Your privacy.
My promise.

1. About oo.studio

oo.studio is a digital studio based in Canberra, Australian Capital Territory, Australia. I’m James, the person behind the studio. I am committed to protecting your personal information and handling it in an open and transparent way, consistent with the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles ("APPs").

This policy explains what personal information I collect through this website (oo.studio) and in the course of providing my services, how I hold, use and disclose it, and how you can exercise your rights in relation to it.

2. Personal information I collect

I collect personal information that is reasonably necessary for the conduct of my business. Depending on your dealings with me, this may include:

• Contact and enquiry information — your name, email address and the contents of any message you submit through my contact form;
• Business and project information — information you provide in connection with a proposal, engagement or project, including your organisation, role and billing details;
• Technical information — information collected automatically when you visit this website, such as your IP address, browser type, device type, pages viewed and the date and time of your visit, as recorded in standard server logs maintained by my hosting provider.

I do not use advertising or profiling tools or a third-party analytics service on this website. If that changes, I will update this policy before doing so.

I do not actively seek to collect sensitive information (as defined in the Privacy Act). Please do not include sensitive information in messages to me unless it is necessary.

3. How I collect it

I collect personal information directly from you — for example, when you submit my contact form, email me, engage me for services or otherwise deal with me. Limited technical information is collected automatically by the infrastructure that serves this website.

My contact form is processed by Netlify, my website hosting and form-handling provider. Information you submit through the form is transmitted to and stored by Netlify on my behalf before being made available to me.

When you use Jules, my SayGday website assistant, your messages are processed to provide replies and saved in my business dashboard so I can review questions and follow up. You can ask a question without signing in. Contact details are optional and are only requested if you want a follow-up. See SayGday’s privacy policy for more information.

The optional map

The Google Map on this page only loads when you choose “Show interactive map”. Loading it connects your browser to Google. Google may receive technical information, such as your IP address, and use cookies under its privacy policy. You can read this policy and contact me without loading the map.

4. Why I collect, hold and use it

I collect, hold and use personal information for the following purposes:

• to respond to your enquiries and communicate with you;
• to provide, administer and improve my services;
• to prepare proposals, perform contracts and manage billing;
• to operate, secure and improve this website;
• to comply with my legal and regulatory obligations; and
• for other purposes to which you have consented or that you would reasonably expect.

I do not use personal information for direct marketing without your consent, and I do not sell personal information.

5. Disclosure of personal information

I may disclose personal information to:

• service providers that support the operation of my business and this website, such as hosting, form-processing, email and productivity providers, on terms that require them to handle it appropriately;
• professional advisers, such as accountants, insurers and lawyers, where reasonably required; and
• government agencies, regulators or other parties where required or authorised by law.

Overseas disclosure

Some of my service providers (including Netlify, whose infrastructure is located in the United States and other jurisdictions) store or process information outside Australia. Where I disclose personal information overseas, I take reasonable steps consistent with APP 8 to ensure the recipient handles it in a manner consistent with the APPs.

6. Storage and security

I take reasonable steps to protect the personal information I hold from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include encryption of data in transit, access controls on the systems I use, and limiting collection to what I actually need. No method of transmission or storage is completely secure, and I cannot guarantee absolute security.

I retain personal information only for as long as it is needed for the purposes described in this policy or as required by law, after which I take reasonable steps to destroy or de-identify it.

7. Access and correction

You may request access to the personal information I hold about you, or ask me to correct it, through my contact form. I will respond within a reasonable period (usually within 30 days). I may need to verify your identity before providing access. If I refuse a request, I will give you written reasons and information about how you may complain about the refusal.

8. Complaints

If you believe I have breached the Privacy Act or the APPs, please contact me first through my contact form with the details of your concern. I take complaints seriously and will investigate and respond within a reasonable period.

If you are not satisfied with my response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phone on 1300 363 992.

9. Changes to this policy

I may update this policy from time to time to reflect changes in my practices or the law. The current version will always be published on this page with its effective date. Material changes will be noted on this website.