Legal document
Privacy policy
- Last updated
- July 2026
- Legislation
- Privacy Act 1988 (Cth)
- Principles
- Australian Privacy Principles
Draft — not yet in force
Highlighted details are outstanding until the business entity is registered, and this document has not been reviewed by a lawyer. It is excluded from search engines until then.
Privacy Act 1988 (Cth)
This policy is prepared in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles. Your personal information will only be used for the purposes for which it was collected, or directly related purposes, unless you consent otherwise.
Introduction
Our commitment to your privacy
AceStudio55 (“we”, “us”, “our”) provides home installation services in Greater Melbourne. We collect a small amount of personal information to quote your job, arrive at the right address, and invoice you for the work.
This policy explains what we collect, why, who we share it with, and how you can see it, correct it or have it deleted. By getting a quote or booking a job you consent to us handling your information as described here.
Section 1
What is personal information?
Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable. For us that means your name, contact details, the address we’re coming to, and photos you send us of your home.
Sensitive information is a subset that includes health, biometric, racial, political and similar information. We do not collect sensitive information, and we do not collect government identifiers or card numbers.
Section 2
What personal information we collect
Your account
Full name
Email address
Phone number
Sign-in history
The job address
Street address
Suburb and postcode
Access notes
Parking or entry details
About the job
Answers to quote questions
Photos of the space
Service selected
Any notes you add
Bookings and payments
Quotes and estimates
Arrival windows
Invoices and receipts
Deposit status
Photos are the most sensitive thing we hold. They show the inside of your home. They are stored in a private bucket that is not reachable from the public web — only you and our staff can open them, and only through a temporary signed link.
We do not hold a password for you. Signing in uses a one-time code sent to your email address. When card payments are introduced they will be handled by a payment provider and card details will never reach our systems.
Section 3
How we collect your information
Almost all of it comes directly from you — when you complete the quote wizard, create an account, book an arrival window, or email us about a job.
A small amount is generated by using the site: the cookies that keep you signed in and remember your progress through the wizard. We do not buy personal information, and we do not receive it from data brokers or social platforms.
Unsolicited information: if we receive personal information we didn’t ask for and don’t need, we destroy or de-identify it as soon as practicable, in line with APP 4.
Section 4
How we use your information
- Quoting — producing a fixed price from your answers and photos.
- Scheduling — booking an arrival window and getting an installer to your door with the access details they need.
- Billing — issuing invoices and receipts, and recording deposits and payments.
- Keeping you informed — confirmations, reminders, and letting you know if anything changes.
- Legal obligations — tax and record-keeping requirements.
We do not sell your personal information, and we do not use your photos for marketing unless you have separately agreed in writing.
Section 5
Who we share it with
We use a small number of providers to run the business. Each receives only what it needs:
- Supabase — our database, file storage and sign-in system.
- Vercel — website hosting.
- Resend — sending booking confirmations and receipts.
- Your installer — the assigned installer gets the address, access notes and job details required to do the work.
- Authorities — where we are required to disclose information by law or court order.
Section 6
Where your information is stored
Some of your information is stored outside Australia. Our database and file storage are hosted in Singapore, and our website and email providers operate infrastructure in other countries including the United States.
By giving us your information you consent to it being disclosed to and held in those locations. We take reasonable steps to ensure our providers handle it consistently with the Australian Privacy Principles, but overseas providers may also be subject to the laws of their own jurisdictions.
Section 8
How we protect it
- Photos of your property sit in a private storage bucket, reachable only through short-lived signed links.
- Database access is scoped per customer, so signing in only ever shows you your own quotes, bookings and invoices.
- Administrator accounts require a second factor in addition to email sign-in.
- Everything is transmitted over encrypted connections.
No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Section 9
How long we keep it
- Invoices and job records are kept for five to seven years, because tax and consumer law require it.
- Photos are kept while the job is active and for the warranty period, so we can assess a claim against what was there before.
- Account details are deleted when you delete your account, other than the records above.
When information is no longer needed we securely destroy or de-identify it.
Section 10
Your rights — access, correction, deletion
Under the Privacy Act and the Australian Privacy Principles you have the following rights:
Access
Ask for a copy of what we hold about you. We respond within 30 days.
Correction
Ask us to fix anything inaccurate or out of date. We’ll correct it or explain why not.
Deletion
Delete your account and photos yourself, any time. Some invoice records must be retained by law.
Complaint
Raise a privacy concern with us, and escalate to the OAIC if you’re not satisfied.
Most of this is self-serve: your account settings let you change your details, review your full booking history, and delete your account outright.
For anything else, email [contact email — to be confirmed].
Section 11
Privacy complaints
If you think we’ve mishandled your personal information, email [contact email — to be confirmed]. We will acknowledge within 5 business days and aim to resolve it within 30 days, in writing.
If you’re not satisfied with our response you can complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992 · GPO Box 5218, Sydney NSW 2001.
Section 12
Children's privacy
Our service is intended for adults arranging work on a property they own or occupy. We do not knowingly collect personal information from children. If you believe a child has given us information, email us and we will delete it promptly.
Section 13
Changes to this policy
If we change this policy we will update the date at the top. Where a change materially affects how we use information you have already given us, we will tell you by email.
Section 14
Contact us
- Business: AceStudio55
- ABN: [ABN — to be confirmed]
- ACN: [ACN — to be confirmed]
- Email: [contact email — to be confirmed]
- Service area: Greater Melbourne
[Legal review — to be confirmed] — this document is a draft prepared for review by an Australian legal practitioner before it is relied upon.