Your data,
handled with care.

1 · Who we are

TenTwelve Website Studio designs, builds, and maintains websites. In Australia we operate as a sole trader (Nely Aurea Psico, ABN 52 207 383 796); internationally, services may be provided through TenTwelve Limited, registered in Mozambique. In this policy, "we", "us", and "our" mean whichever entity is providing your service. We are the party responsible for the personal information described here.

2 · What we collect

When you use our contact form, we collect what you give us:

Your name: first name, and last name if you provide it.

Email address: so we can reply.

Business name: if you provide it.

The plan you're interested in and anything you tell us about your project.

When you visit the site, our hosting provider automatically logs limited technical data, such as your IP address, browser type, and the pages you view, to keep the site secure and working. If you become a client, we also collect the information needed to deliver and bill your project, such as your contact details, billing details, and the content you give us for your site.

3 · Why we use it

Only for clear, expected reasons:

To reply to your enquiry and prepare a quote.

To deliver, support, and bill your project if you become a client.

To keep the site secure and operating.

To meet our legal, tax, and record-keeping obligations. We don't use your information for unrelated purposes, and we never sell it.

4 · Who we share it with

We don't sell or trade your personal information. We share it only with the service providers that help us run the studio: our website host and form handler (Netlify), our analytics provider (Google Analytics, only where you've consented), our email provider, and, for clients, our payment and accounting tools. These providers process data on our behalf under their own security and privacy obligations. Some are based overseas, so your information may be stored or handled outside Australia and Mozambique. We may also disclose information where the law requires it.

5 · Cookies & consent

We keep this site light. We don't sell behavioural data, and we don't run advertising pixels. Cookies and similar technologies fall into three kinds:

Essential: needed for the site to function and stay secure. The site follows your device's light or dark setting automatically and doesn't store a preference. Always on.

Analytics: we use Google Analytics to understand how the site is used so we can improve it. These cookies load only if you accept them. They stay off until you do.

Marketing: advertising and re‑targeting. We don't use these.

When you first visit, we ask your consent before any analytics cookies load. Essential cookies work regardless. EU and UK visitors must opt in before analytics runs. You can change or withdraw your choice at any time using the “Cookie preferences” link in the footer, or by clearing cookies in your browser. Your hosting logs (see section 2) are kept for security and troubleshooting.

6 · How we protect it

The site runs over encrypted connections (TLS) on hardened hosting, and we apply sensible access controls and regular maintenance. No system is perfectly secure, but we take reasonable steps to protect your information and to destroy or de-identify it when it's no longer needed.

7 · How long we keep it

Enquiries that don't become projects are kept only as long as needed to follow up, then removed. Client records are kept for the life of the engagement and afterwards for as long as the law requires us to keep financial and tax records (generally at least five years in Australia), then securely deleted.

8 · Your rights

You can ask us what personal information we hold about you, ask us to correct it if it's wrong, or ask us to delete it where we're not required to keep it. Just email us. We'll respond within a reasonable time and won't charge you for a straightforward request. If you're in a region with additional data rights (such as the EU or UK), those rights apply too, and you can object to or restrict certain uses.

9 · If you’re a guest RSVPing to an event

Some sites we build are event sites where you, as a guest, RSVP. The event host is responsible for the guest list; we build and run the site on their behalf, and your reply goes straight to the host. We use guest details for nothing except running the event site: no marketing, no profiling, no selling, ever. Where our hosting provider stores form submissions, they’re deleted within 30 days of the event site archiving. If you want your details corrected or removed sooner, email us and we’ll act on it with the host.

10 · Data breaches

If a breach occurs that's likely to cause you serious harm, we'll act on our response plan and notify you and the relevant authority (in Australia, the Office of the Australian Information Commissioner) as required by law.

11 · Changes

We may update this policy from time to time. The current version always lives on this page, with the date it was last updated shown above.

12 · Contact

Questions, requests, or a privacy concern? Email hello@tentwelvestudio.com and a real person will reply. If you're in Australia and aren't satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

This policy explains how we handle personal information and forms part of our terms of use.