Privacy Policy

Last updated: 17 August 2026

Who this policy covers

This policy covers Lukas Yianni Papanikolopoulos, trading as lpapbuilds (ABN 17 680 613 628), a sole trader based in Victoria, Australia. Throughout this page "we" and "us" mean that business. It applies to this website, to enquiries and bookings, and to the work itself.

The framework this policy is written against

Australian privacy law does not automatically bind a small business under the three million dollar turnover threshold. We have chosen to follow the Australian Privacy Principles anyway, because the alternative is asking people to hand over information about their business without telling them what happens to it.

What we collect

• Contact details: name, business name, email address, phone number.
• Booking details: the time you chose, anything you typed into the booking form.
• Business information you share during an audit: advertising accounts, spend, enquiry volumes, pricing, and whatever else is relevant to the questions being answered.
• Access you grant to your own accounts, such as an advertising or analytics account, for as long as you leave that access in place.
• Records of our contact with you: call notes, outcomes, the times we called, how long a call lasted, and messages sent or received.
• Payment records: what was paid and when. Card numbers are handled by Stripe and never reach us.

Why we collect it

To answer enquiries, run the session you booked, do the work, take payment, keep the tax records the law requires, and follow up about the thing you asked us about. We do not sell information, and we do not build profiles for anyone else's advertising.

How we collect it

Usually straight from you: the booking form, an email, a phone call, or the session itself. Some arrives through the booking tool, or through your own accounts once you grant access.

Text messages and your mobile number

If you give us your mobile number on a phone call and agree to be texted, we store that number and use it to send the follow-up we discussed: a booking link, an answer to something you asked, or a confirmation for a session you booked. We keep the messages themselves so whoever picks the conversation up next can see what was already said.

We do not share mobile numbers, or the fact that someone consented to be texted, with any third party or affiliate for their marketing or promotional purposes. The only company that sees your number for messaging is Twilio, which carries the message on our behalf and may not use it for its own purposes. Its privacy policy is at twilio.com/legal/privacy.

You can stop the messages at any time by replying STOP to any message, or by telling us on a call or by email. What we send and how often is set out in the Terms of Service.

Calls we place through our own system record the number dialled, the time, how long the call lasted, and the outcome the caller noted. That is how the business tracks its own activity. Calls are not recorded and are not transcribed.

Third parties who see it

Running a small business means using other people's software. Each service below sees some of your information in order to do its job. None of them are given it for their own marketing purposes.

• Booking and scheduling: Calendly, which handles the booking form and calendar. Its privacy policy is at calendly.com/privacy.
• Calls and text messages: Twilio, which connects our outbound calls and carries our SMS. It sees the numbers involved and the content of messages in order to deliver them. See twilio.com/legal/privacy.
• Website hosting: Vercel.
• Email, file storage and video calls: Google (Gmail, Google Drive and Google Meet).
• Payments: Stripe, which processes card payments. Card details go directly to Stripe and are never held by us.
• Analytics and advertising trackers: none. This site runs no analytics tool, no advertising pixel and no remarketing tag. If that changes, this page changes with it.
• Fonts: this site loads its typefaces from Google Fonts, so your browser contacts Google servers and Google receives your IP address when you view a page.

We may also disclose information where the law requires it, for example to a court, a regulator or a tax authority.

Overseas storage: the providers above are United States companies and hold data in the United States and other countries where they operate.

Cookies

This website sets no cookies of its own and stores nothing in your browser. The Calendly booking widget and Google Fonts may set their own cookies or receive your IP address when those parts of a page load. Your browser settings control what you allow.

How long we keep it

• Enquiries that never became a booking: two years, then deleted.
• Client records, invoices and payment records: seven years, because Australian tax law requires financial records to be kept that long.
• Call logs and message history: two years.
• Access you granted to your own accounts: removed at the end of the engagement. You can revoke it yourself at any time, and you should.

How it is protected

Accounts holding client information use unique passwords and multi-factor authentication where the provider offers it. Access is limited to people who need it to do the work. Devices are password-protected and encrypted. None of this makes a breach impossible, and anyone claiming otherwise is selling something.

If there is a data breach

If information is lost or exposed in a way likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, in line with the Notifiable Data Breaches scheme, and we will say plainly what happened and what we are doing about it.

Seeing or correcting your information

Email lukaspapa@lpapbuilds.com and ask. We will confirm who you are before handing anything over, and respond within 30 days. If something is wrong, we will fix it. If we cannot give you something, we will tell you why.

Complaints

Complaints go to lukaspapa@lpapbuilds.com. We will acknowledge within five business days and answer within 30 days. If you are not satisfied with the answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Marketing emails

If we email you about our services after an enquiry, every message includes a way to unsubscribe and we act on it. We do not add people to lists they did not ask to join.

Changes to this policy

This page may change. The date at the top shows when it last did. Material changes affecting current clients will be told to them directly.

Contact

Lukas Yianni Papanikolopoulos, trading as lpapbuilds (ABN 17 680 613 628)
Email: lukaspapa@lpapbuilds.com
Victoria, Australia