OX Web Development, ABN 43 381 787 038, is committed to protecting personal information collected through this website. This policy explains what we collect, how it is stored, and how it can be accessed, corrected, or deleted, in line with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
What we collect
Personal information is collected only when you actively provide it. Aggregated technical data about visits is collected automatically for security and analytics.
Information you provide
When you submit a contact or demo-request form on this site — powered by Gravity Forms — we collect:
- Your name
- Your email address
- Optional fields you choose to provide: phone number, Centre name, lead institution, role, funding stream, and message body
Automatically collected information
Standard server logs record IP addresses, browser types, request paths, and timestamps for security and performance monitoring. These logs are not used for marketing or profiling.
If you visit any page on this site, Google Analytics 4 records anonymised, aggregated usage data — see “Third-party services” below for the detail.
Cookies
This site uses cookies for two purposes:
- Site analytics — Google Analytics 4 sets cookies (typically
_gaand_ga_*) to distinguish unique visitors and measure aggregated usage. - Essential operation — WordPress sets short-lived session cookies only if you log into the admin area. Anonymous public visitors do not receive WordPress cookies.
We do not use cookies for advertising, retargeting, cross-site tracking, or behavioural profiling. You can clear or block cookies at any time via your browser settings; doing so will not affect your access to the public-facing content on this site.
Third-party services
This site uses the following third-party services, each with their own privacy practices:
- Gravity Forms — processes contact and demo-request submissions. Data is stored on our own server and forwarded to our email; submissions are not hosted by any third party.
- Google Analytics 4 — site-usage analytics. Collects anonymised pageview and event data. Google Signals, demographics, and advertising features are disabled. Data is retained for 14 months and then deleted. See Google’s privacy policy. You can opt out site-wide using the Google Analytics opt-out browser extension.
- Google Search Console — used by us to monitor how this site appears in Google search results. Search Console does not set cookies on visitors and does not receive personal information from your visits. It only provides aggregated query data to the site owner.
- Postmark — handles transactional email delivery for form submission notifications. Email metadata may be temporarily logged for delivery diagnostics. See Postmark’s privacy policy.
- Cloudflare — content delivery network, DNS, and DDoS protection. Cloudflare may inspect request headers for security purposes. See Cloudflare’s privacy policy.
- Wordfence — security firewall plugin. Logs IP addresses and request signatures for threat detection. Logs are retained only for the period needed to identify and block attacks. See Wordfence’s privacy policy.
How we use information
Personal information submitted via this site is used exclusively to:
- Respond to your enquiry
- Maintain a record of correspondence relevant to that enquiry
- Improve site reliability and security via aggregated analytics and server logs
We do not:
- Sell, rent, or trade your information to any third party
- Add you to marketing lists without your explicit consent
- Use your information for purposes unrelated to your enquiry
- Combine your form data with analytics data to identify you individually
How information is stored
Enquiry data is stored in the website database, hosted on Australian infrastructure, and protected by:
- TLS encryption in transit
- Daily off-site backups with encryption at rest
- Two-factor authentication on all administrator accounts
- Active firewall and intrusion monitoring (Wordfence, Cloudflare WAF)
Data retention
- Form submissions — retained for as long as needed to respond to your enquiry, plus a reasonable period for follow-up correspondence. You can request earlier deletion at any time.
- Analytics data — Google Analytics 4 retains event-level data for 14 months by default. Aggregated reports may persist longer.
- Server logs — retained for up to 90 days for security and diagnostic purposes, then automatically purged.
Your rights — access, correction, deletion
Under the Australian Privacy Act you have the right to:
- Request a copy of any personal information we hold about you
- Request corrections to inaccurate information
- Request deletion of your information
- Withdraw consent for marketing communication at any time
To exercise any of these rights, contact us at [email protected] with the subject “Privacy request”. We respond within 30 days as required by the Privacy Act.
Updates to this policy
This policy may be updated to reflect changes in our practices, the services we use, or our legal obligations. The “Last reviewed” date below the title shows when it was last confirmed accurate. Material changes will be announced via this site.
Contact
Privacy concerns, requests, or complaints:
[email protected]
If you are not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.