Legal

Privacy notice

Effective 18 October 2026 · Version 2.3

This notice explains how Aurenhold Studios handles personal information. The team follows the Australian Privacy Principles in the Privacy Act 1988 (Cth) in everything described here. It is written to be read, not to be survived.

Aurenhold Studios is operated by R.A. Apparel (ABN 43 995 518 595).

What is collected

Only what you choose to send through the enquiry form or by email:

  • Your name, and your business or project name if you give one
  • Your email address, and your phone number if you give one
  • Your current website address, if you have one
  • The pathway, timing and budget range you select
  • Whatever you write in the brief

Visit counts. The site records which pages are viewed and a few actions (for example opening the enquiry form, sending it, or using the price estimator), with the page address and the name of the website that referred you. It does not record your IP address, set cookies, or use any identifier that could link visits to you. Only the most recent 500 of these records are kept. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded.

The website foundations check. When you use the free check, the website address you enter is fetched once from this site’s server so the page can be analysed. The address and the result are shown to you and are not stored.

Technical information. Your IP address and standard request data are processed by the hosting and network layer to deliver the site. To limit abuse of the forms, a scrambled (keyed hash) form of your connection address is kept for up to 15 minutes; it cannot be turned back into the address.

If you pay an invoice, you enter your payment details on Stripe’s secure payment page. Card details never reach this website or the studio.

Why it is collected

To reply to your enquiry, to scope and quote work, and to carry out a project if you engage the studio. It is not used to build a marketing list, and it is not sold or shared for anyone else’s marketing.

How the enquiry form works

The form submits directly to this website’s own server, which validates it, stores it securely and forwards it to the studio. Your answers are also kept temporarily in your own browser’s session storage so a refresh or a dropped connection does not lose what you typed; that copy is cleared as soon as the enquiry sends. The draft stays on your device until you submit the form; the submitted answers are then sent to the studio. If a submission is retried after a connection drops, a random one-time code (holding no personal information, kept for 24 hours) stops the same enquiry being stored or emailed twice.

Links between pages may include public pathway, scope, reference and product choices in the page address, such as a selected service, portfolio reference, format or finish. These choices can appear in browser history and in links you share. The enquiry form does not put your name, email address, phone number or private written brief into the URL.

Who else processes it

ProviderRoleLocation
Vercel Inc.Website hosting and deliveryUnited States and global edge
Upstash, Inc.Secure storage of enquiries and project recordsUnited States (Virginia)
StripeInvoicing and payment processingAustralia and United States
Email service providersSending, receiving and storing studio correspondenceUnited States and other locations

Because these providers operate globally, your information is likely to be disclosed to overseas recipients, including in the United States. Reasonable steps are taken to ensure they handle it consistently with the Australian Privacy Principles.

How long it is kept

  • Enquiries that do not proceed: retained for 24 months, then deleted. Stored enquiries are reviewed each month and those older than 24 months are deleted.
  • Project records and correspondence: retained for 3 years after a project is cancelled or contact ends, then deleted. Financial records the law requires for tax purposes are kept for as long as that law requires.
  • Visit counts: the most recent 500 records.
  • Abuse-prevention records: up to 15 minutes. Server logs are kept for a short operational period by the providers above.

Security and data breaches

Information is transmitted over encrypted connections, and access to studio systems is restricted to the people who need it. If a data breach occurs that is likely to result in serious harm, it will be assessed promptly and notified to affected individuals and to the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Access, correction and complaints

You can ask for a copy of the personal information held about you, or ask for it to be corrected or deleted, by emailing info@aurenholdstudios.com.

  • Requests and complaints are acknowledged within 5 business days.
  • A substantive response is provided within 30 days.
  • Complaints are handled by the team directly, never outsourced.

If you are not satisfied with the outcome, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this notice

Material changes will be published here with a new version number and effective date before they take effect.