What can you help with?

Websites and Shopify stores, local SEO and your Google Business Profile, and the admin automation behind a small business. One person across the lot, so the site, the search side and the back office actually talk to each other.

How much does it cost?

A website or portfolio site starts at $1,800 AUD, and an online shop starts at $2,500 AUD. Brand identity, SEO, automation and ongoing support are quoted on the actual scope. Either way, you get a fixed number in writing before anything starts.

Do I need to be technical?

Not at all. You never need to understand how it works, only that it does. I handle everything and explain it in plain language.

How long does it take?

A landing page goes live in about a week, a multi-page site in two to three. A full bespoke project, brand and site built together, is usually a few weeks. You get a fixed timeline with the quote.

Will I own everything when it’s done?

Yes. Everything is in your name and your accounts: code, domain, hosting account, Google accounts, lead-tracking sheets. If you decide to walk away tomorrow, you take it all with you. No vendor lock-in, no hostage data.

Will you lock me into a monthly fee?

Never as a condition. I charge per project, one-time, so you only pay when there’s real work to do, and most people need nothing after that. Some things genuinely run month to month if you want them, keeping an eye on a live site, or running your Instagram ads, and those are month to month in the real sense: you ask for them, and you can stop them whenever you like.

Why not just build it myself on Squarespace?

Honestly? If you only need a one-page portfolio, go ahead. I come in when the site has to do real work: capture enquiries, integrate with the tools you already use, rank in search, and look like nobody else’s. It usually pays for itself the first time it books a job while you’re busy.

What if I already have a site?

Tell me about it. Sometimes it just needs a polish, speed, SEO, a few fixes. Sometimes new things shipped. Sometimes a rebuild. I look at it honestly and tell you what actually moves the needle, and what doesn’t.

Tutorial: stop contact form spam without punishing real customers

In short: form spam is bots filling in anything that accepts text, and the fix depends on which form is being hit. Shopify stores have built-in spam protection you just switch on. Newsletter forms need double opt-in, which stops fake signups from ever reaching your list. Custom-built forms can use a honeypot, an invisible field that only bots fill in. And the one thing not to do is bolt an ugly puzzle captcha onto your enquiry form: it stops some bots and some paying customers with them. I cleaned up after a bot attack that pumped hundreds of fake signups into a Melbourne label's newsletter list; everything below comes from that.

Why your form is suddenly full of junk

Bots crawl the web looking for any form they can post to. Some push links, some test stolen email addresses, some sign random victims up to newsletters in bulk, which is called list bombing, and it can get your own email flagged as a spammer. It is not personal, and it does not mean your site was hacked. It means your form answers the door to anyone who knocks.

Fix 1: if it is a Shopify form, switch the protection on

Shopify ships spam protection for its contact and comment forms; it is just not always on. In your Shopify admin, open the Online Store preferences and look for the spam protection setting (Shopify uses Google reCAPTCHA behind the scenes). Turn it on for forms. That is the whole fix, and it is invisible to most genuine customers: no traffic-light photos to click for normal visitors.

While you are there: if junk arrives through product reviews or app-added forms, check that app's own settings, most review apps have their own spam toggle.

Fix 2: if it is your newsletter, turn on double opt-in

List bombing is the nastiest one, because hundreds of strangers "joining" your list wrecks your sending reputation. The fix is double opt-in: a new subscriber gets a confirmation email and only joins the list after clicking it. Bots sign up fake addresses; fake addresses never confirm; your list stays clean.

Every serious email platform has the toggle: Mailchimp, Brevo, Klaviyo and friends all call it double opt-in or confirmed opt-in, and it lives in the signup form or audience settings. Turn it on and the bombing becomes a non-event. You will lose a small number of real people who never click the confirmation, and it is worth it.

Fix 3: if it is a custom form, add a honeypot

A honeypot is a form field that humans never see, hidden with CSS, but bots, which read the code rather than the screen, happily fill it in. If the hidden field comes back with anything in it, the message is junk and you drop it silently.

If a developer built your form, this is a five-line request:

<input type="text" name="website" tabindex="-1" autocomplete="off"
       style="position:absolute; left:-9999px" aria-hidden="true" />

Then, wherever the form is processed: if the website field is not empty, ignore the submission. No puzzle, no friction, invisible to every real visitor. The contact form on this site runs exactly this trick.

If the flood continues: the polite escalation

For a form under sustained attack, the next step up is an invisible challenge like Cloudflare Turnstile, free, and it decides in the background whether the visitor looks human, without showing most people anything. It needs a developer to wire in, but it is the modern answer when a honeypot is not enough.

What not to do

Do not add a hard image captcha to your enquiry form. Every extra puzzle costs you a percentage of real enquiries, and an enquiry is worth far more than the junk costs you.
Do not just delete and despair. Five minutes of settings beats months of manual deleting.
Do not ignore list bombing. It quietly damages whether your real emails reach real inboxes.

If you would rather hand it over

Checking which of your forms are exposed, switching the right protections on, and cleaning a bombed list is a small, one-time job, and it is the kind of quiet back-office work I do. Tell me what is getting spammed and I will tell you straight which fix applies, in writing, before you spend anything.