Privacy policy

What we collect

Details you give us in an application or enquiry: your name, email, phone and business details.

The application form asks for your business name, ABN, number of shops, what you sell, catalogue size and launch timing, and your name and email. You can also add your website or Instagram, your current online platform and point of sale, a note and a phone number.

The contact form asks for your name, email and message. You can also add your business name. With each form, we record the time you gave your consent.

When you send a form or open a proposal, we use your IP address to limit repeated requests. Our database keeps it only as a hashed value, never as the address itself.

When you accept a proposal, we record your name, email, browser details and a hashed value of your IP address, with the time and the exact proposal you accepted.

How we use it

To review your application, contact you, and prepare a proposal.

We use an enquiry only to reply to you.

When you send a form, we email you a confirmation and the studio receives an email with the details you entered.

When you accept a proposal, we use your details to create your invoice and to keep a record of your acceptance.

Who we share it with

Service providers who run this site: Vercel (hosting), Supabase (database, Sydney), Resend (email), Stripe (proposal payments) and Cloudflare (bot checks).

Cloudflare checks that a person, not a bot, is sending a form. To do this, it receives technical details such as your IP address and browser type.

When you accept a proposal, Stripe receives your business name, email and ABN to create your invoice. You pay on Stripe's page, so we never see your card details.

Some of these providers are based outside Australia, including in the United States and Singapore. Your information may be stored or accessed there, or in other countries where they operate.

How long we keep it

Applications we decline are deleted on a schedule.

A declined or withdrawn application is deleted 12 months after that decision, together with its notes and any proposal.

An open application that has not progressed for 24 months is also deleted.

Applications with an accepted or paid proposal are kept, with their proposals, as client records.

Enquiries are deleted 12 months after they arrive.

The IP address used to limit repeated requests is kept as a hashed value for up to two days.

Your rights

Ask us for access to or correction of your information.

You can also ask us to withdraw your application at any time.

To make a complaint about how we handled your information, write to us using the contact details below.

We confirm that we received your complaint, look into it, and reply with our response within 30 days.

If you are not satisfied with our response, or we have not responded within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC).

Make a privacy complaint to the OAIC

Contact

Send privacy questions and requests to the studio.