Privacy policy
Kanga Gardening is a sole trader business (ABN 12 317 309 473) based in Edithvale, Victoria, and run by its owner, Tim Le Grand. This policy sets out what personal information we collect, why we collect it, who else handles it and where they are, and how you can see, correct or delete what we hold. It is written to be accurate rather than long.
The short version. We collect what you type into an enquiry form so we can ring you back about your site. This website sets no cookies of its own. Three outside companies touch an enquiry on its way to us: Web3Forms, which carries the form submission and is run from India; Cloudflare in the United States, which hosts and serves this site; and Google in the United States, where the enquiry lands as an email. We do not sell your details and we will not add you to a marketing list. To see, correct or delete what we hold, email hello@kangagardening.com.au.
What we collect
From the enquiry forms on this site: the type of site, the site address or suburb, a rough site size, what is prompting the change, your name and your phone number, plus your email address and a message if you choose to add them. Only the site type, the address or suburb, your name and your phone number are required.
If you call, text, email or write to us: your contact details and whatever you choose to tell us. Correspondence is kept as an ordinary business record.
If you become a client: contact details for the site, committee or manager, access details such as a gate code where you give one to us, the scope and schedule we agree, invoicing details, and photographs of the site as described below.
Automatically, when you load a page: your IP address and the ordinary details of the request reach Cloudflare, which serves this site, and a page view is counted by Cloudflare Web Analytics. Neither of those identifies you by name.
We do not take payments through this website and we hold no card details for anyone. Invoices are paid by bank transfer, so the only payment information we hold is what appears on a bank statement.
Why we collect it
To answer your enquiry, quote your site and arrange a walkthrough. To schedule and carry out the work, and to write the seasonal condition reports for your site. To invoice you, and to keep the tax and business records the law requires us to keep. That is the whole list. We do not sell, rent or trade personal information, and we do not use it to build profiles of people.
Who else handles it, and where they are
An enquiry sent through this website is handled overseas before it reaches us. Three providers are involved, and it is worth being plain about them.
- Web3Forms (India). The enquiry forms on this site post to api.web3forms.com, a third-party form service operated from India. It turns your submission into an email and sends it to us, so everything you type into a form passes through it. Its email delivery routes through overseas providers.
- Cloudflare (United States). This site is hosted and served on Cloudflare Pages, so Cloudflare processes every request made to it, including your IP address. Cloudflare is a United States company operating servers in many countries.
- Google (United States). Enquiry emails arrive in a Gmail mailbox, so Google holds that correspondence on its servers.
If you would rather your details did not travel, call or text 0406 937 593 instead of using the form or emailing us.
Beyond those three we disclose personal information only where we have to: to our insurer or accountant if a claim or a tax matter requires it, to a debt recovery service if an invoice is left unpaid, or where a law, a court or a tribunal requires it. We do not hand your details to other contractors, list brokers or marketers.
Cookies and analytics
This website sets no cookies of its own. It stores nothing in your browser's local storage or session storage, and it carries no advertising or tracking cookies.
Cloudflare Web Analytics runs on every page, so we can see which pages actually get read. It is cookieless and it does not fingerprint your device or follow you around other websites. It does process the request your browser makes, and that request includes your IP address.
Photographs of sites
We photograph the sites we maintain. The photos are used for two things: the seasonal condition reports that go to the client, committee or manager for that site, and marketing on this website and our social accounts.
We do not publish a recognisable image of private property without the owner's consent. Where a photo is published, it is captioned by suburb and never by street address, and we leave out house numbers and anything else that would let a stranger identify the property. We do not publish photographs of people without their consent. If a photo of your property is already published and you want it taken down, email or ring and it comes down. You do not have to give a reason.
How long we keep it
Enquiries that do not turn into work are kept for up to two years, so we can pick up the thread if you come back to us, and are then deleted. Client records are kept while you are a client. When an agreement ends, the records that touch on money, meaning invoices and the bank records behind them, are kept for at least five years because tax law requires it, and the rest is deleted within twelve months. Photographs are kept until you ask us to remove them.
How we keep it safe
There are no staff. Tim Le Grand is the only person in the business who sees your details. The mailbox and the tools used to run the business are protected with unique passwords and two-factor authentication, and the devices they are used on are locked with a passcode. Paper records are kept to a minimum.
No arrangement is perfect. If something goes wrong and information about you is exposed in a way likely to cause you serious harm, we will tell you what happened, what was involved and what we are doing about it, and we will do it promptly rather than quietly.
How to see or correct what we hold
You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. The steps are:
- Email hello@kangagardening.com.au with "Privacy request" in the subject line, call or text 0406 937 593, or write to Kanga Gardening, Edithvale VIC 3196.
- Tell us which you want: a copy, a correction, or deletion. If it is a correction, tell us what the right detail is.
- We may need to check that you are who you say you are. For an existing client that is usually a call back on the number we already hold.
- We will reply within 30 days. There is no charge for asking and no charge for a correction. If a request would take real digging, we will tell you what it would cost before we start, and you can decide.
- If we cannot do what you have asked, we will give you the reasons in writing. The usual ones are that a record has to be kept for tax purposes, or that the information is about someone else as well as you. We will still do the part we can do.
If we hold health information about you
We do not ask for health information and we do not go looking for it. A little reaches us anyway from time to time, for example when a resident tells us about an allergy or a chemical sensitivity so a spray can be planned around it, or when a subcontractor gives us a medical detail relevant to working safely.
The Health Records Act 2001 (Vic) applies to any organisation holding health information in Victoria, whatever its size. If we hold health information about you and you want access to it:
- Ask in writing. Include your full name, address and date of birth, and say what you want: to view the record, a copy of it, or a summary of it.
- We may ask you to prove your identity before we hand anything over.
- We will respond without unreasonable delay, and within 45 days at the latest.
- If we refuse, we will give you the reasons in writing.
- Copying fees are capped by regulation. In practice anything we hold will be a line in an email, and we will simply send it to you at no charge.
- If you are unhappy with how we handle it, the Health Complaints Commissioner (Victoria) takes complaints on 1300 582 113 or at hcc.vic.gov.au.
Marketing
We will reply to your enquiry, and we will contact you about a quote you have asked for or about work in progress. We will not add you to a mailing list, we will not send you marketing, and we will not pass your details to anyone who would. If that ever changes we will ask your permission first and there will be an obvious way out. That is what the Spam Act 2003 (Cth) requires, and it is also how we prefer to work.
Complaints
If you think we have mishandled information about you, tell Tim directly, by email or on the phone. Say what happened and what you would like done about it. We will acknowledge it within 5 business days and give you an answer within 30 days.
If that does not settle it:
- For health information, the Health Complaints Commissioner (Victoria), 1300 582 113, hcc.vic.gov.au.
- For anything else, the Office of the Australian Information Commissioner, 1300 363 992, oaic.gov.au. Because of the small business exemption described below, the OAIC may not have power to investigate a complaint against us, but it can still give you advice.
- If you believe this policy itself is inaccurate or misleading, that is a matter for Consumer Affairs Victoria on 1300 55 81 81, or for the ACCC.
Where this policy stands legally
Kanga Gardening is a sole trader operating below the $3 million annual turnover threshold in section 6D of the Privacy Act 1988 (Cth). A business that size is generally not covered by that Act and is not bound by the Australian Privacy Principles. We are not claiming otherwise, and we have not opted in.
What that means in practice is that this policy is a commitment we are making to you rather than a form we are obliged to file. As a matter of practice we handle personal information consistently with the Australian Privacy Principles, because it is the sensible standard and because the managers and committees we work for expect it.
Some things apply regardless of that exemption. Victorian health records law applies to anyone holding health information, as set out above. Since 10 June 2025 there has also been a statutory cause of action for a serious invasion of privacy, which carries no small business exemption, and that is one reason we are careful about site photography. And because this policy is published in the course of business, it would be misleading conduct under the Australian Consumer Law if it were inaccurate. That is why it names the actual providers instead of talking about trusted third parties.
Who to contact
Tim Le Grand, owner, Kanga Gardening.
Email: hello@kangagardening.com.au
Phone: 0406 937 593, Mon-Fri 8:00-17:00, Sat 9:00-13:00, Sun closed.
Post: Kanga Gardening, Edithvale VIC 3196.
ABN 12 317 309 473.
Kanga is a service-area business working from a vehicle and from client sites, so there is no shopfront address to publish. Email or phone will reach us a good deal faster than post.
Changes to this policy
If this policy changes, the new version goes up on this page with a new effective date. We will not backdate a change. This version is effective from 25/07/2026.