Privacy policy

Who we are

ENGIS Studio is the digital transformation division of ENGIS, an independent Australian software company based in Melbourne, Victoria. In this policy, “we” and “us” mean ENGIS Studio.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you would prefer to deal with us without identifying yourself, email studio@engis.au and we will do what we can — though we cannot prepare a website review without knowing which website to review.

What we collect

We only collect what you choose to give us. There is no account system on this site and no hidden collection.

• Enquiry details. When you submit the project form, we collect your name, email address, your phone number if you provide one, your business name and website, and whatever you tell us about your business, your goals and your project.
• Files you attach. Logos, photographs, brochures, briefs, exports of an existing site — whatever you upload to support your enquiry.
• Technical request data. Our hosting and security providers log standard request information such as IP address, user agent and timestamp. This is used to keep the site available and to stop automated abuse of the enquiry form.
• Aggregate usage measurement. We record page views and a small number of anonymous interaction events (for example, that a call-to-action was clicked) so we can tell which parts of the site are useful. These are aggregate and cookieless — they do not build a profile of you and are not used for advertising.

We do not collect sensitive information as defined by the Privacy Act, and we ask that you do not send it to us. We do not knowingly collect information from children.

Cookies and tracking

This site sets no advertising or profiling cookies, runs no third-party advertising trackers, and does not sell or share data with data brokers. Our usage measurement and performance monitoring are cookieless. A short-lived technical token may be used during a form submission to protect the form against automated abuse; it is not used to track you across sites.

How we use your information

We use what you give us to:

• prepare for and respond to your enquiry, including reviewing your current website;
• arrange and deliver a transformation review and any written summary that follows;
• prepare a proposal and, if you proceed, deliver and support the engagement;
• keep the site secure and prevent abuse of the enquiry form; and
• meet our legal and record-keeping obligations.

We do not sell your information, we do not share it for anyone else’s marketing, and we do not add you to a mailing list. If we ever want to use your project as a case study, we will ask you first and you can say no.

Who we share it with

We share personal information only with the service providers we use to run the site and deliver our work, and only to the extent they need it:

• Vercel — hosting, content delivery and storage of uploaded files.
• Resend — delivery of enquiry notifications and acknowledgement emails.
• Cloudflare — edge delivery and protection of the enquiry form against automated abuse.

These providers process data on our behalf under their own terms and security obligations, and may store or process it outside Australia, including in the United States and Europe. By submitting an enquiry you consent to that overseas disclosure. We will otherwise disclose your information only where the law requires it.

How long we keep it

• Enquiry records are deleted after 24 months from your last contact with us.
• Uploaded files are deleted after 90 days, unless your project proceeds — in which case they are kept for the life of the engagement and handed back to you at completion.
• Project and billing records for engagements that proceed are kept for seven years, as Australian tax and business record-keeping requirements expect.

When a retention period ends, records are deleted rather than archived.

How we protect it

The site is served over HTTPS only. Enquiry data is transmitted encrypted, uploads are stored in access-controlled storage, and access to enquiry records is limited to the people working on your project. No system is perfectly secure, but if a data breach ever occurred that was likely to cause you serious harm, we would notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

Access, correction and deletion

You can ask us at any time what personal information we hold about you, ask us to correct anything that is wrong, or ask us to delete it. Email studio@engis.au and we will respond within 30 days. There is no charge. If we cannot action a request — for example, where we are required to keep a billing record — we will tell you why.

Complaints

If you think we have mishandled your information, contact us at studio@engis.au and we will investigate and respond within 30 days. If you are not satisfied with our response, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au, or by phone on 1300 363 992.

Changes to this policy

If we change how we handle personal information, we will update this page and move the effective date. Material changes affecting an active engagement will be raised with you directly rather than left to a page update.