1. About this policy
Harbour Light Studio (ABN 55 917 721 616) (“we”, “us”, “our”) respects your privacy. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). [If your annual turnover is under $3 million you may be exempt from the Privacy Act; this policy reflects a voluntary commitment to follow the APPs. Remove this note once reviewed.]
By using our website or submitting a form, you acknowledge this policy.
2. What personal information we collect
Enquiry form
When you contact us through our enquiry form we collect:
- your name, email address and (optionally) phone number;
- your business name (optional);
- the package you are interested in; and
- anything you choose to tell us in your message.
Project questionnaire
If you go ahead with a project, we ask you to complete a questionnaire. It may collect:
- business contact details, address, ABN and opening hours to display on your website;
- your goals, target audience, style preferences and examples of websites you like;
- content you supply, such as text, logos, photos and staff names or images; and
- [domain, hosting or account details needed to launch your site. List what you actually collect.]
Information collected automatically
Our hosting provider automatically records basic technical information, such as your IP address, browser type and the pages requested, to deliver and secure the website. We also count page visits anonymously, and if you accept analytics cookies we collect further usage information, as described in section 7.
Billing information
If you become a client, we collect the details needed to invoice you, such as your billing name, address and ABN. [We do not store card details; payments are processed by PAYMENT PROVIDER.]
3. How we collect it
We collect personal information directly from you when you complete a form, email or call us, or work with us on a project. Where practical, you may deal with us anonymously or using a pseudonym, for example when asking a general question, but we will need your contact details to provide a quote or services.
4. Why we collect, use and disclose it
We use your personal information to:
- respond to your enquiry and prepare a quote;
- design, build, launch, host and maintain your website;
- communicate with you about your project, invoices and maintenance plan;
- improve our website and services (using analytics, only with your consent); and
- meet our legal, tax and accounting obligations.
We will not use or disclose your information for any other purpose unless you consent, you would reasonably expect it, or it is required or authorised by law.
5. Direct marketing
We may occasionally send you information about our services if you are a client or have asked to hear from us. Every message includes a simple way to opt out, or you can contact us at any time. We never sell or rent your personal information.
6. Who we share it with
We share personal information only with trusted service providers who help us run our business:
- Website hosting: Vercel Inc. (USA)
- Form delivery and email: [FORM PROVIDER, e.g. Formspree Inc. (USA)]
- Anonymous visitor statistics: Vercel Web Analytics (Vercel Inc., USA)
- Analytics (only with your consent): [ANALYTICS PROVIDER, e.g. Google Analytics (Google LLC, USA)]
- Spam protection: [Cloudflare Turnstile (Cloudflare, Inc., USA), if enabled]
- Accounting and invoicing: [ACCOUNTING SOFTWARE, e.g. Xero]
These providers may only use your information to provide their services to us. We may also disclose information where required by law.
Overseas disclosure
Some of these providers store or process data outside Australia, including in [the United States and the European Union]. We take reasonable steps to ensure they handle your information consistently with the APPs.
7. Cookies and analytics
Cookies are small files stored on your device. We use strictly necessary storage to remember your cookie choice. We only load analytics (such as [ANALYTICS PROVIDER, e.g. Google Analytics (Google LLC, USA)]) after you accept analytics cookies in our cookie banner. Analytics helps us understand which pages are visited and how people find us; it does not tell us who you are.
We also use Vercel Web Analytics to count page visits. It does not use cookies or store anything on your device, and it does not identify you: visits are counted using a temporary, anonymised value that is discarded within 24 hours. We only see totals, such as the number of visitors, the pages viewed, the referring website, and the country and device type.
If you accept, Google Analytics may set cookies such as _ga and _ga_*, which last up to [2 years]. We use Google Consent Mode, so Google is told whether you have consented.
You can change your choice at any time using the “Cookie settings” link in our website footer. You can also block or delete cookies in your browser settings.
8. How we store and protect it
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes using reputable providers with encrypted connections (HTTPS), strong passwords and multi-factor authentication, and limiting access to people who need it.
We keep personal information only for as long as we need it for the purposes above or as required by law (for example, tax records are kept for [5 to 7] years). Enquiries that do not become projects are deleted after [12 months]. When information is no longer needed, we securely delete or de-identify it.
If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
9. Accessing and correcting your information
You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details below. We will respond within [30 days] and will not charge you for making a request. If we refuse, we will tell you why in writing.
10. Complaints
If you have a concern about how we have handled your personal information, please contact us first and we will try to resolve it within [30 days]. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
12. Contact us
Privacy contact: [PRIVACY CONTACT NAME]
Email: hello@harbourlightstudio.com.au
Post: [POSTAL ADDRESS]
See also our Terms of Service.