Legal
Privacy policy
Updated 10 September 2026 · applies from that date
This policy explains what happens to information about you when you read brickrecap.com. It is written to be read rather than to be waved at, and it describes the site as it actually is: a set of static pages with no forms, no accounts and no analytics.
Who is responsible for this site
This site is operated by Isla Mackenzie, an individual, at 99 Spring St, Melbourne VIC 3000, Australia. Telephone +61 3 9650 0001. The email address for privacy matters is the editorial address published on the contact page.
There is no company behind this site. It is not a business venture, it has no employees and it is not part of a larger group of publications. Where this policy says the operator, it means one named person.
How the Australian Privacy Principles apply here
The Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles set out in Schedule 1 of that Act do not automatically bind every operator. Individuals acting in a personal capacity, and many small operators, sit outside the definition of an APP entity.
The operator of this site takes the view that a reader should not have to work out whether an exemption applies before deciding whether to trust a website. This policy therefore follows the Australian Privacy Principles as though they applied in full, and the operator undertakes to handle any personal information reaching her through this site accordingly.
What this site collects directly
None. There is no contact form, no comment box, no newsletter signup, no search field and no account system anywhere on brickrecap.com. No page on this site asks you to type anything, and no page transmits anything you do to a server belonging to the operator.
If you write to the email address published on the contact page, that message and your address arrive in an ordinary mailbox. That is a direct collection of personal information and it is covered further down this policy.
What is collected automatically by the infrastructure
Serving a web page requires a server, and servers keep records. When your browser requests a page from this site the hosting provider records, in a standard access log, the internet protocol address the request came from, the date and time, the address of the page requested, the HTTP status returned, the size of the response, the referring page where your browser sends one, and the user agent string identifying your browser and operating system.
An IP address can be personal information under Australian law where it is reasonably capable of identifying an individual. These records are treated as personal information for the purposes of this policy, whether or not they would meet that test in a particular case.
This site sits behind Cloudflare, which acts as a content delivery network and as a protective layer against automated abuse. Cloudflare therefore processes the same request data in the course of delivering a page to you, and may set a short-lived cookie for the purpose of distinguishing automated traffic from human readers. The cookie notice describes that in detail.
Why each category is held, and on what basis
Access logs exist so that the site can be kept working and defended. They are used to diagnose errors, to identify the source of automated traffic that would otherwise take the site offline, and for no other purpose. They are not analysed to build a picture of individual readers, they are not linked to any other data set, and they are not used for advertising or for measuring an audience.
Correspondence sent to the editorial address is held so that it can be answered, and where it concerns a correction to a page, so that there is a record of why the page was changed. It is not added to any mailing list, because this site operates no mailing list.
What this site does not do
There is no analytics package on this site, first party or third party. No page loads a script, a font, a stylesheet or an image from a third-party domain. There is no advertising, no advertising identifier, no conversion tracking, no pixel, no tag manager, no social media widget, no embedded video and no push notification service.
No profile of you is created, no automated decision is made about you, and nothing on this site is personalised. Two readers requesting the same page receive byte-identical files.
How long information is kept
Hosting access logs are retained for a short operational period, ordinarily no longer than thirty days, after which they are overwritten in the normal rotation of the server. The operator does not archive them or take copies for any other purpose.
Cloudflare retains its own request records under its own retention schedule, which is set out in the Cloudflare privacy policy and is not controlled by the operator.
Email correspondence is kept for as long as it may reasonably be needed to answer a further question on the same subject, and in the case of correction requests, for as long as the corrected page remains published. You may ask for correspondence from you to be deleted at any time.
Who else receives this information
Two parties, both of them necessary to deliver the site. The first is the hosting provider that stores the files and serves them. The second is Cloudflare, Inc., which is established in the United States and operates a global network of servers, one of which will be the machine your browser actually talks to.
Because Cloudflare operates outside Australia, delivering this site involves a disclosure of your IP address and request details to an overseas recipient within the meaning of Australian Privacy Principle 8. Cloudflare publishes its own data protection commitments and standard contractual arrangements covering that transfer. The operator has taken reasonable steps in the circumstances of a single-person site to satisfy herself that those commitments are appropriate, and readers who are not comfortable with that arrangement should not use this site.
No information is sold, licensed, shared for advertising, or disclosed to anyone else, other than where disclosure is required by Australian law or by a lawful request from an Australian authority.
Security
The site is served over HTTPS, so the connection between your browser and the server is encrypted. The published files are static, which removes whole categories of problem that apply to sites with databases and user accounts, since there is no database and no account.
The mailbox used for editorial correspondence is protected by a unique credential and second-factor authentication. No security arrangement is perfect, and if a data breach occurs that is likely to result in serious harm, the operator will act in accordance with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth), which includes notifying affected individuals and the Office of the Australian Information Commissioner.
Your rights, and how to use them
You may ask what personal information about you the operator holds, ask for a copy of it, ask for it to be corrected if it is inaccurate, out of date, incomplete or misleading, and ask for it to be deleted where there is no lasting reason to keep it. You may also ask a question about this policy without making a formal request of any kind.
Requests should be sent to the editorial address on the contact page, or by post to the address at the top of this policy. There is no charge for making a request. Please describe what you are asking for clearly, since the operator holds very little and a general request may otherwise be answered with very little.
A request will ordinarily be answered within thirty days. If a request has to be refused - for instance, where the information asked for is not held, or where providing it would reveal information about somebody else - you will be told why in writing.
Complaints
If you believe your privacy has been interfered with, please raise it with the operator first, using the contact details at the top of this policy. Most issues on a site this small can be resolved in a single exchange.
If you are not satisfied with the response, or you would rather not deal with the operator directly, you may complain to the Office of the Australian Information Commissioner. The OAIC can be reached by post at GPO Box 5218, Sydney NSW 2001, by telephone on 1300 363 992, and online at oaic.gov.au, where the current complaint form and guidance are published.
Children and young readers
This site is written for adults and is not directed at children. It is not intended for use by anyone under fifteen years of age, and the operator does not knowingly hold personal information about anyone under that age.
Nothing on the site asks a reader for their age, because nothing on the site asks a reader for anything. Where a parent or guardian believes that a child has sent personal information to the editorial address, they should write to that address and it will be deleted.
Changes to this policy
This policy will change if the site changes. If a substantive change is made - a new recipient of data, a new category of information, a different retention period - the revised policy will be published here with a new effective date, and the previous version will be replaced rather than kept alongside it.
Trivial corrections, such as fixing a typographical error or clarifying a sentence, may be made without changing the effective date.
Contacting the operator about this policy
Privacy questions, access requests and corrections go to editor@brickrecap.com, or by post to Isla Mackenzie, 99 Spring St, Melbourne VIC 3000, Australia. The telephone number is +61 3 9650 0001.
The cookie notice lists the single browser key this site writes, and the terms of use cover editorial independence and intellectual property.