Privacy Policy

We collect personal information only where it is reasonably necessary for what we do: answering enquiries, delivering our services, and keeping this website running.

1.a) Information you give us

If you send an enquiry through the contact form on this site, we collect:

• Your name
• Your business name
• Your email address
• Your phone number
• The services you tell us you are interested in
• The budget range you select
• Whatever you write in the message field

If you email or call us instead, we collect whatever you choose to tell us. If you go on to become a client, we also collect what we need to deliver and invoice the work, such as billing details and any account access you give us.

1.b) Information collected automatically

Our web server records standard request information: your IP address, the page requested, the time of the request, and the browser and device details your browser sends with it. We use your IP address to rate limit the contact form so it cannot be flooded. It is held in memory for that purpose only and discarded shortly afterwards.

The contact form is protected by Cloudflare Turnstile, a spam check that runs in your browser. Turnstile collects your IP address and signals about your browser and device and sends them to Cloudflare, which decides whether a submission looks automated. Cloudflare handles that data as an independent provider under its own privacy policy.

1.c) What we do not collect

This is worth being specific about, because a lot of privacy policies claim more than the site behind them does. On futurisen.com:

• We do not run Google Analytics, or any other analytics or measurement product.
• We do not use advertising pixels, remarketing tags or conversion trackers.
• We do not set tracking or advertising cookies. The site sets no cookies at all.
• We do not buy personal information from data brokers, advertising platforms or list vendors.
• We do not build profiles of visitors, and we do not track you across other websites.
• Sen, our chat widget, runs entirely in your browser. Its replies are written in advance, and nothing you type into it is sent to us or to anyone else.

1.d) What is stored on your device

If you switch between light and dark mode, your browser stores that preference locally so the site remembers it next time. It stays on your device and we cannot read it. Cloudflare Turnstile may also store a short-lived token on your device while it verifies a form submission.

We use personal information for these purposes and no others:

2.a) Answering your enquiry

To reply to you, usually within one business day, to talk through what you need, and to put together a quote.

2.b) Delivering our services

If you become a client, to do the work, support it, invoice it, and keep the records a business has to keep.

2.c) Protecting this site

To keep the contact form usable: rate limiting by IP address, a hidden field that only automated submissions fill in, and the Cloudflare Turnstile check. If an enquiry fails to send, we record the sender’s email address in our error log so we can still follow it up rather than lose it.

2.d) Meeting our legal obligations

To keep tax and business records, and to respond where the law requires it.

2.e) Marketing

We do not add you to a marketing list because you sent us an enquiry. If we ever want to send you marketing email, we will ask you first, and every message will carry an unsubscribe link that works, as the Spam Act 2003 (Cth) requires.

2.f) Automated decision-making

We do not use automated decision-making. No computer program makes, or helps make, decisions about you that could affect your rights or interests. If that ever changes, we will update this policy before it does.

When we build a website, business system or app for a client, that client decides what personal information it collects and why. They are responsible for their own privacy policy and for telling the people who use it what happens to their information.

Where we host, maintain or support what we built, we hold that information as well. In that situation:

• We use it only to deliver the services our client has engaged us for, such as hosting, backups, support and fixing faults.
• We never use it for our own purposes. We do not sell it, mine it, or reuse it on other work.
• We keep access to the people who need it to do the work.
• We return or delete it when the engagement ends, as agreed with the client.

If you use a system we built for someone else and you want to access, correct or delete your information, please contact the organisation that runs it. They hold the relationship with you and those decisions are theirs. If you contact us instead, we will pass your request on and help them action it.

We do not sell personal information, and we never share it for someone else’s marketing. We share it only in these situations:

4.a) Service providers

A small number of providers keep the business running:

• Cloudflare, which runs the Turnstile spam check on the contact form.
• Google, whose mail service delivers and stores enquiries sent through this site, along with our email correspondence with you.
• Our hosting provider, which runs the server this website is served from.
• Our accounting and invoicing software, which holds client billing records.

Each of them handles information only to provide their service to us.

4.b) Professional advisers

Our accountant and, if we ever need one, our lawyer, in confidence and only where it is necessary.

4.c) Legal and safety

Where we are required to by law, a court order or a lawful government request, or where it is reasonably necessary to investigate fraud, misuse of our services, or a threat to someone’s safety.

4.d) If the business changes hands

If our business, or part of it, is ever sold or transferred, client and enquirer records may transfer with it. We would tell affected clients before that happened.

Some of the providers above are based outside Australia, so personal information you give us is likely to be disclosed to overseas recipients. The recipients, and where they are located, are:

• Cloudflare, in the United States, for the contact form spam check.
• Google, in the United States, for email delivery and storage.
• Biznet GIO, in Indonesia, which hosts this website.

Before disclosing personal information to an overseas recipient, we take reasonable steps to satisfy ourselves that they will handle it consistently with the Australian Privacy Principles, as APP 8 requires.

Where a client’s system is hosted outside Australia, we tell that client where it sits and agree it with them in writing before anything goes live.

We keep personal information only for as long as we need it, then delete it. Our periods are:

• Enquiries that do not turn into work: we review the mailbox at least once a year and delete enquiries older than 24 months.
• Client records and correspondence: for the life of the engagement, and 7 years after it ends, which is the period Australian tax and business records law requires.
• Invoices and financial records: 7 years, as required by law.
• Web server request logs for this website: no longer than 30 days.
• Application and server logs for client projects we host: at least 3 months.
• Contact form rate limiting data: held in memory only, and discarded within minutes.

If you ask us to delete information about you, we will, unless the law requires us to keep it. If it does, we will tell you what we have to keep and why.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure, as APP 11 requires. In practice:

• The whole site is served over HTTPS, so anything you submit is encrypted in transit.
• Enquiries are not stored in a database on this website. They go straight to our mailbox.
• Access to our mail, hosting and client systems is limited to the people who need it, and protected by multi-factor authentication.
• Client credentials live in a password manager, never in email, documents or code.

No online service can be completely secure. If you believe your information has been compromised, contact us immediately at info@futurisen.com.

Data breaches

If a data breach happens that is likely to result in serious harm, we will assess it promptly and notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. Where the breach affects a system we run for a client, we will tell that client without delay so they can meet their own obligations.

Under the Australian Privacy Principles, you can:

• Ask what personal information we hold about you, and get access to it (APP 12).
• Ask us to correct anything inaccurate, out of date, incomplete or misleading (APP 13).
• Deal with us anonymously or under a pseudonym where that is lawful and practical, for example by asking a general question by email without giving your real name (APP 2).
• Opt out of any marketing communication, at any time.
• Ask us to delete information we no longer need.
• Complain if you think we have mishandled your information.

To do any of these, email info@futurisen.com. We will respond within 30 days. There is no charge for making a request, and we never charge to correct something.

We may need to confirm who you are before giving access. We may also refuse a request where the Privacy Act allows it, for example where giving access would unreasonably affect another person’s privacy. If we refuse, we will tell you why in writing and explain how to complain.

If you think we have breached the Australian Privacy Principles, please tell us first. Email info@futurisen.com with "Privacy" in the subject line and set out what happened.

We will acknowledge your complaint within 5 business days, look into it, and give you a written response within 30 days. If we need longer, we will tell you why and agree a new timeframe with you.

If you are not satisfied with our response, or we have not responded within 30 days, you can take the complaint to the Office of the Australian Information Commissioner:

• Online: oaic.gov.au/privacy/privacy-complaints
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

We may update this policy as our business or the law changes. When we do:

1. The updated policy is posted on this page, with a new date on it.
2. If a change materially affects how we handle information we already hold, we will email affected clients.

We will not apply a material change to information we already hold without telling you about it first.

Futurisen Software Solution is the entity responsible for the personal information described in this policy.

• ABN: 31 479 615 005
• Email: info@futurisen.com
• Phone: +61 403 001 616
• Location: Sydney, NSW, working Australia-wide

We answer privacy questions the same way we answer everything else: quickly, and from a person who knows the answer.