Last updated 11 September 2026
Who we are
Build PX Pty Ltd, trading as Lynchpin (ABN 29 673 922 364), based in Gold Coast, Queensland. We are the entity responsible for the personal information described here. Contact: kate@thelynchpin.ai.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Small businesses under $3 million turnover are not always bound by that Act — we apply it regardless, because we advise clients on exactly this and it would be odd not to.
What we collect
When you book a call
- Your name, email address and mobile number
- Company name, what it does, and roughly how many people
- The systems you use and the tasks that take the most time
- What is motivating you, and how you found us
Bookings run through Cal.com, which stores this to create the appointment. The booking calendar on ourbooking page is Cal.com's, embedded in our page: when you open that page, Cal.com loads its scripts and booking window on it, and receives what you enter there directly. Cal.com may use its own cookies inside that window.
So we know which campaigns lead to calls, we also pass Cal.com the campaign that brought you to the site (UTM source, medium and campaign) and the first page you landed on, attached to your booking. That note never includes your name, email or phone.
When we meet
Calls may be recorded and transcribed. You are asked to consent when you book, and again at the start of the call. Recordings are used for note-taking and to make sure we heard you correctly. They are not shared outside Kate’s businesses, they are not used to train any AI model, and you can ask us not to record — saying so is enough, and it changes nothing about the meeting.
When you unlock a free win
The first steps of every walkthrough are open to anyone. To see the rest and download the one-page PDF, we ask for youremail address and, if you want to give it, yourfirst name. We do not ask for a phone number.
We use those details to:
- Email you one link to the full walkthrough and the PDF, so you can come back to it
- Keep a record of who unlocked which walkthrough, and whether they opened the link we sent, so we know which ones are useful
- Follow up once about that walkthrough or related help. There is no mailing list and no drip sequence
To stop hearing from us, reply “no thanks” to any email we send, or write to kate@thelynchpin.ai. We will not email you again, and we act on it within five business days, usually the same day.
The walkthrough unlocks on your device straight away. A token saved in your browser keeps it open there for up to 90 days, and the link we email works for the same 90 days. Lead records are kept with other enquiry data (see “How long we keep it” below).
When you visit this site
Google Analytics via Google Tag Manager, which sets cookies and records pages viewed, approximate location from IP address, device and browser, and how you arrived. We use it to understand which pages are worth writing more of.
Depending on how we run campaigns, Google Tag Manager may also load Meta (Facebook/Instagram) Pixel, the LinkedIn Insight Tag and Microsoft Clarity. Meta helps us measure ads and build audiences. Clarity records anonymised session replays (clicks, scrolls, rage clicks) so we can see where the site frustrates people. We do not use those tools to sell your details.
The LinkedIn Insight Tag is LinkedIn's measurement code, loaded through Google Tag Manager like the others. It records the pages you visit here and details of your browser and device. If you are a LinkedIn member, LinkedIn matches the visit to your account and uses its member data to give us aggregated reports on the companies, industries and job functions our visitors come from. It also builds retargeting audiences, so our ads can be shown on LinkedIn to people who have visited this site. We see only the aggregated reports, not who you are. To opt out, useLinkedIn's retargeting opt-out. LinkedIn'sprivacy policyexplains what it does with the data.
We also store first-party marketing attribution (UTM source / medium / campaign and landing page) in your browser so that if you unlock a free win later, we still know which campaign brought you here. That data does not include your name, email or phone by itself.
You can block analytics and advertising cookies with any browser content blocker, or by turning off cookies for this site. Nothing on this site stops working if you do. Consent Mode is configured so storage behaviour can be tightened further when a consent banner is added.
Advertising pixels, session recording and cross-border transfers have privacy implications. This policy describes the intended setup; it is not legal advice. Have a privacy professional review it before you run paid Meta or Google ads at scale.
During an engagement
Audits and builds involve looking at how your business actually works, so we may see information about your staff, your clients and your finances. We only look at what the work requires, we do not copy anything we do not need, and it is covered by the confidentiality terms in our engagement agreement.
What we do not do
- We do not sell personal information. Ever, to anyone.
- We do not add you to a marketing list because you booked a call or unlocked a free win. If you say “not right now”, that is the end of it — there is no drip sequence.
- We do not publish you as a client, testimonial or case study without asking first and getting a yes in writing.
- We do not use your information to train AI models.
Who else sees it
The services we run on, and only for what they do:
- Cal.com: bookings, reminders and the booking calendar embedded on our booking page
- Google Workspace — email, calendar, documents
- Google Analytics and Tag Manager — site measurement
- Meta Pixel / Events Manager — advertising measurement when campaigns are active (loaded via Tag Manager)
- LinkedIn Insight Tag: advertising measurement, aggregated visitor demographics and retargeting when campaigns are active (loaded via Tag Manager)
- Microsoft Clarity — session insights when enabled (loaded via Tag Manager)
- GoHighLevel: CRM for free-win leads and the one follow-up, when the webhook is configured
- Resend: email delivery for the free-win walkthrough link, and our alert that a request came in
- Anthropic (Claude) — where AI assists our work. Business terms, and content is not used for model training
- Cloudflare: hosting, delivery, and storage of free-win requests
Overseas disclosure
Some of those providers store data outside Australia, mainly in the United States. Where we engage subcontractors, they may also be outside Australia.
Client data is not sent to overseas subcontractors without your written agreement.Where a subcontractor is involved, they work on templates, tooling and our own internal systems by default. If a piece of work genuinely needs them to see your information, we ask first and tell you where they are.
How long we keep it
- Enquiries that go nowhere — 12 months, then deleted
- Call recordings and transcripts — 24 months
- Client records — 7 years after the engagement ends, which is what tax and corporate record-keeping require
- Analytics — 14 months, Google’s default
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, ask for a copy, or withdraw consent to recording. Email kate@thelynchpin.ai and we will respond within 30 days, usually much sooner. There is no charge.
Some things we cannot delete on request — records we are legally required to keep, for as long as we are required to keep them. We will tell you if that applies.
If something goes wrong
If we have a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
If you are unhappy with how we have handled your information, email us first — we would rather fix it. If we cannot resolve it, you can complain to the OAIC atoaic.gov.au.
Automated decisions
We do not make automated decisions about you.Nothing on this site scores, ranks or filters people, and no software decides whether we work with you — a person reads every enquiry.
This is worth stating because from10 December 2026, Australian businesses over $3 million turnover have to disclose where software makes or substantially assists decisions that significantly affect a person. If that ever changes here, this section changes with it.
Changes
If this policy changes materially we will change the date at the top and, where we hold your contact details and it affects you, tell you directly.