Legal
Privacy statement
Last updated 15 September 2026
Blanch Works (ABN 54 273 572 173) works inside other businesses' systems, so we take the handling of information seriously. This statement explains what we collect, why, and what we do with it.
Who we are
Blanch Works is a sole trader operated by Sarah Blanch, based in Newcastle, New South Wales. You can reach us at admin@sarahblanch.com.
What we collect from this website
If you use the enquiry form, we collect the name, business name, email address, phone number and message you give us. That is all this site collects. There is no analytics tracking, no advertising pixels and no cookies set by us.
Form submissions are delivered to our email inbox through Web3Forms, a third-party form service. Our website is hosted on Cloudflare Pages. Both providers may log standard technical information such as IP addresses as part of operating their services.
What we collect as your service provider
When we work with you, we will usually have access to information held in your own systems: client and matter records, financial records, supplier details, staff details and correspondence. We treat all of it as confidential.
- We work inside your systems, under access you grant and control.
- We collect only what the engaged work requires.
- We do not copy your data out of your systems except where a task requires it, and not without your knowledge.
- We do not use your information for any purpose other than performing the work you have engaged us for.
- We never sell information, and we do not share it with anyone outside the engagement.
Where the work is done
All work is performed in Australia, by the people named on our website. Nothing is offshored and no offshore subcontractors are used.
Where an engagement involves bookkeeping or custom software, that work may be performed by Petah Blanch or Matthew Gulliver, each operating under their own ABN and bound by the same confidentiality terms. We will tell you before anyone else is involved in your work.
How we protect information
- Individual accounts with multi-factor authentication, never shared logins.
- Access limited to the systems the work requires, and removed when an engagement ends.
- Reputable Australian or major cloud providers for any storage we control.
- Confidentiality terms in every engagement, and in every subcontractor agreement.
No system is completely secure, and we do not claim otherwise. If we become aware of a data breach affecting your information, we will tell you promptly and work with you on the response, including any notification obligations that apply to your practice.
How long we keep things
Enquiries that do not become engagements are deleted within twelve months. Engagement records are kept for seven years, which is the period Australian tax and business record-keeping generally requires. Access to your systems is removed at the end of an engagement.
Your choices
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email admin@sarahblanch.com and we will respond within 30 days.
Blanch Works is a small business and may fall outside the coverage of the Privacy Act 1988 (Cth), which generally applies to businesses with an annual turnover above $3 million. We apply the commitments in this statement regardless. If you are not satisfied with how we have handled your information, you can contact us first, and then the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this statement we will update the date at the top. Material changes affecting an active engagement will be raised with you directly.