provider keeps standard technical logs, such as IP addresses, pages requested, browser type and time, to keep the site secure and running.

Cookies and tracking

One essential cookieThe contact form sets a single session cookie so it can check the message was sent by a person, not a bot. It holds no personal details and is deleted when you close your browser.
No analytics or advertising trackersThere are no visitor tracking tools, ads, social media trackers or tracking pixels on this site.
No third-party embedsFonts and images are served from this website itself, so loading a page doesn't share your details with outside services.

How I use it

Only to reply to your enquiry, prepare quotes, deliver and support your project, send invoices, keep business records and protect the website from spam and misuse.

I don't sell, rent or trade your personal information, and I won't add you to a mailing list without asking.

Who it's shared with

Only the services I use to run the business, and only as far as they need it: my email provider (Zoho Mail, Australian data centre) and my web hosting provider. I may also share information if the law requires it.

How long I keep it

Enquiries are kept for as long as they're useful for following up. Client and invoice records are kept for at least five years, as Australian tax law requires. When information is no longer needed, I delete it.

How it's protected

The site runs on a secure HTTPS connection, the form is sent over an encrypted connection, and my email account is protected with two-factor sign-in. Project logins you share are kept private and only used for your project.

Your choices

You can ask to see the personal information I hold about you, ask me to correct it, or ask me to delete it (unless I need to keep it by law). Just send a request through the form below and I'll respond within one business day.

If you have a concern about how I've handled your information, please let me know first so I can put it right. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (opens in a new tab).

I may update this policy when the website or my services change. The latest version will always be on this page.

Last updated 25 October 2026.

Questions about your privacy?

Ask a question, or request a copy, correction or deletion of your information. You can also use this form to ask for a free quote.

Reply within one business day

Free consultation, no obligation