Legal
Privacy Policy
Last updated 28 April 2026
Shopfront Studio ("we", "us", "our") is a Melbourne-based small business website provider. This Privacy Policy explains what personal information we collect when you use our website at shopfrontstudio.com.au, why we collect it, how it is stored and shared, and the choices you have. We handle personal information in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).
What we collect
We only collect information you choose to provide, plus a small amount of technical data needed to run the site.
- Contact form details. Your name, business name, email address, phone number (if you provide one), and the message you send when you request a website review or get in touch.
- Email correspondence. Anything you send us by email, including attachments and signatures.
- Analytics. Aggregate usage data such as pages visited, referring site, approximate location (city level), device type, and browser. This is collected through privacy-friendly analytics and is not used to identify you personally.
- Server logs. Standard web server logs (IP address, timestamp, requested URL) retained for security and troubleshooting.
We do not knowingly collect information from children under 13, and we do not collect sensitive information (as defined by the Privacy Act) through this website.
Why we collect it
- To respond to your enquiry and provide a quote or website review.
- To deliver the services you have engaged us for, including project communication and invoicing.
- To improve the website and understand which pages are useful.
- To meet our legal obligations, including tax and record-keeping.
We will never sell your personal information, and we will not add you to a marketing list without your consent.
How it is stored
Enquiries and correspondence are stored in our email inbox and project management tools. Analytics and server logs are held by reputable cloud providers. Some of these providers store data outside Australia (commonly in the United States or European Union); where that is the case, we choose providers that contractually commit to comparable privacy protections.
Who we share it with
We share your information only with:
- Service providers we use to run the business (for example, email hosting, invoicing, analytics, and form delivery), bound by their own privacy obligations.
- Government agencies or law enforcement, where we are required to do so by Australian law.
We do not sell, rent, or trade your personal information to third parties for their own marketing.
How long we keep it
Enquiry information that does not turn into a project is kept for up to 24 months in case you come back to us, then deleted. Project records (briefs, invoices, correspondence) are kept for at least 7 years to meet Australian tax and record-keeping requirements. Server logs are retained for up to 90 days. You can ask us to delete your information sooner where we are not required by law to keep it.
Your rights
You can ask us to:
- Confirm what personal information we hold about you.
- Correct anything that is wrong or out of date.
- Delete your information where we are not legally required to keep it.
- Stop using your information for a particular purpose.
Email hello@shopfrontstudio.com.au and we will action your request within 30 days.
Complaints
If you are not happy with how we have handled your information, contact us first and we will do our best to sort it out. If you are still not satisfied, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy from time to time. Material changes will be noted on this page along with a new "last updated" date. Continuing to use the site after we publish an update means you accept the revised policy.
Contact
Shopfront Studio
Melbourne, Australia
hello@shopfrontstudio.com.au