Privacy Policy

We collect information you provide directly through our contact and audit forms — typically your name, email address, company, role, and details about the process you want automated. If you purchase an automation pack, Stripe (our payment processor) provides us with your name, email address, and transaction details; full card numbers never reach us.

Our forms use Cloudflare Turnstile to block automated spam, which processes limited technical signals from your browser.

We record page views on this site ourselves — the page address, the referring site, and any campaign parameters in the link you arrived on (for example, a Google Ads click identifier). This is first-party only: there is no Google Analytics, no advertising pixel and no third-party tracker, and the data goes to our own server rather than to an analytics provider.

So that we can tell which campaign an enquiry came from, your browser keeps those campaign parameters locally — in your browser’s local storage, not a cookie — for up to 90 days, plus a short-lived identifier that lasts only for the current visit. If you send us a form, these are submitted with it. You can clear both at any time using your browser’s site-data controls.

We do not collect sensitive personal information unless explicitly required for a specific engagement and with your informed consent.

To deliver and improve our AI consulting and automation services.

To communicate with you about your engagements, account, and service updates.

To send transactional emails only — enquiry responses and purchase deliveries. We do not send marketing email.

To comply with legal obligations and protect our legitimate business interests.

We do not sell your personal information to third parties.

We use a small set of service providers to run this site, and some of them store data outside Australia: Cloudflare (form handling and our enquiry database, processed on its global network including the United States), Amazon Web Services (website hosting and transactional email, US regions), and Stripe (payment processing, United States). We take reasonable steps, as required by Australian Privacy Principle 8, to ensure these providers handle personal information consistently with the Australian Privacy Principles.

We may disclose information where required by law, regulation, or legal process.

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments.

While no system is completely secure, we take reasonable steps to safeguard your data against unauthorised access, alteration, or destruction.

Enquiry and audit-form records are retained for up to 24 months from your last contact with us, then deleted.

Purchase and transaction records are retained for 7 years as required by Australian tax law.

For consulting engagements, client data handling and retention are agreed in the engagement terms — including Australian data-residency options where required.

Under the Australian Privacy Act 1988, you have the right to access, correct, and request deletion of your personal information.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

To exercise any of these rights, contact us at the details provided below. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

We set no advertising cookies and use no third-party analytics service. The only cookies on this site are essential ones and those set by the Cloudflare Turnstile anti-spam service. We do count our own page views without cookies, and store campaign parameters in your browser’s local storage, as described under “Information We Collect” above. See our Cookie Policy for detail.

You can manage cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

We may update this privacy policy from time to time. Material changes will be communicated via our website or email.

The effective date at the top of this page indicates when the policy was last revised.

If you have questions about this privacy policy or how we handle your data, please reach out to us at privacy@orryx.dev or through our Book the Assessment call page.