Last updated: 12 May 2026
This is the privacy policy for Next Byte Studio (ABN 72 804 138 588), a web design studio operating from Wollongong, NSW, Australia. We follow the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
1. What we collect
We only collect what we need to do business with you.
When you fill in our contact form
- Your name
- Your email address
- The free-text message you write to us
When you click “Send it through,” your browser posts the data to a serverless function on Netlify (our hosting provider). That function sends the email to us using Resend, an email API based in the United States. Resend processes the message only to deliver it to our inbox; it is not used for advertising or resold. See Resend’s privacy policy for how they handle service data. We also send you a short automated confirmation email (same provider) so you know we received your message.
When you book a meeting through our Cal.com widget
- Your name and email (provided to Cal.com)
- Your selected time slot
- Any answers to the questions Cal.com asks (e.g. business name)
Cal.com is a third-party scheduling service operated by Cal.com, Inc. in the United States. When you use the embedded Cal.com widget on our contact page, your data is processed by Cal.com under their own privacy policy: cal.com/privacy. If you’d prefer not to use Cal.com, use the message form further down the same page instead.
When you visit our website
We do not use Google Analytics, Meta Pixel, or any third-party tracking SDK. We don’t profile you or build an advertising audience.
If you accept the cookie banner, a single first-party cookie
(nbs-cookie-consent) is set so we don’t ask you
again. Declining sets the same cookie with a declined
value. That’s the entire cookie list.
2. Why we collect it
- To reply to your enquiry and book your meeting.
- To send you the technical sign-off report after your build.
- To invoice you and keep tax records (we’re required by Australian law to retain these for at least 5 years).
We never sell your data. We share it only with:
- Resend — only when you submit the contact form (email delivery).
- Cal.com — only when you choose to book through the embedded widget.
- Our hosting and email providers — to deliver this website and process your messages. Data is encrypted in transit and at rest.
- The Australian Tax Office — if legally required.
3. How long we keep it
| Data | Kept for |
|---|---|
| Contact form submissions | 24 months from your last contact, then deleted |
| Project files for active builds | The duration of the project, plus 12 months |
| Tax records (invoices, receipts) | 5 years (ATO requirement) |
| Cal.com booking records | Held by Cal.com per their policy; we delete our copy after 24 months |
nbs-cookie-consent cookie | 12 months, or until you clear your browser data |
4. Cookies
The full cookie list:
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
nbs-cookie-consent |
Next Byte Studio | Records your accept/decline choice | 12 months |
Cal.com may set additional cookies if you interact with the booking widget. See their cookie policy: cal.com/cookie-policy.
5. Your rights
Under Australian law you can:
- Access the personal information we hold about you.
- Correct anything that’s wrong.
- Delete your data, subject to our legal record-keeping obligations.
- Withdraw consent at any time. We don’t send marketing email unless you explicitly subscribe.
- Complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you think we’ve mishandled your data.
To exercise any of these rights, email [email protected]. We respond within 5 business days.
6. Data security
- All traffic to and from this website is encrypted via HTTPS.
- Form submissions are stored encrypted at rest.
- Only the studio principal has direct access to enquiry data.
- We use long, unique passwords and 2FA on every system that touches your data.
7. Changes to this policy
We’ll update this page if we change how we handle data. The “Last updated” date at the top will reflect any changes. For material changes, we’ll email anyone whose data we still hold.