Privacy policy

In short

• We only collect what we need to reply to you, quote, deliver our services and run the business.
• We never sell personal information.
• The only cookies on this website belong to its live chat and, on the contact page, Google's booking calendar. It runs no analytics or advertising trackers.
• You can ask to see, correct or delete what we hold at any time by emailing contact@staticblack.au.

The full policy follows. It describes how STATIC BLACK PTY LTD (ABN 42 689 615 816) ("we", "us", "our", or the "Company") collects, holds, uses, discloses and otherwise handles personal information. We are based in Australia and operate globally, so this policy is designed to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"), and, where applicable, with overseas laws that may apply to individuals outside Australia, including the EU/UK GDPR and the California CCPA/CPRA.

By using our website, contacting us, or providing personal information, you acknowledge that you have read this policy. If you do not agree, please do not use our website or provide personal information.

1. Who we are

• Legal name: STATIC BLACK PTY LTD
• ABN: 42 689 615 816
• Principal place of business: Sydney, Australia
• Email: contact@staticblack.au
• Website: www.staticblack.au

We provide websites, e-commerce, business automation, AI agents and data services, custom software, mobile applications, digital marketing, and staff training.

For most website, sales, billing and marketing activities, we are the organisation that decides how and why personal information is handled (the equivalent of a "controller" under overseas law). When we handle personal information only on a client's instructions as part of a contracted project, we generally act as a service provider (a "processor") under that client's instructions and the relevant services agreement.

2. Scope

This policy applies to personal information collected:

• through our website, forms, cookies and online tools;
• by email, telephone, messaging apps, video conference, or in person;
• during quotes, proposals, contracting, invoicing, project delivery and support;
• from publicly available business sources used for legitimate business-to-business outreach; and
• from third-party providers who help us operate our business.

It does not apply to third-party websites or platforms that we do not control.

3. What is "personal information"?

Under Australian law, personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and whether recorded in a material form or not. This includes names, contact details, online identifiers, and other information that can reasonably identify a person, alone or combined with other data.

Sensitive information is a subset of personal information under the Privacy Act. It includes information about health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, and certain biometric information. We do not seek to collect sensitive information unless it is reasonably necessary and permitted by law, or you provide it voluntarily.

4. Personal information we collect

We may collect:

4.1 Identity and contact information

Name, job title, employer, business address, email, telephone number, and professional profile details.

4.2 Commercial and project information

Enquiry details, briefs, files, correspondence, proposals, statements of work, change requests, support tickets, and service history.

4.3 Billing and transaction information

Invoice details, payment status, billing address, and limited payment metadata. Full card details are generally processed by third-party payment providers and are not stored on our systems.

4.4 Technical and usage information

IP address, device and browser type, pages viewed, referring URL, date and time of visit, approximate location inferred from IP address, and security logs.

4.5 Marketing preferences

Consent records, unsubscribe requests, and communication preferences.

We collect personal information only by lawful and fair means, and generally only if it is reasonably necessary for our functions and activities, consistent with APP 3.

5. How we collect personal information

We collect personal information:

• directly from you when you submit a form, email us, message us through our live chat, book a call, sign a contract, or send project materials;
• automatically when you use our website (server logs and similar technologies);
• from your authorised representatives or employer;
• from publicly available professional sources, such as company websites and professional networking profiles, for legitimate business development; and
• from service providers such as hosting, CRM, analytics and payment platforms.

If you give us personal information about another person, such as a colleague, you must be authorised to do so and make sure they are aware of this policy.

6. Why we collect and use it (APP 6)

We collect and use personal information for purposes reasonably necessary for our business, including to:

• respond to enquiries and provide quotes and proposals;
• enter into and perform contracts;
• deliver, support and improve our services;
• process invoices and payments, and keep financial records;
• communicate about projects and operational matters;
• send business and marketing communications, subject to the Spam Act 2003 (Cth) and your right to opt out;
• operate, secure and improve our website and systems;
• prevent fraud, misuse and security incidents;
• comply with Australian law, including tax and record-keeping obligations; and
• establish, exercise or defend legal claims.

We will only use or disclose personal information for another purpose where the Privacy Act permits it: for example, with your consent, where a related secondary purpose would reasonably be expected, or where required or authorised by law.

7. Direct marketing and electronic messages (APP 7 and Spam Act)

We may use business contact details to send information about our services where:

• we have your consent; or
• we are otherwise permitted to under APP 7 and the Spam Act 2003 (Cth).

Every commercial electronic message identifies us and includes a working unsubscribe option. You can opt out at any time; we process opt-outs promptly and send no further marketing after you unsubscribe. Service messages needed to perform a contract or answer a request are not marketing.

8. Cookies and similar technologies

Right now, the only cookies on this website belong to our live chat and our booking calendar, and it uses no analytics or advertising trackers. The chat is provided by Tawk.to, which stores cookies and similar browser storage so it can recognise a returning visitor and keep a conversation going from page to page. The booking calendar on our contact page is Google Calendar's own page shown inside ours, and Google may set its own cookies there. If we add anything else, this section will be updated before we do. In future, cookies and similar technologies may be used to:

• enable core site functions and security;
• understand how the website is used; and
• measure marketing performance, where enabled.

Australia does not impose the same cookie-consent rules as the EU. However, you can always control cookies through your browser; if you are in the EEA or UK, non-essential cookies may require your consent under local law; and we will add a consent mechanism wherever one is legally required. Disabling cookies may affect how the website works.

9. Who we share it with (APP 6)

We do not sell personal information. We may disclose it to:

• service providers who host our systems or provide email, CRM, analytics, payments, accounting or cloud storage;
• contractors or specialists engaged to deliver a project, under confidentiality obligations;
• professional advisers, such as lawyers, accountants and insurers;
• courts, regulators or government agencies, where required or authorised by law; and
• a purchaser or successor if the business is sold, merged or restructured, subject to appropriate protections.

The providers involved in running this website today are:

• Vercel hosts the website and keeps standard server logs, including IP addresses and browser details.
• Formspree receives the details you enter in our contact form and forwards them to us.
• Tawk.to runs the live chat on this site. It receives your IP address and browser details when a page loads, and stores anything you type into the chat, including any name or email address you give it.
• Google Fonts serves the typefaces this site uses, so Google receives your IP address when a page loads.
• Google Calendar runs the booking calendar on our contact page. When you book a call, the name, email address and any notes you enter go to Google and to the calendar of the director you're booking with.
• Google Workspace carries our email, so anything you send to contact@staticblack.au is stored in that mailbox.

We take reasonable steps to make sure recipients handle personal information in line with this policy and applicable law.

10. Overseas disclosure (APP 8)

Because we use cloud services and may work with overseas contractors or clients, personal information may be disclosed to, or accessed from, countries outside Australia, including the United States, where the providers listed above are based. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs in relation to it, unless an exception under APP 8 applies (for example, you consent, or the disclosure is required or authorised by law).

If you are in the EEA or UK, transfers of personal data from those regions may also be subject to GDPR transfer rules. Where required, we use appropriate safeguards such as standard contractual clauses or other approved mechanisms.

11. Storage and security (APP 11)

We take reasonable steps to protect personal information from:

• misuse, interference and loss; and
• unauthorised access, modification or disclosure.

These steps include access controls, encrypted website connections (HTTPS), secure cloud hosting, staff confidentiality obligations, and access limited to those who need it. No electronic system is completely secure, and you provide information subject to that residual risk. When personal information is no longer needed for any purpose the Privacy Act permits, we take reasonable steps to destroy or de-identify it, unless the law requires us to keep it.

12. Notifiable data breaches

If we experience an eligible data breach under the Notifiable Data Breaches scheme in the Privacy Act, we will:

• assess the incident promptly;
• notify the Office of the Australian Information Commissioner (OAIC); and
• notify affected individuals,

where required by law, and take reasonable steps to contain and fix the breach.

13. How long we keep it

We keep personal information only for as long as reasonably necessary, including:

• enquiry records: generally up to 24 months after last contact, unless a longer period is justified;
• client, contract and project records: for the length of the relationship, plus the period required for legal, tax and dispute purposes (often 7 years in Australia);
• financial and tax records: as required by Australian taxation and corporations law; and
• marketing suppression records: for as long as needed to honour opt-out requests.

14. Access and correction (APP 12 and APP 13)

You may ask for:

• access to the personal information we hold about you; and
• correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We will respond within a reasonable period. We may refuse a request only in the limited circumstances the Privacy Act allows, for example where giving access would unreasonably affect another person's privacy, or would be unlawful. If we refuse, we will give written reasons and explain your complaint options, unless it is unreasonable to do so. We may need to verify your identity first. In limited cases we may charge a reasonable fee for providing access, but never for making a request.

15. Complaints (Australia)

If you have a privacy complaint, please contact us first using the details in section 19. We will investigate and respond within a reasonable time. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Telephone: 1300 363 992

16. Additional rights outside Australia

Depending on where you are, additional rights may apply.

16.1 European Economic Area and United Kingdom (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, you may have rights to access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and the right to complain to your local supervisory authority (in the UK, the Information Commissioner's Office). Our legal bases will generally be:

• contract (Art. 6(1)(b));
• legal obligation (Art. 6(1)(c));
• legitimate interests (Art. 6(1)(f)), including business-to-business communications and website security; and
• consent (Art. 6(1)(a)), where required for certain cookies or marketing.

16.2 California (CCPA/CPRA)

If you are a California resident and those laws apply, you may have rights to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money. If our use of advertising cookies ever counts as "sharing" under California law, you can ask to opt out by contacting us. We will not discriminate against you for exercising any privacy right available to you.

17. Children

Our services are for businesses and adults. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it unless the law requires us to keep it.

18. Third-party links

Our website may link to third-party sites. We are not responsible for their privacy practices, so please review their policies separately.

19. Contact us

• Privacy contact: STATIC BLACK PTY LTD
• Email: contact@staticblack.au
• Address: Sydney, Australia

Please include enough detail for us to identify you and respond to your request.

20. Changes to this policy

We may update this policy from time to time. The revised version will be published here with a new "Last updated" date, and material changes may also be notified by email where appropriate. Continuing to use our website after an update means you acknowledge the revised policy, to the extent permitted by law.

21. Governing law

This policy is governed by the laws of New South Wales and the Commonwealth of Australia. Mandatory overseas privacy rights, including under the GDPR, UK GDPR or CCPA/CPRA, remain available to eligible individuals to the extent those laws apply.