Privacy Policy

Our approach

33rd Frame respects your privacy. This policy explains how we handle personal information when you visit 33frame.com.au or send a studio enquiry.

Australia’s Privacy Act 1988 and Australian Privacy Principles apply to covered entities. Coverage can depend on turnover, activities, contracts, and other circumstances. Where the Privacy Act applies to us, we comply with it. Otherwise, this policy describes the privacy practices we intend to follow.

This policy covers the website and enquiry process. A separate agreement may apply if we later work together on a project.

Information we collect

Information you provide

When you submit an enquiry, we collect:

• your name and email address;
• the service or type of request you select;
• the project brief or other message you provide; and
• a submission reference and timing signals used to prevent duplicate or automated submissions.

Providing enquiry information is voluntary, but without the required name, email, request type, and brief we may be unable to assess or respond to your request. Please do not send sensitive personal information or confidential third-party material through the enquiry form.

Technical and usage information

Our hosting and security providers may process technical request information such as IP address, device or browser details, timestamps, and request metadata to deliver the site, prevent abuse, and maintain security.

We use Vercel Web Analytics to understand aggregated website usage. It is designed to operate without cookies and without storing a visitor’s full IP address. We do not send enquiry names, email addresses, or project briefs to analytics.

Why we use your information

We use personal information only where reasonably necessary to:

• receive, assess, and respond to your enquiry;
• discuss a possible project or working relationship;
• operate, secure, troubleshoot, and improve the website and enquiry service;
• prevent spam, duplicate submissions, fraud, or misuse; and
• meet legal, accounting, dispute-resolution, or recordkeeping obligations.

We do not use or disclose personal information for an unrelated purpose unless you consent or applicable law permits or requires it.

Submitting an enquiry does not subscribe you to promotional email. If we introduce marketing messages later, we will use a separate consent and unsubscribe process where required by the Spam Act 2003 and applicable privacy law.

Who may receive information

We may provide information to team members who need it to assess or respond to an enquiry, and to service providers acting for us, including:

• Vercel, which hosts the website, server function, security controls, and web analytics;
• Resend, which delivers the staff notification and customer confirmation emails; and
• our business email provider and professional advisers where reasonably necessary.

We do not sell your personal information. We may disclose information where required by law, to protect legal rights or safety, or as part of a genuine business reorganisation subject to appropriate protections.

Overseas processing and disclosure

Vercel, Resend, our email provider, and their subprocessors may process or store information outside Australia. The countries involved can depend on account configuration, support, and provider infrastructure. Before production launch, we will confirm the providers, likely countries where practicable, and contractual safeguards reflected in this policy.

Where Australian Privacy Principle 8 applies, we take reasonable steps required by law before disclosing personal information to an overseas recipient, subject to any lawful exception.

Retention and security

We keep personal information only for as long as it is reasonably needed for the purposes in this policy, an active or prospective business relationship, legitimate recordkeeping, or a legal requirement. We then take reasonable steps to delete or de-identify it where required and reasonably practicable.

We use reasonable technical and organisational safeguards, including restricted server-side credentials, validation, access controls, and anti-abuse measures. No online service or email system can be guaranteed completely secure, so please use the enquiry form accordingly.

Data breaches

We maintain a process to contain, assess, and respond to suspected privacy incidents. Where the Notifiable Data Breaches scheme applies and an eligible data breach occurs, we will follow the notification requirements that apply to the circumstances.

Access, correction, and complaints

You may ask whether we hold personal information about you and request access to or correction of that information. We may need to verify your identity and an exception may apply under law.

You can also make a privacy complaint. We will review it and explain our response. To contact us, use our enquiry form and select “Privacy, legal or information request”. A direct privacy contact must be confirmed and published before production launch.

If the Privacy Act applies and you are not satisfied with our response, you may contact theOffice of the Australian Information Commissioner.

Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The date at the top shows when it was last updated. Material changes apply prospectively from the updated version’s publication, unless law requires otherwise.