Privacy Policy

We collect personal information that is reasonably necessary for our business, including:

• Identity & contact data — name, business name, email address, phone number and postal address.
• Project & client data — information you provide so we can deliver our services, including brief details, content, files, logins you choose to share, and feedback.
• Billing data — subscription and invoice details. Card payments are processed by our payment provider (Stripe); we do not store full card numbers.
• Usage & technical data — IP address, device and browser information, pages visited and interactions, collected via cookies and analytics.
• Communications — messages you send us via our contact form, email or booking tools.

We collect information directly from you (for example, when you complete our contact form, request a quote, book a call, or subscribe to a plan); automatically through cookies and analytics when you use our website; and occasionally from third parties such as our service providers where you have authorised it or it is otherwise permitted by law.

We use personal information to:

• provide, manage and improve our design, development and related services;
• prepare quotes and proposals, and manage projects and engagements;
• process subscriptions, invoices and payments;
• communicate with you, respond to enquiries and provide support;
• operate, secure and improve our website;
• meet our legal, tax and regulatory obligations; and
• send you updates or marketing where you have consented, consistent with the Spam Act 2003 (Cth). You can opt out at any time.

We may disclose personal information to:

• Service providers who help us operate, including payment processing (Stripe), email delivery (Resend), website hosting and infrastructure (e.g. Vercel), scheduling (Cal.com), and, where relevant to a project, AI service providers;
• Professional advisers such as accountants and lawyers;
• Authorities where required or authorised by law; and
• A purchaser in connection with a sale or restructure of our business.

We do not sell your personal information.

Some of our service providers store or process data outside Australia (for example, in the United States, where some cloud hosting, payment and AI services operate). Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs or a substantially similar regime.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including encryption in transit, access controls and limiting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law. Business and financial records are generally retained for at least seven (7) years to meet tax and legal obligations, after which information is securely deleted or de-identified.

Our website uses cookies and similar technologies to keep the site working, remember preferences, and understand how the site is used. You can control or disable cookies through your browser settings, though some features may not work as intended.

Subject to the Privacy Act, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date or incomplete. You can also opt out of marketing communications at any time. To make a request, contact us using the details below. We may need to verify your identity before acting on a request.

Our services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can remove it.

We may update this policy from time to time. The current version will always be available on this page with a revised “last updated” date. Your continued use of our services or website after changes take effect constitutes acceptance of the updated policy.

If you have a privacy concern or complaint, please contact us first at hello@nexdesign.agency. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

For any questions about this Privacy Policy or your personal information, please contact us: