Privacy Policy

Last updated: 6 October 2026

In short. This website does not keep a database of visitors or customers. If you send us an enquiry or a job application, we use what you send only to reply to you, to understand what you need and, if you decide to go ahead, to start the work together. We do not sell your information and we do not send marketing you did not ask for.

1. Who we are and what this policy covers

This policy explains how Flo Studio Software (ABN 91 670 683 495) (“we”, “us”, “our”) collects, uses, discloses and protects personal information when you visit this website, send us an enquiry or apply for a role. We are based in Victoria, Australia.

We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and we apply those standards to everyone who contacts us, whether or not the Act strictly requires us to. Personal information is information or an opinion about an identified person, or a person who is reasonably identifiable.

Work we do for clients under a services agreement is covered by that agreement and by our engagement terms, not by this website policy.

2. What we collect

We only collect what we need to respond to you.

Enquiry form. Your name, email address and message, and any of the following you choose to give us: company, phone number, website, industry, project type and stage, budget, timeline, current technology and a description of what you need.
Careers form. Your contact details and the information you provide about your experience and the role you are interested in.
Your own messages. Anything you write to us through the website, including any replies you send to us afterwards.
Technical information. Your browser stores your theme choice and your cookie choices on your own device (see our Cookie Policy). Our hosting provider may keep standard server logs, such as IP address, browser type and the pages requested, for security and to keep the website running.

Please do not send us sensitive information (for example health, racial or ethnic origin, religious or political beliefs, or criminal records), tax file numbers, bank or card details, passwords, or confidential business data about your own customers. We do not need any of it to start a conversation. If you do send something like this, we will take reasonable steps to delete it.

3. This website does not store your data

This website has no user accounts, no customer portal and no database of its own. When you submit a form, your message is sent securely to us (through a form-handling and email service) and is held in our business systems only so that we can deal with it. It is not kept on the website.

4. Why we collect it and how we use it

To read your enquiry, contact you and learn more about what you need.
To work out whether and how we can help, and to prepare a proposal or next steps if you want to continue.
If you become a client, to begin the engagement you have asked for. From that point your information is handled under your services agreement.
To consider a job application and contact you about it.
To keep this website secure, to prevent spam and abuse, and to meet our legal obligations.

We use your information for these purposes or for a closely related purpose you would reasonably expect. We will not use it for anything else without your consent, unless the law requires or authorises it.

5. Marketing

We do not add you to a marketing list because you made an enquiry. If we ever offer a newsletter or updates, we will only send them with your consent and every message will include a simple way to unsubscribe, as required by the Spam Act 2003 (Cth). You can ask us at any time not to contact you again about anything other than your enquiry.

6. Who we share it with

We do not sell or rent personal information. We share it only where needed:

Service providers that help us run the website and our business, such as hosting, form handling, email and file storage. They may use your information only to provide those services to us.
Cloudflare Turnstile. Our forms use Cloudflare Turnstile to block spam and automated abuse. Cloudflare receives information from your browser, such as your IP address, to run that check, under Cloudflare’s privacy policy.
Professional advisers, such as our accountants and lawyers, where necessary.
Authorities and others where the law requires or permits it, or to protect our legal rights.
A purchaser of our business, if we are ever sold, on the basis that this policy continues to apply.

7. Overseas disclosure

Some of our service providers, including Cloudflare, may store or process information outside Australia, including in the United States and other countries. Before we disclose personal information overseas we take reasonable steps to make sure the recipient handles it in a way that is consistent with the APPs, or we rely on another basis the Privacy Act allows.

8. How long we keep it and how we protect it

We keep personal information only as long as we need it for the purposes in this policy or the law requires, then we destroy it or de-identify it. We take reasonable steps to protect it from misuse, interference, loss and unauthorised access, including using encrypted connections (HTTPS), limiting access to people who need it, and choosing reputable providers. No system is completely secure, and we cannot guarantee the security of information sent over the internet.

If we experience a data breach that is likely to result in serious harm, we will assess it and notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme in the Privacy Act requires.

9. Cookies and similar technologies

We keep these to the minimum. Our Cookie Policy lists exactly what this website stores in your browser and lets you review your choices at any time through Cookie Settings in the footer.

10. Your rights: access and correction

You can ask to see the personal information we hold about you and to correct it if it is inaccurate, out of date or incomplete. We will respond within a reasonable time, usually within 30 days. We may need to confirm who you are first, and in limited cases the Privacy Act allows us to refuse access, in which case we will explain why in writing. We do not charge for making a request.

You can also ask us to delete your information, and we will do so unless we are required to keep it.

11. Dealing with us anonymously

You can browse this website without telling us who you are. If you want us to respond to an enquiry we need a way to contact you, but you can use a pseudonym where it is lawful and practical.

12. Children

This website is for businesses and is not directed at people under 18. We do not knowingly collect personal information from children.

13. Links to other websites

This website may link to other sites. We do not control them and this policy does not apply to them. Please read their privacy policies.

14. Questions and complaints

To ask about this policy, make a request, or raise a concern, please use the form on our Contact page and start your message with “Privacy”. We will acknowledge it promptly, investigate and reply in writing.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

15. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date it was last updated at the top.