Privacy Policy
Novilunium Pty Ltd (ABN [INSERT ABN]) (“Novilunium”, “we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
We only collect personal information that you actively provide to us:
- Contact form — your name, email address, subject line and message.
- Newsletter subscription — your email address.
- Direct correspondence — anything you choose to include when you email us.
We also collect limited technical information automatically through analytics, described in section 5. We do not collect sensitive information as defined by the Privacy Act, and we do not require you to create an account.
2. How we use it
- To respond to your enquiry.
- To send you project updates and announcements, where you have subscribed.
- To detect and filter spam submissions.
- To understand, in aggregate, how the website is used.
We do not sell, rent or trade your personal information, and we do not use it for automated decision-making that has a legal or similarly significant effect on you.
3. Storage and security
Submissions are stored in Google Firestore and notifications are delivered by email. Access is restricted to Novilunium personnel who need it in order to respond to you. Data is transmitted over TLS and the database denies all public read access.
Overseas disclosure. Our infrastructure is provided by Google Cloud Platform. Contact and subscriber records are currently stored in Google’s United States multi-region. By submitting the form you consent to your information being stored and processed outside Australia. Google is contractually bound to protect it, but overseas recipients may be subject to laws that differ from Australian privacy law.
4. Retention
We keep contact enquiries for as long as necessary to deal with your matter and to meet our record-keeping obligations, and we review them periodically. Subscriber records are kept until you unsubscribe. Submissions automatically classified as spam are deleted on a rolling basis.
5. Cookies and analytics
We use Google Analytics to measure aggregate traffic. It sets cookies containing a randomly generated identifier and records information such as pages viewed, approximate location derived from IP address, referring site, and browser and device type. We have IP anonymisation enabled and we do not attempt to identify individual visitors from analytics data.
You can block these cookies through your browser settings or by installing the Google Analytics opt-out browser add-on. Blocking them does not affect your ability to use this website.
6. Marketing and unsubscribing
We only send marketing email to people who have subscribed. Every message we send includes a working unsubscribe link, as required by the Spam Act 2003 (Cth). You may also unsubscribe at any time by contacting us using the details below, and we will action the request within five business days.
7. Third parties
We disclose personal information only to the service providers that operate this website:
- Google (Firebase, Google Cloud, Google Analytics, Google Workspace) — hosting, database, email delivery and analytics.
- Cloudflare — DNS and network services.
- Google reCAPTCHA — spam and abuse prevention. Its use is subject to Google’s Privacy Policy and Terms of Service.
We may also disclose information where required by law, or where necessary to protect our legal rights.
8. Accessing and correcting your information
Under the APPs you may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. You may also ask us to delete it. Contact us using the details below and we will respond within 30 days. There is no charge for making a request.
9. Complaints
If you believe we have breached the Australian Privacy Principles, please contact us first so we can investigate. We will respond in writing within 30 days. If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
10. Data breaches
If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
11. Changes to this policy
We may update this policy from time to time. The current version is always available at this address, and the “last updated” date above will change.
12. Contact us
Privacy enquiries can be sent to our privacy officer at , or posted to Novilunium Pty Ltd, [INSERT POSTAL ADDRESS], Australia.