Privacy policy.

Who we are

This site is run by Kyritech Information Technology Pty Ltd (ACN 701 119 351, ABN 52 701 119 351), trading as Kyritech, a software and technology studio based in Melbourne, Victoria, Australia. We are the entity responsible for the information described below, and you can reach us any time at info@kyritech.com.

This policy explains what we actually do with your information. It is written against how the site really works, not as a generic template.

What we collect, and when

When you contact us or ask for an estimate. The forms on this site (contact, estimate, and the forms on our landing pages) send us your name and email address, and — where you choose to fill them in — your company, phone number, budget range, timeline and a description of your project. The estimate tool also sends the options you selected, so we can price the work properly. Nothing is collected from a form you do not submit.

When you buy a website package. Payment is taken on a payment page hosted by Stripe, not on our site. Stripe collects and processes your card details; we never see or store your full card number. What comes back to us from Stripe is the order: the package bought, the amount paid, and the details entered at checkout — your name and email address and, where the checkout asks for them, your phone number, billing address and business name. That order notice is emailed to our business inbox.

When you fill in the project brief after paying. The brief asks for your business details, what your business does, the pages and design you want, branding and domain status, example sites you like, and anything else you choose to tell us. Please do not send us passwords or logins through the brief — we will ask for those separately when they are actually needed.

When you just browse. Our host keeps standard server access logs (IP address, browser type, pages requested, timestamps). On the live site we also run Google Analytics 4, which sets cookies and records usage such as the pages you view, your approximate location, your device and how you arrived. To block spam, our form endpoint keeps short-lived counters keyed to a one-way hash of your IP address; they hold no readable personal information and expire by themselves.

When you message us on WhatsApp. Our WhatsApp links open a chat with our business number. Your phone number and the messages you send are then visible to us, and the chat itself is carried by WhatsApp under its own terms and privacy policy.

How we use it

Enquiries, estimates and briefs are used to answer you, prepare a quote and deliver the work you have asked for. Order information is used to fulfil the purchase, send receipts, keep our accounting records and meet our tax obligations. Analytics is used in aggregate to improve the site. We do not sell or rent your information, we do not share it with third parties for their own marketing, and we will not add you to a mailing list you did not ask for.

Who we share it with

We use a small number of service providers, and they only receive what they need to do their part:

• Stripe — payment processing. Stripe handles the card data and acts as its own controller for payment and fraud purposes. See stripe.com/au/privacy.
• Hostinger — hosting for this website, and our business email. Form submissions arrive in, and stay in, that email account.
• Google — Google Analytics 4 for site statistics on the production site, and conversion measurement shared with Google Ads so we can tell which advertising actually produces enquiries. The contact page can also load a Google Map, but only after you tap "Show map".
• Twilio — a short SMS alert to our own team when an order comes in, so a new project is not sitting unseen in an inbox. The alert contains the package, the amount and the buyer's name (or email address, if no name was given).
• Our client portal (portal.kyritech.com.au) — a separate, sign-in-only site for existing clients. It is only used if we set up an account for you, and it holds the details you and we add to it for your project.

We may also disclose information where we are required to by Australian law, or where it is needed to establish or defend a legal claim.

Information sent or accessed overseas

Australian Privacy Principle 8 asks us to be clear about this. Some of our team members and contractors work outside Australia — currently in Ireland and Bulgaria — and several of the providers above store or process data outside Australia, including in the United States and the European Union. That means your information may be accessed from, or held in, those countries. Before sharing information this way we take steps that are reasonable in the circumstances to see that it is handled consistently with the Australian Privacy Principles, including choosing established providers with published privacy and security commitments and limiting access to the people who need it. We cannot promise that an overseas recipient will always be subject to a law as protective as Australia's.

How long we keep it

Enquiries and quotes are kept for as long as the conversation is useful, and deleted on request. Project material is kept for the life of the engagement and for a reasonable period afterwards, so we can support what we built. Records that relate to a sale — orders, invoices, receipts — are kept for seven years, because Australian company and tax record-keeping rules require it; a request to delete those cannot override that obligation. Analytics data is retained by Google under the retention setting on our property.

Security

The site is served over HTTPS, access to our email and provider accounts is limited to the people who need it, and card data never reaches our systems. No system is perfectly secure, so we do not claim it is. If something does go wrong and it is likely to cause you serious harm, we will tell you, and we will notify the Office of the Australian Information Commissioner where the Notifiable Data Breaches scheme applies.

Cookies and analytics

The only cookies this site sets are Google Analytics 4's, and only on the live site. They measure visits and enquiries, and that conversion data is shared with Google Ads so we can measure our own advertising. We do not load any other advertising or social-media tracking scripts. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout, or block cookies in your browser settings; the site works either way. Our fonts are served from our own domain, so no third-party font service sees your visit.

Access, correction and complaints

Under the Australian Privacy Principles you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@kyritech.com and we will respond within 30 days. We do not charge for access requests. If we cannot give you what you have asked for, we will tell you why.

If you are unhappy with how we have handled your information, tell us first at info@kyritech.com so we can try to put it right. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

This site is aimed at businesses. We do not knowingly collect information from children, and we have no reason to.

Changes

If this policy changes, the new version is published on this page with a new date at the top.