Privacy Policy

What we collect

When you contact us, we collect the details you choose to provide, including your name, email address, project type, message and any information you include in later correspondence. Please avoid sending passwords, payment details or sensitive personal information through the enquiry form.

Our website infrastructure and security services may also process technical information such as your IP address, browser and device information, request times, pages requested and security signals. We use this information to operate the website, diagnose problems and prevent abuse.

You can browse without submitting an enquiry. If you choose not to provide contact details, we may be unable to respond to your request.

How we use information

• To respond to enquiries, discuss your project and prepare proposals.
• To communicate with you and provide services you request.
• To maintain website security, prevent spam and troubleshoot delivery or technical issues.
• To maintain relevant business records and meet legal obligations.

This policy covers our own website and enquiry process. If a client project involves handling additional personal information, the relevant project arrangements and privacy requirements will need to be considered separately.

Enquiry delivery and security providers

We use Resend to deliver and manage website enquiries. Your form details are sent to our enquiry inbox, and an email notification is also sent to the founder’s attention inbox so we can follow up. These messages are processed by Resend and the email providers used to receive them.

We use Cloudflare Turnstile to help distinguish genuine enquiries from automated spam. It processes browser, device and network signals, including your IP address, to perform security checks. A successful verification is required to submit the form.

Our hosting, email and security providers process information as needed to provide their services. We may also disclose information to professional advisers or where required or authorised by law.

Read the Resend Privacy Policy and Cloudflare Privacy Policy for more about their practices.

Cookies and future analytics

Google Analytics and Hotjar are not currently enabled on this website. We are considering adding Google Analytics and possibly Hotjar to understand how the website is used and where the experience could be improved.

If introduced, Google Analytics may use cookies or similar identifiers to measure information such as pages viewed, referral sources, interactions, approximate location, and browser or device characteristics. Hotjar may provide heatmaps and session recordings showing activity such as clicks, scrolling and navigation; these are reconstructions of website interactions, not recordings from your camera or microphone.

Before enabling these tools, we will update this policy to describe the actual configuration, providers, data collected, retention and available choices. Where consent is required, optional analytics will not run until that consent is given, and we will provide a way to withdraw it.

If we enable these tools, we will configure and check appropriate masking and suppression before launch to exclude enquiry form contents and sensitive information from analytics events and recordings.

Security and infrastructure services may use essential cookies or similar technologies to keep the website working and protect it from abuse. You can manage cookies through your browser settings, although blocking essential technologies may affect features such as form verification.

For background, see Google’s Privacy Policy and Hotjar’s Privacy Policy. Linking to these policies does not mean those analytics tools are currently active.

Overseas processing

Some service providers operate internationally and may store or process information outside Australia. The locations depend on the provider and service configuration; information is not necessarily kept only in Australia. Contact us if you need details about the providers and processing locations relevant to your enquiry.

Storage, security and retention

We take reasonable steps to protect personal information against misuse, loss and unauthorised access or disclosure, including restricting access to business communications. No website or email service can guarantee absolute security.

We keep enquiry correspondence and related records for as long as reasonably needed to respond, manage the business relationship, resolve issues and satisfy legal or record-keeping obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it, subject to required records and backup cycles.

Access, corrections and privacy concerns

You can ask what personal information we hold about you, request access or correction, or ask us to delete information we no longer need. We may need to verify your identity. Legal obligations or other lawful reasons may limit what we can provide or delete; if so, we will explain.

For requests or privacy complaints, email hello@zepher.co with enough detail for us to investigate. We will acknowledge your request and aim to respond within 30 days, or let you know if more time is needed.

If you are not satisfied with our response, you can seek guidance from the Office of the Australian Information Commissioner, including whether it can consider your complaint.

External websites and policy changes

Our portfolio and social links take you to other websites with their own privacy practices. This policy does not govern those websites.

We may update this policy as our services, providers or practices change. The current version will be published here with an updated date, and material changes will be brought to your attention where required.