Privacy, in plain English.

Graphite Digital Studio (ABN 90 738 457 055) is based in Victoria, Australia ("we", "us", "our"). This policy explains how we handle personal information collected through this website.

Our products, including ScoreSpike, GetKnowen and EYES ONLY, each have their own privacy policy on their own website. Those policies apply when you use those products.

We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Some small businesses are exempt from the Act. Whether or not that exemption applies to us, we follow the APPs as our standard.

We collect personal information only when you give it to us, through the contact form or by email. That can include:

• your name and email address;
• your business name, if you provide it;
• what you tell us about your project or problem.

Our hosting provider may automatically log technical information such as IP address, browser type and pages requested, for security and to keep the site running. We do not use analytics, advertising pixels, session recording or tracking cookies on this website.

If we send you a quote, it opens on a private page at a link only you have. When you open it, we record that it was opened and when. If you ask a question on the page, we keep your name and your question so we can answer it.

If you accept a quote, we keep a record of the acceptance: the name and role you type, the email the quote was sent to, the options you chose, the date and time, your IP address and browser details, and a digital fingerprint of the exact version you accepted. That record is our evidence of what we agreed, and we keep it with our business records for at least five years. Our client and quote records are stored in Sydney, Australia.

We use your information to reply to you, understand your problem, prepare quotes, deliver and support work you engage us for, and keep records the law requires (for example, tax records). We won't use it for an unrelated purpose without your consent, unless the law requires or allows it.

When you send the contact form, your message is delivered to our inbox by Resend, an email delivery provider, and the site itself is served by Vercel. They process your message only to deliver it.

We email businesses about our services only where the Spam Act 2003 (Cth) allows it: you've agreed, or your work address is published and the email is relevant to your role. Every email says who it's from and includes a working way to opt out, actioned promptly.

We don't sell, rent or trade personal information. Ever.

We share it only with service providers that help us run this website and our email, and only as far as they need it to provide that service. We may also disclose information where the law requires it.

Some of our service providers store data outside Australia, in the United States and Japan. Where we use them, we take reasonable steps to make sure they handle your information consistently with the APPs (APP 8).

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, including encrypted connections (HTTPS), access limited to people who need it, and keeping secrets such as API keys out of our code.

No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

We keep personal information only as long as we need it for the purposes above, or as long as the law requires. Financial and tax records are generally kept for five years. After that, we delete or de-identify it.

You can ask to access or correct the personal information we hold about you by emailing admin@graphitedigitalstudio.com. We'll respond within 30 days, and it costs you nothing.

If you think we've mishandled your personal information, contact us first and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

We may update this policy. The date at the top always shows the current version, and material changes will be noted on this page.