Legal
Privacy Policy
Version 1.2, last updated 12 October 2026
Sound Wave Studios Pty Ltd (ABN 53 614 208 973) is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information. It applies when you visit our website, send us an enquiry or work with us as a customer. "We", "us" and "our" mean Sound Wave Studios.
We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.
A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
What is Personal Information and why do we collect it?
Personal Information is information or an opinion that identifies an individual or from which an individual can reasonably be identified. What we collect depends on how you deal with us.
| When | What we collect |
|---|---|
| You send an enquiry | Name, email address, subject, the service you want, your answers to that service's questions, preferred dates and your message |
| You create a customer account | First and last name, email address, password, and phone number if you give one |
| We book work for you | Service, session dates, price and invoice status |
| You pay an invoice | Amount, payment date, status and Stripe's payment reference. Your card details go to Stripe and never reach us. |
| You message us | The messages you send from your dashboard and any files you attach |
| You add a file to a booking | The file, its name and size and when you added it |
| You work for us | Name, email address, phone number and password |
| You visit the website | Your IP address and browser details, which reach the service providers listed below. Our server also logs errors, sign ins and changes made to records. |
This Personal Information is obtained almost entirely from you, through the enquiry form on our website, your customer dashboard or the messages you send us. If you don't give us your name and email address, we can't reply to your enquiry or set up your account.
We collect your Personal Information for the primary purpose of providing our services to you. We use it to:
- reply to your enquiry and agree the scope, dates and price of your project
- create bookings and invoices and confirm payments
- deliver your project
- send the emails you need, such as enquiry confirmations, account invitations, password reset links, invoice reminders and receipts
- stop spam and keep accounts secure
We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use. We do not sell Personal Information, we do not send marketing emails and we do not use analytics or advertising trackers.
When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.
Sensitive Information
Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.
We do not ask for sensitive information. If you choose to include it in an enquiry or message, it will be used by us only:
- for the primary purpose for which it was provided
- for a secondary purpose that is directly related to the primary purpose
- with your consent or where required or authorised by law
Third Parties
Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we receive information from third parties. Specifically, we receive:
- a payment confirmation from Stripe when you pay an invoice
- a pass or fail result from Cloudflare Turnstile when you send the enquiry form
We do not guarantee the content of links to third-party websites or the privacy practices of those third parties.
Disclosure of Personal Information
The service providers below handle information on our behalf so that the website works. We do not share your Personal Information with anyone else unless you consent or the law requires or authorises us to.
| Provider | What they do | Location |
|---|---|---|
| Stripe | Takes invoice payments on its checkout page. Receives the invoice amount and whatever you enter there, including your card details. | United States |
| Cloudflare Turnstile | Checks the enquiry form for spam. Receives your IP address and browser details. | United States |
| Cloudflare R2 | Stores the files added to bookings and messages and the images and audio shown on the website. | Cloudflare data centres, may be outside Australia |
| Google Fonts | Supplies the fonts. Receives your IP address and browser details. | United States |
| jsDelivr | Supplies a page script. Receives your IP address and browser details. | Servers worldwide |
| Amazon Web Services | Hosts the website, its database and outgoing email. | Sydney, Australia |
Disclosure of Personal Information overseas
Stripe, Cloudflare and Google may process your information in the United States. jsDelivr delivers files from whichever of its servers is closest to you. Files added to bookings and messages are stored with Cloudflare R2 in data centres that may be outside Australia. All other Personal Information, including your account, bookings, invoices and messages, is stored on our server in Sydney, Australia.
Cookies and browser storage
We only set what the website needs to work. We do not use analytics or advertising cookies, so we do not ask for cookie consent.
| Name | Purpose | Expires |
|---|---|---|
| swstudios_session | Keeps you signed in. You're signed out after 30 minutes of inactivity. | When you close your browser |
| csrfToken | Stops other websites sending forms as you. | When you close your browser |
| soundWaveNavbarUnderline | Remembers which menu link was highlighted. Kept in session storage, not a cookie. | When you close the tab |
| soundwave.dashboard.sidebarWidth and soundwave.dashboard.sidebarCollapsed | Remember how you left the dashboard sidebar. Kept in local storage, not a cookie. | When you clear your browser data |
Stripe sets its own cookies on its checkout page. Stripe's privacy policy explains them.
Security of Personal Information
Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure. In particular:
- the website only runs over HTTPS
- passwords are stored as one-way hashes, so nobody at the studio can see yours
- password reset links expire after 30 minutes and account invitations expire after 48 hours
- customers can only see their own bookings, invoices and messages
- card details never reach our server
If a data breach is likely to result in serious harm to you, we will notify you and the OAIC.
How long we keep your Personal Information
When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify it. However:
- invoices and payment records are kept for 5 years because tax law requires it
- enquiries, customer accounts and messages are kept until you ask us to delete them. If they are linked to an invoice we still have to keep, we delete everything except what that record needs
- files added to bookings and messages are kept until you ask us to delete them. Removing a file from a booking takes it off every dashboard but the stored copy stays until we delete it. Files sent in a message can't be removed from the dashboard
- logs of errors, sign ins and changes made to records are kept for 90 days and then deleted
Access to your Personal Information
Your bookings, invoices, payments and messages are always available in your customer dashboard.
You may access any other Personal Information we hold about you and update or correct it, subject to certain exceptions. To do so, email us at contact@u26s2237.iedev.org.
Sound Wave Studios Pty Ltd will not charge any fee for your access request or for providing a copy of your Personal Information. We will respond within 30 days.
In order to protect your Personal Information, we may require you to confirm your identity before releasing the requested information.
Maintaining the quality of your Personal Information
It is important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up to date. If you find that the information we have is not up to date or is inaccurate, please let us know as soon as practicable so we can update our records and continue to provide quality services to you.
Policy updates
This policy may change from time to time and the current version is always available on our website. When we change it, we update the date at the top. If a change affects information you've already given us, we will email you before it applies.
Privacy Policy complaints and enquiries
If you have any queries or complaints about our Privacy Policy or how we have handled your Personal Information, please contact our Privacy Officer with enough detail for us to look into it. We will give you our answer within 30 days.
Privacy Officer
Sound Wave Studios Pty Ltd
contact@u26s2237.iedev.org
If you're unhappy with our answer or we don't reply in time, you can complain to the Office of the Australian Information Commissioner (OAIC):
- online at oaic.gov.au
- by phone on 1300 363 992
- by mail to GPO Box 5288, Sydney NSW 2001