PRIVACY POLICY

Most of the personal information we hold comes from our contact form: your name, email address and message, plus, if you choose to give them, your company, the services you are interested in, and a rough budget range. Name, email and message are the only ones we need in order to reply.

When the form is submitted, our server briefly records the IP address the request came from. It is used for one purpose: rate limiting, so the form cannot be abused to send spam. It is held in memory only, never written to a database, and discarded automatically within minutes.

Separately, we keep a small business-contact list for our own outreach. It holds business names and publicly listed business contact details, and where we have written to a business it records the address we wrote to and the date. We built it from publicly available business listings, not from anything you sent us. If you would rather not be on it, email hello@ellipsestudio.com.au and we will remove you and not contact you again.

This website sets no cookies and runs no analytics. There is no Google Analytics, no advertising or social media pixel, no session recording, and no fingerprinting. We do not build a profile of you, and we have no way of telling who has visited the site.

Only to reply to your enquiry, and, if we go on to work together, to deliver the work and correspond about it. We will not add you to a mailing list unless you ask. We do not sell, rent, or trade your information, and we do not use the contents of your enquiry to train AI models.

Your enquiry passes through a small number of service providers:

• –Resend delivers the enquiry from the website to our inbox.
• –ImprovMX forwards mail sent to our hello@ address.
• –Netlify hosts this website and serves its pages.

Some of the providers above process data on servers outside Australia. We use them because they are established providers with their own security and privacy commitments, but by contacting us you accept that your message may be handled overseas.

Enquiry emails stay in our inbox so we keep a record of the conversation. If you would like yours deleted, just ask. Records relating to paid work are kept for as long as the engagement requires, plus any period we are required to keep them for tax and legal purposes.

If we build or run something for you, we may be given access to your systems, accounts, or data. That is governed separately by our Terms of Engagement and the data handling document we provide at the start of a project. In short: we take the minimum access needed to do the work, we do not keep copies we do not need, and access is handed back or revoked when the project ends.

This site is served over HTTPS. Our accounts are protected with strong, unique credentials and multi-factor authentication wherever the provider supports it. No system is ever perfectly secure, but this website holds no customer database, no accounts and no payment details, so there is very little here to lose.

You can ask us to tell you what personal information we hold about you, correct it if it is wrong, or delete it. Email hello@ellipsestudio.com.au and we will respond within a reasonable time, normally a few business days.

We handle personal information in line with the Australian Privacy Principles. If you are unhappy with how we have handled your information, please tell us first so we can put it right. If we cannot resolve it, you can raise it with the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes we will update it on this page and change the date shown above. Material changes affecting existing clients will be raised with them directly.

Questions about this policy, or about information we hold. Get in touch and we will answer properly.