Privacy Policy

Armstrong Studio ("we", "us", "our", "the Studio") is committed to protecting the privacy and security of anyone who visits our website or otherwise interacts with us online. This notice explains what information we collect, why we collect it, how we keep it secure, and the choices and rights you have. It is written to be read by the public - visitors, prospective clients, and users of our website - rather than as an internal policy.

We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Where we refer to "you" in this notice, we mean any individual who browses our website, submits a form, subscribes to our communications, or otherwise shares information with us.

1. Scope of this notice

  • This notice covers personal information collected through:
  • Our public website and any linked landing pages or booking tools;
  • Contact, enquiry, and newsletter sign-up forms;
  • Cookies and similar tracking technologies used on our site; and
  • Direct correspondence you send us by email or through our website.

We do not operate user accounts or a customer platform, so this notice does not cover account credentials or in-product data - our data collection is limited to what is described above.

2. Information we collect

2.1 Information you provide directly

  • Name and contact details (email address, phone number) submitted through a contact or enquiry form;
  • Any details you choose to include in a message, brief, or newsletter sign-up;
  • Correspondence you send us by email.

2.2 Information collected automatically

  • IP address, general location (city/region level), device type, browser, and operating system;
  • Pages visited, referring website, time on page, and general navigation patterns;
  • Cookie identifiers and similar technologies (see Section 3).

We do not knowingly collect sensitive information (such as health, financial, or government-identifier data) through our website. Please avoid including sensitive information in any form or message you send us.

3. Cookies and tracking technologies

Our website uses cookies and similar technologies to:

  • Remember basic preferences and keep the site functioning correctly (strictly necessary cookies);
  • Understand how visitors use our site so we can improve it (analytics cookies).

You can control or disable cookies through your browser settings. Disabling non-essential cookies will not prevent you from browsing our site, though some features may not function as intended.

4. How we use your information

We use the information described above only to:

  • Respond to enquiries and correspond with you;
  • Operate, maintain, and improve our website;
  • Send newsletters or updates you have opted in to receive, and let you unsubscribe at any time;
  • Understand website usage and traffic patterns in aggregate; and
  • Meet our legal, accounting, and security obligations.

We do not sell personal information, and we do not use website visitor data for automated decision-making that produces legal or similarly significant effects.

5. How we protect your information

We apply security measures appropriate to the limited, low-risk data we hold, including:

  • Encryption of data in transit (HTTPS/TLS) across our website and forms;
  • Access to systems holding personal information restricted to authorised personnel only, on a need-to-know basis;
  • Reputable, security-vetted third-party hosting and form/email providers, selected for their own data protection safeguards;
  • Regular review of the tools and services we use to reduce unnecessary data collection and retention;
  • Prompt deletion of information that is no longer needed for the purpose it was collected (see Section 7).

No method of online transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

6. Disclosure to third parties

We do not disclose your personal information to third parties for their own marketing purposes. We may share limited information with:

  • Service providers who help us run our website, email, and analytics (for example, hosting, form processing, or email delivery providers), strictly to enable those services;
  • Professional advisers (legal, accounting) where necessary; and
  • Regulators or authorities where we are required to by law.

Some of our service providers may store or process data on servers located outside Australia (for example, cloud hosting or email infrastructure). Where this occurs, we take reasonable steps to ensure those providers protect your information consistently with the Australian Privacy Principles.

7. Data retention

We keep personal information only for as long as reasonably necessary for the purpose it was collected: typically, enquiry and contact-form data is retained for up to 24 months, and analytics data is retained in aggregated or de-identified form thereafter. You may ask us to delete your information earlier at any time (see Section 9).

8. Data breach notification

If we become aware of a data breach involving your personal information that is likely to result in serious harm, we will assess it promptly and, where required under the Notifiable Data Breaches scheme, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals without undue delay, together with information on the steps we and you can take in response.

9. Your rights and choices

Under the Australian Privacy Principles, you may:

  • Ask us what personal information we hold about you and request a copy of it;
  • Ask us to correct information that is inaccurate, out of date, or incomplete;
  • Ask us to delete information we no longer need to hold;
  • Unsubscribe from any newsletter or marketing communication at any time, using the link provided or by contacting us directly;
  • Make a complaint about how we have handled your personal information.

To exercise any of these rights, contact us using the details in Section 11. We will respond within a reasonable period, generally within 30 days.

10. Complaints

If you believe we have mishandled your personal information, please contact us first so we can investigate and respond. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

11. Contact us

For any question about this notice, or to exercise your privacy rights, contact privacy@armstrong.studio.

12. Changes to this notice

We may update this notice from time to time to reflect changes in our practices or legal obligations. The "Last reviewed" date at the top of this notice indicates when it was last updated. We encourage you to review it periodically.