Privacy Policy

How The Review Gap collects, uses, and protects your personal information when you visit our website or engage our services.

Last updated: 21 May 2026

01About this policy

This policy explains how The Review Gap (ABN 60 269 266 445), a sole-trader business operating in Melbourne, Australia, handles personal information you share with us. We follow the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth), even where our small-business turnover would not strictly require it.

By using thereviewgap.com or engaging our services, you consent to the practices described here.

02What we collect

We collect personal information in three ways:

• Contact form submissions. When you fill out our contact form, we collect your name, email address, phone number (if provided), business name, and the message you send.
• Meeting bookings. When you book a Systems Review consultation through our HubSpot booking link, we collect your name, email address, phone number, business details, and your selected meeting time. HubSpot stores this information on our behalf.
• Automatic information. When you visit our website, we automatically collect technical data including your IP address, browser type and version, device type, referring URL, pages visited, and time spent on each page. This is collected via Google Analytics 4 and our hosting provider, Netlify.

03Why we collect it

We use your personal information only for the purposes you would reasonably expect:

• To respond to your enquiries and contact requests.
• To schedule, confirm, reschedule, or cancel consultations.
• To send you service-related communications (booking confirmations, follow-up notes, proposed scopes of work).
• To understand how visitors use our site so we can improve content and structure.
• To comply with our legal obligations.

We do not use your information for unsolicited marketing. We do not sell, rent, or trade your personal information to third parties — ever.

04Who handles your information

We use a small set of trusted third-party services to operate the business. Each of these is bound by their own privacy obligations:

• HubSpot (CRM and meeting scheduling) — stores contact and booking data. HubSpot is based in the United States. See HubSpot's privacy policy.
• Google Analytics 4 (website analytics) — collects anonymised usage data. Google is based in the United States. See Google's privacy policy.
• Netlify (website hosting and contact-form processing) — receives form submissions and standard server logs. Netlify is based in the United States. See Netlify's privacy policy.
• Email infrastructure — standard email delivery for communications you initiate or have opted into.

Because these providers are based in the United States, some of your personal information may be transferred to and stored in the US. By using our site or services, you acknowledge this international transfer.

05Cookies and tracking

We use a small number of cookies and similar technologies:

• Analytics cookies set by Google Analytics 4 to measure aggregate site usage. These cookies do not directly identify you to us — they collect anonymised data about pages viewed, session duration, and traffic sources.
• Functional cookies set by HubSpot when you interact with the booking modal, to remember your meeting preferences during the booking flow.

You can disable cookies in your browser settings at any time. Doing so will not prevent you from using the site, but some functions (such as the meeting booking modal) may be limited.

06How we store and secure your information

Personal information is stored in our service providers' systems (above) and protected by their security infrastructure, which includes encryption in transit (HTTPS) and at rest. We retain your information only for as long as needed to provide our services and meet our legal obligations. If you ask us to delete your information, we will do so unless we are required by law to retain it.

07Your rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you.
• Correct any information that is inaccurate, out of date, or incomplete.
• Request deletion of your information (subject to any legal retention requirements).
• Withdraw consent for communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information. Their website is oaic.gov.au.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

08Changes to this policy

We may update this policy from time to time as our services or legal obligations change. The "Last updated" date at the top of this page reflects the most recent revision. We will not separately notify users of routine changes, but material changes (such as new data collection or new third-party providers) will be flagged on this page.

09Contact us

If you have questions about this policy, want to exercise your rights, or wish to lodge a complaint, contact us directly: