Privacy
Privacy Policy
How an enquiry on this website is collected, why, and what you can ask for.
Last updated 2 November 2026.
Who is responsible
The site is operated by Eamonn Egan, Cellar Design Consultancy (“we”), for eamonnegan.com. The legal entity and any ABN or company number are still to be confirmed and will be added here before launch. For privacy questions, use the contact form or the placeholder address hello@eamonnegan.com, which is not a confirmed inbox yet.
This policy is written for the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and for the EU General Data Protection Regulation and the UK GDPR, because work and enquiries may come from Australia, Ireland, the UK and elsewhere.
What the form collects
If you send an enquiry, the form asks for:
- Name
- Email address
- Phone number, if you choose to give one
- Project type
- Country and city or suburb
- Project stage
- A budget band for the build, not a consultancy fee
- The name of your architect or designer, if you give it
- Your message
- A record that you agreed to this policy for the purpose of the enquiry
Please don’t put a street address or someone else’s sensitive information in the message. The form does not ask for them.
If a form service is not configured, the page opens your own email program instead. In that case the message goes only where you send it, and this site does not store the form.
Why it is collected
The enquiry is used to:
- Reply to you
- Decide whether the project is one the consultancy can advise on
- Prepare a proposal and fee letter if you want to continue
- Keep a record of what was asked and what was answered
It is not used for a mailing list, and it is not sold. Under the GDPR and UK GDPR the usual basis is steps toward a contract (Article 6(1)(b)) and, for the short record of the conversation, legitimate interests in answering and documenting a professional enquiry (Article 6(1)(f)). The checkbox is your acknowledgement of this policy. It is not consent to marketing.
Under the APPs, this is personal information collected for that primary purpose (APP 3 and APP 6), and this page is the notice of collection (APP 1 and APP 5).
Form processor and hosting
If the site owner has set a form endpoint (for example a Formspree address), the fields are sent to that provider so the enquiry can be delivered. That provider may store the enquiry outside Australia, the UK or the EEA. The provider’s name and country should be written into this paragraph before launch, once the endpoint is chosen (APP 8; GDPR Articles 13 and 44).
The site is hosted so it can be served on the public internet. The host may keep connection logs, such as IP address, user agent and the time of a request, for security and to fix faults. Those logs are not used for advertising. No separate analytics product is installed.
Cookies and analytics
This site does not set analytics cookies, advertising cookies, or a tracking pixel. Fonts are self-hosted, so loading a page does not call Google Fonts. No cookie banner is shown because no non-essential cookie is in use. If analytics are added later, this policy will be updated first, and a banner will be added before any optional cookie is set.
How long it is kept
These periods are proposed and must be confirmed before launch. The draft intention is: an enquiry that does not become a project is kept only as long as the conversation needs, and not more than 24 months; papers for an agreed engagement are kept for the life of the work and then for up to 7 years so a professional record can be produced if a question arises. Host logs follow the host’s ordinary retention. You can ask for an earlier deletion where the law allows it.
Your rights
You can ask to:
- Access the personal information held about you (APP 12; GDPR Article 15)
- Correct it (APP 13; GDPR Article 16)
- Erase it, or restrict how it is used, where that right applies (GDPR Articles 17 and 18)
- Object to a use based on legitimate interests (GDPR Article 21)
- Receive a portable copy where the right applies (GDPR Article 20)
- Complain to a regulator, without affecting any other right
In Australia the regulator is the Office of the Australian Information Commissioner (OAIC). In the UK it is the Information Commissioner’s Office (ICO). In Ireland, and for many EU matters, it is the Data Protection Commission. A UK or EEA representative has not been appointed. Confirm before launch whether one is required.
The site is not aimed at children, and project enquiries are not sought from them.
Security
Enquiries are sent over HTTPS when the live site is served that way. Access to the inbox or the form provider should be limited to Eamonn and anyone he names. No method of transmission is perfectly secure.
Changes
When this draft is replaced, the date at the top will change. The current version is the one published on this page.