Privacy Policy

1 Who we are and how to contact us

DESIGN 33 (ABN 11 525 321 012) is an Australian digital design and connected-systems studio serving businesses across Sydney, Melbourne, Brisbane, Perth, Adelaide and regional Australia. For any privacy question, request or complaint, contact us through the enquiry form on our Contact page. We handle all enquiries internally.

2 What personal information we collect

We only collect information reasonably necessary to run the studio and respond to you:

• Enquiry and contact details you volunteer through our enquiry or scope-builder forms — name, email address, phone number and business name.
• Project and brief details you choose to share when formulating scope — industry, desired features, budget band and timelines.
• Service delivery records created during an engagement — correspondence, deliverables feedback and account contacts. We do not seek sensitive categories of data such as health, biometric or criminal-history information.
• Basic technical information where useful for diagnosing a delivery issue. We do not run behavioural advertising trackers.

3 How we collect it

We collect personal information only where you actively provide it — forms, email, phone — or where it is generated as part of delivering a service you have engaged. We do not purchase mailing lists and we do not scrape directories to generate leads.

4 Why we use it

Your information is used solely to respond to, qualify and progress your enquiry; formulate project briefs, quotes and statements of work; deliver, test and hand over agreed services; issue invoices and keep legally required business records; and improve the reliability and accessibility of our own website. We do not sell, rent or trade your personal information, and we do not share it with third-party marketing brokers.

5 Disclosure to third parties

We disclose personal information only to service providers operating necessary infrastructure on our behalf — form processing (Web3Forms), payment processing (Stripe), and secure hosting/email — and only to the extent required to deliver those functions. Where an engagement requires integration with your business tools (HubSpot, Simpro, ServiceM8, Xero or SMS gateways), we act on your documented instruction as set out in clause 9 of our Terms of Engagement.

6 Overseas disclosure

Some service providers above may store or process data outside Australia — for example on content-delivery networks. We take reasonable steps to ensure any overseas recipient handles your information consistently with this policy and the Australian Privacy Principles.

7 Cookies and local storage

This website uses browser local storage for two lightweight functions: remembering whether you have already seen the entry animation in your current visit (session flag), and recording the date you accepted this Privacy Policy and our Terms of Engagement so we do not re-ask unnecessarily. No advertising or cross-site tracking cookies are set by us.

8 Retention

Enquiry details that do not progress to a project are culled after 24 months. Project records are retained for up to 7 years after final invoice to satisfy tax and contractual record-keeping obligations, after which they are de-identified or deleted on request.

9 Access, correction and opting out

Under the Privacy Act 1988 (Cth) you may request access to the personal information we hold about you, ask us to correct it, or ask us not to contact you for marketing-type reasons at any time. We will respond within a reasonable period — generally 10 business days — and will not charge a fee for a reasonable access request.

10 Marketing communications

We only send project, estimate or service correspondence to people who have provided contact details in a business context. Any commercial electronic message we send complies with the Spam Act 2003 (Cth), including functional unsubscribe facilities in bulk mailouts.

11 Security

Personal information is protected by personnel access controls, HTTPS transport on our own properties, and the security controls of the providers named above. Because no email or web service can guarantee absolute security, please avoid sending highly sensitive identity documents through the website before your project is scoped.

12 Complaints

If you believe we have mishandled your personal information, contact us first and we will investigate and respond in writing. If you are not satisfied with our response you may escalate to the Office of the Australian Information Commissioner at oaic.gov.au or by calling 1300 363 992.

13 Changes to this policy

Material changes will be published on this page with an updated version number and effective date. We will re-prompt acceptance only if a future version materially changes how personal information is handled.

14 Status of this document

Privacy Policy version 1.0, effective 6 September 2026, published at design33.com.au/pages/privacy-policy.html. Related document: Terms of Engagement version 1.0.