Privacy policy
Last updated October 28, 2026
This policy explains what personal information Green Pail Media collects, why we collect it, who we share it with and what you can do about it. It covers greenpailmedia.com, its contact form, and the work we do for our clients and the people and companies we feature.
The short version
- You can read greenpailmedia.com without giving us any personal information. It has no ads, no analytics or tracking scripts, and no tracking cookies.
- If you send us a message, we use it only to deal with your message.
- If you buy from us, we keep what we need to do the work, send invoices and keep business records. Stripe handles card payments, and we never see your full card number.
- We use AI tools to help write drafts. People at Green Pail Media decide what we publish.
- We never sell your personal information.
Who we are
Green Pail Media (ABN 26 692 648 983) is a business registered in Australia. We run a group of websites and make video, podcasts and social media posts. Green Pail Media decides how and why your personal information is used. Some privacy laws call this being the “controller” of your information. In this policy, “we”, “us” and “our” mean Green Pail Media.
Our mailing address is 1178 Broadway, 3rd Floor #4567, New York, NY 10001, United States. The fastest way to reach us is our contact form.
What this policy covers
This policy covers greenpailmedia.com and its contact form. It also covers the information we handle when we work with clients, with agencies acting for them, and with the people and companies we feature.
Our other websites may have their own privacy policies. Where they do, that policy covers what happens when you visit that website.
What we collect
You do not have to give us any personal information to read this site. If you leave out details we ask for, we may not be able to answer your message or do work for you.
When you visit this site
Each time you load a page, your browser sends technical details to Cloudflare, the network that delivers the site, and to Vercel, which hosts it. These details include:
- your IP address, which can show your rough location
- the page you asked for, and the page that sent you to it
- your browser, device type and operating system
- the date and time of the request
We use these records to deliver the site, keep it secure, block abuse and fix errors. Cloudflare also shows us totals from these records, such as how many requests the site gets and from which countries. The totals do not identify anyone. We do not run any analytics or tracking scripts on this site.
When you use the contact form
Our contact form asks for your name, your email address, what your message is about and your message. We use them to read and answer your message. If your message leads to work, a correction or a removal, we keep it as a record of what we agreed.
The form does not store your message on this site. It sends it to our inbox by email, through Resend. Resend keeps a log of the emails it sends for a limited time.
Please do not send us sensitive information, such as details about your health, through the form.
When you buy from us
If you, your company or an agency acting for you pays us for work, we collect what we need to do the work and to bill for it. This includes:
- the name, business name, email address and phone number of the person we deal with
- the billing address, and a tax number if you give us one
- what was ordered, our messages about it and any approvals
- invoices and payment history
We send invoices and take card payments through Stripe. Stripe collects your card details directly. We never see or store your full card number. Stripe’s privacy policy explains what it collects.
When we feature you
To prepare a profile, interview, wiki entry, video or other piece about you or your company, we collect the information you, or someone acting for you, give us. This can include:
- your name, job title, company and location
- your email address and phone number, so we can check details with you
- your answers to our questions, and a short bio
- photos, logos and links to your website and social media profiles
- your edits to drafts, and your approval of the final text where a piece needs it
We use this to prepare the piece, check it, publish it and keep a record of what was agreed. We do not publish your email address or phone number unless you ask us to.
We do not ask for sensitive information, such as your health, religion or political views. If you choose to include something like this, we publish it only because you gave it to us for that purpose.
Information from other sources
We may read what you or your company have already made public, such as your website, your professional profiles and news stories. If someone else arranges work about you, such as your employer, your publicist or an agency, they may give us your details. We do not buy personal information from data brokers.
AI writing tools
We use AI tools to help write first drafts from the information we have been given. Our AI provider is Anthropic, which we use through its API. We send it the information needed for the draft, such as your answers and the facts in your profile.
Under Anthropic’s commercial terms, it does not use the information we send through its API to train its AI models.
AI tools help with drafts. People at Green Pail Media decide what we publish.
How we use it
We use personal information only for these purposes:
- to run this site and keep it secure
- to see how much traffic this site gets, in totals
- to answer your messages
- to prepare, publish, correct and remove the content we make
- to share our content on our social media accounts
- to send invoices, take payments and keep business records
- to meet our legal duties and to deal with legal claims
We do not use your information for advertising. We do not make decisions about you by automated means alone.
Our legal reasons, for people in the European Union and the United Kingdom
Privacy law in the EU and the UK requires a legal reason, called a “lawful basis”, for each use of personal information. These are ours.
We run and protect this site, and answer messages, because we have a legitimate interest in doing so. Our interest is a safe, working website and replying to the people who write to us.
We do work that you or your company ordered, and bill for it, because it is part of a contract with you or your company.
When we publish content that features you, we rely on your consent, or on our legitimate interest in publishing information about your professional life. You can object at any time, as Your rights explains.
We keep invoices and business records, and records of privacy requests, because the law requires it.
Where your information goes
Green Pail Media is based in Australia. Our websites are hosted mainly in the United States, and our service providers may handle information in other countries where they work. So your information may be stored or used in Australia, the United States and other countries. Privacy laws in those countries may be different from the laws where you live.
Sometimes personal information goes from the EU, the UK or Australia to another country. When it does, our providers must protect it under their contracts with us. For information from the EU and the UK, those contracts use the Standard Contractual Clauses approved by the European Commission and the UK. Some providers are instead certified under the EU-US Data Privacy Framework.
How long we keep it
- Messages in our inbox: as long as we need them to deal with your message and keep a record of what we agreed.
- Details we use to prepare content: while the content is published. If you ask us to delete them, we will, unless we need to keep them for a reason below.
- Records of approvals and of removal requests: up to 7 years, in case of a legal claim.
- Invoices and payment records: as long as tax law requires, which is usually 5 to 7 years.
- Technical logs: a short time, then the provider that keeps them deletes them.
Our providers keep backup copies so we can recover from a failure. Backups are replaced on a rolling schedule, so deleted information can stay in a backup until that backup is replaced.
How we protect it
We take reasonable steps to protect personal information. Our websites are served only over encrypted connections (HTTPS). Cloudflare filters attacks and bot traffic before they reach our servers. Only the people who need it can get into our email, our publishing system and our billing account. We keep our software up to date.
No system is perfectly secure, so we cannot promise that information will never be lost or misused. If you think your information is at risk, tell us through our contact form.
Information we publish
Content we publish on our websites and social media accounts is public. Anyone can read it, link to it or quote it, and search engines show it in their results. Other websites, archives such as the Internet Archive, and AI tools may copy public pages without asking us.
If something we published about you is wrong, or you want it removed, tell us through our contact form. We will check it and tell you what we can do. We cannot control copies held by others, but we will help you ask them to remove those copies where we can.
Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you, and give you a copy
- correct information that is wrong, out of date or incomplete
- delete your information
- stop using your information for a purpose, or limit how we use it
- correct or remove content about you, as Information we publish explains
We do not charge for these requests. We may need to keep some information to meet a legal duty, such as tax records, or to deal with a legal claim. If so, we will tell you what we kept and why.
Australia
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988. You can ask to see or correct the personal information we hold about you, and we will reply within 30 days. If we refuse a request, we will tell you why in writing and explain how to complain. Where it is practical, you can deal with us without giving your name, for example when you ask a general question.
European Union and United Kingdom
Under the GDPR and the UK GDPR, you also have the right to:
- get your information in a common format a computer can read, and have it sent to another organization
- object to our use of your information where we rely on our legitimate interests
- withdraw your consent at any time. This does not affect anything we did before you withdrew it.
- complain to your local data protection authority
United States
Depending on your state, you may have the right to know what personal information we collect about you. You may be able to get a copy, correct it and delete it. You may also have the right to opt out of its sale, its use for targeted advertising and its use for profiling. We do none of these, so there is nothing to opt out of. We will not treat you differently for using your privacy rights.
In the last 12 months, we collected these kinds of personal information, as California law describes them:
- identifiers, such as your name, email address and IP address
- professional information, such as your job title and company
- commercial information, such as invoices and payment records
- internet activity, such as the pages you viewed on this site
- rough location, from your IP address
We collected it from you, your browser, people who arranged work about you and public sources. We used it for the purposes in this policy, and we disclosed it only to the people listed in Who we share it with.
You can have an authorized agent make a request for you. We may ask the agent for proof that you gave them permission. If we turn down your request, you can appeal by replying to our decision, and we will answer your appeal within 45 days.
How to make a request
Use our contact form and choose “A privacy request” as the topic. Tell us what you would like us to do. If you cannot use the form, write to our mailing address.
To protect you, we check that a request comes from the person the information is about, or from someone allowed to act for them. We usually do this by replying to an email address we already have for you. If we cannot confirm who you are, we may ask for a little more information, and only what we need.
We will reply within 30 days. If the law where you live gives a shorter time, we will follow it. If a request is complex and the law allows more time, we will tell you within those 30 days.
Children
This site is for adults. We do not knowingly collect personal information from children under 16. If you think a child has sent us their information, tell us and we will delete it.
Do Not Track and Global Privacy Control
Some browsers send a “Do Not Track” or Global Privacy Control signal. We do not track you across websites or sell your information, so there is nothing for these signals to switch off. We still treat a Global Privacy Control signal as a valid request to opt out of the sale and sharing of your information.
Data breaches
If a data breach is likely to cause you serious harm, we will tell you and the relevant regulator, as privacy law requires. In Australia, this is done under the Notifiable Data Breaches scheme.
This policy in other formats
Need this policy in another format, such as plain text or large print? Ask us through our contact form or by mail, and we will send it to you. Our terms of use explain what we do to make this site accessible.
Changes to this policy
We will update this policy when our practices change, and the date at the top will show the last change. If a change affects how we use information we already hold about you, such as a client’s records, we will email you before the change takes effect.
Questions and complaints
If you have a question or a complaint about privacy, please contact us first. Use our contact form, or write to Green Pail Media, 1178 Broadway, 3rd Floor #4567, New York, NY 10001, United States. We will look into it and reply within 30 days.
If you are not happy with our answer, you can complain to the privacy regulator where you live, such as:
- in Australia, the Office of the Australian Information Commissioner
- in the United Kingdom, the Information Commissioner’s Office
- in the European Union, your country’s data protection authority
- in California, the California Privacy Protection Agency