Privacy policy

This site is operated by [REVIEW: legal entity name, e.g. “Daniel [Surname] trading as Aedo Studio” or registered company name + ACN/ABN] (“Aedo Studio,” “we,” “us”). We are based in Sydney, Australia. You can reach us at hello@aedo.studio.

This policy explains how we handle personal information you provide when you visit aedo.studio or send us an inquiry. It does not cover client engagements after they begin — those are governed by the separate agreement you sign with us.

• Inquiry details. When you submit the contact form, we collect your name, email address, and the message you send. We use these only to reply to your inquiry.
• Server logs. Our hosting provider [REVIEW: confirm host — Vercel by default] records standard request data (IP address, user agent, timestamp, URL) for security and operational purposes. [REVIEW: confirm log retention period — Vercel default is 30 days].
• No cookies, no analytics. This site does not set cookies and does not run analytics, advertising, or tracking pixels. [REVIEW: update this paragraph if you add Plausible, GA, Vercel Analytics, Meta Pixel, etc.]

The contact form is delivered to our inbox by Resend (resend.com), a transactional email provider based in the United States. By submitting an inquiry, you understand your message is transmitted to and processed by Resend on its US infrastructure, and stored in our email inbox at [REVIEW: where the inbox actually lives — Cloudflare Email Routing forwarded to Gmail / Fastmail / etc.].

We keep inquiry emails for [REVIEW: retention period — e.g. “24 months after the conversation ends”] so we can find context if you return. You can ask us to delete your information at any time by emailing hello@aedo.studio.

We don’t sell or rent your information. We share it only with:

• Resend — transmits your inquiry to our inbox.
• [REVIEW: hosting provider — Vercel by default] — operates the servers that run this site.
• [REVIEW: mailbox provider — e.g. Google Workspace, Fastmail] — stores received email.
• Authorities or regulators, where we are legally required to disclose information.

Some of these providers process data outside Australia, including in the United States and the European Union. By contacting us, you consent to this transfer. [REVIEW: if you target EU/UK residents, expand this section to cover the GDPR lawful-basis and transfer-mechanism requirements.]

Under the Australian Privacy Act 1988 (Cth), you have the right to ask us what personal information we hold about you, ask us to correct it, and ask us to delete it. We aim to respond within 30 days. If you are an EU/UK resident, you have additional rights under GDPR — including the right to data portability and the right to lodge a complaint with your supervisory authority. [REVIEW with counsel.]

To exercise any of these rights, email hello@aedo.studio.

We use standard transport encryption (HTTPS), keep API keys in server-side environment variables only, and apply security headers (Content Security Policy, HSTS, X-Content-Type-Options, Referrer-Policy) to every page. No transmission over the internet is ever 100% secure; if a breach occurs that affects your data, we will notify you in line with the requirements of the Notifiable Data Breaches scheme.

This site is intended for business audiences and is not directed at children under 16. We do not knowingly collect information from children.

We may update this policy from time to time. We will change the “Last updated” date at the top whenever we do. Material changes will be highlighted on this page for [REVIEW: e.g. 30 days].

Questions about this policy? Email hello@aedo.studio.