Privacy Policy

1. About Us

Vynlox Group Pty Ltd (ABN 34 688 779 946) ("Vynlox", "we", "us", or "our") is an Australian digital agency providing website design, SEO, and AI search optimisation services. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, hold, use, and disclose your personal information when you visit vynlox.com or engage our services.

2. Information We Collect

We may collect the following personal information when you submit our contact form or otherwise engage with us:

• Contact details — name, email address, phone number, company name or website
• Enquiry details — the service you are interested in, your message or goals
• Consent records — whether you opted in to marketing communications, the wording you saw, and the date and time of your consent
• Technical data — IP address, user agent (browser and device type), referring URL, and the page you submitted from. We use this to detect spam and abuse
• Communications — any emails or messages you exchange with us

We do not collect payment card details directly. All payments are processed through secure third-party providers.

3. How We Collect Information

We collect personal information when you:

• Submit an enquiry via our contact form
• Email or call us directly
• Engage us to provide services
• Visit our website (technical data and analytics, only if you accept optional cookies)

4. How We Store Your Information

Contact form submissions are stored in our managed Supabase (PostgreSQL) database, hosted on infrastructure provided by Supabase Inc. and AWS. Access to the database is restricted to Vynlox staff using strong authentication. The database is protected by Row Level Security so the public anonymous key cannot read or write any record. All writes are performed server-side from our Next.js application using a private service-role key that is never exposed to the browser.

Notification emails about new enquiries are also delivered through Resend, our email service provider, to hello@vynlox.com.

5. Why We Collect and Use Your Information

We use your personal information to:

• Respond to your enquiry and provide a recommendation, quote, or strategy call
• Deliver agreed services and communicate about your project
• Send administrative communications (invoices, project updates, scheduling)
• Improve our website, services, and how we present them
• If you opt in, send occasional marketing emails such as growth tips, case studies, and offers
• Detect and prevent spam, abuse, and fraud
• Comply with legal and regulatory obligations

We do not send marketing emails unless you have explicitly opted in via the form's marketing consent checkbox.

6. Marketing Consent and Unsubscribing

Marketing emails are sent only to people who have ticked the optional marketing consent checkbox on our contact form. You can withdraw consent at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by emailing us at hello@vynlox.com. We will action your request promptly and stop sending marketing communications.

Withdrawing marketing consent does not affect emails directly related to a service engagement (for example, project updates, invoices, or scheduling).

7. Cookies and Analytics

We use cookies and similar technologies to operate this website and, with your consent, to understand how visitors interact with it.

Strictly necessary cookies are required for the site to function and do not require consent. Today the site does not set any persistent strictly-necessary cookies of its own.

Analytics cookies (Ahrefs Web Analytics) only load if you click "Accept all" on our cookie banner. They help us understand traffic sources and which pages perform well. The data is aggregated and does not identify you personally.

You can change your cookie choice at any time by clearing the entry vynlox_cookie_consentfrom your browser's local storage, then reloading the page. The banner will reappear and you can pick again.

8. Disclosure of Your Information

We do not sell or trade your personal information. We may share it with:

• Service providers — Supabase (database hosting), Vercel (web hosting), Resend (email delivery), Calendly (call scheduling), and Ahrefs (analytics, only with consent), solely to operate our business
• Professional advisers — accountants or lawyers where required
• Government agencies — where required by law

Some of these providers are based overseas (the United States and the European Union). We take reasonable steps to ensure they handle your information in line with the APPs and our agreements with them.

9. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Specifically:

• Our website is served over HTTPS and contact-form data is transmitted securely
• The leads database is protected by Row Level Security; the public website cannot read or write it
• Writes to the database are performed server-side using a private service-role key that is never exposed in the browser
• We rate-limit form submissions and apply spam detection to limit abuse
• We retain only the personal data we need and review retention periodically

No system is 100% secure. If you believe your information has been compromised, contact us at hello@vynlox.com.

10. How Long We Keep Your Information

We keep your personal information only as long as we need it. Lead enquiries that don't become clients are kept for up to 24 months for follow-up and reporting, then deleted. Records related to clients are retained for 7 years to meet Australian tax and accounting obligations. You can request earlier deletion at any time, subject to those obligations.

11. Access, Correction, and Deletion

You have the right to request access to the personal information we hold about you, to correct any inaccuracies, and to request deletion of your data. To make a request, email us at hello@vynlox.comwith the subject "Privacy request". We will respond within a reasonable time and at most within 30 days.

12. Complaints

If you believe we have breached the APPs, please contact us at hello@vynlox.com. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our website after changes constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions, contact:
Vynlox Group Pty Ltd
ABN: 34 688 779 946
Sydney, NSW, Australia
hello@vynlox.com