How we handle your information
We collect as little as we need, use it only to help you, and never sell it.
Last updated 27 October 2026
We will never ask you for passwords, verification codes or bank details by email, text or phone. If someone claiming to be Hard Target does, it isn't us. Please tell us at brook@hardtarget.au.
Who we are
Hard Target (ABN 86 279 552 897) is a scam and fraud education business based in Perth, Western Australia, run by Brook Durling. In this policy, "we" and "us" mean Hard Target.
You can contact us about privacy at brook@hardtarget.au.
What we collect
- When you request the Invoice Fraud Check or another guide: your first name, email address and, if you give it, your company name.
- When you book a call or work with us: your name, contact details, role and business details, and anything you choose to tell us about how your business handles payments.
- When you email or message us: your details and the contents of your message.
- When you open our emails: our email platform records whether an email was opened and which links were clicked.
- When you visit our website: our hosting provider keeps standard server logs, such as your IP address and browser type, for security and to keep the site running. We don't use advertising cookies or tracking pixels.
We don't ask for, and don't want, sensitive information such as health details, passwords, or bank account and card numbers.
How we use it
- To send you what you asked for, such as the Invoice Fraud Check
- To reply to you, arrange calls and deliver our services
- To send you scam alerts and updates, if you've signed up for them
- To understand which content is useful, so we can improve it
- To keep our records and meet our legal obligations
Emails and unsubscribing
We only email you if you've asked us to or you're a client. Every email we send has an unsubscribe link, and you can also just reply and ask to be removed. We'll stop straight away.
Who we share it with
We never sell or rent your information. We use a few trusted service providers to run the business, and they handle your information on our behalf:
| Provider | What for | Where data may be stored |
|---|---|---|
| Kit | Email sign-ups, guides and newsletters | United States |
| Microsoft 365 | Business email and call bookings | Australia and other countries |
| Netlify | Website hosting | United States and other countries |
Because some of these providers store data overseas, your information may be held outside Australia. We choose established providers with strong security practices.
If we ever think a partner, such as an IT provider, could help you, we'll introduce you only with your permission, and we'll tell you in writing if we receive any fee.
We may also disclose information if the law requires it.
What we learn about your business
When we work with your business, we may learn how you approve payments and manage bank details. We treat that as confidential. We use it only to deliver our work for you, and we never share it or use it as an example without removing anything that could identify you, unless you've agreed in writing.
Keeping it safe, and for how long
We protect your information with secure, password-protected systems and multi-factor authentication. We keep it only while it's needed for the purposes above or to meet legal record-keeping requirements, then delete it.
Seeing or correcting your information
You can ask to see the information we hold about you, ask us to correct it, or ask us to delete it. Email brook@hardtarget.au and we'll respond within 30 days.
Questions and complaints
If you have a concern about how we've handled your information, please email us first and we'll do our best to fix it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy as our business changes. The date at the top shows when it was last updated.