Privacy Policy.

About this policy

SkaledLabs ("we", "us", "SkaledLabs") is committed to handling personal information responsibly and in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect, why we collect it, how we store it, who we share it with, and what your rights are. It applies to all personal information collected through skaledlabs.com and through the course of our client engagements.

If you have questions about how we handle your information, email us at hello@skaledlabs.com.

What we collect and why

We collect personal information that you provide directly, and only what we actually need. The table below covers the main categories.

We don't collect sensitive information (as defined by the Privacy Act) through our website. If sensitive information becomes relevant during a specific engagement, we'll handle it under a separate agreement.

How we collect it

Direct collection. Most personal information we hold was given to us directly - through the contact form on skaledlabs.com, via email, during a discovery call, or through onboarding documents for an active engagement.

Website analytics. We use Plausible Analytics to understand how visitors use our site. Plausible is privacy-friendly by design: it collects no personal data, sets no cookies, and is fully compliant with GDPR and Australian privacy law. It tracks aggregate behaviour (page views, referrers, browser types) without any identifiers tied to you as an individual.

We do not use Google Analytics, Facebook Pixel, or any cookie-based tracking on this site.

How we store it

Personal information is stored in a combination of our email provider, project management tools, and encrypted document storage. All services we use are reputable commercial providers with their own security programs and data processing agreements.

We apply reasonable technical and organisational measures to protect personal information from misuse, loss, and unauthorised access. These include strong access controls, encrypted communications, and limiting access to information to those who need it.

We are based in Australia, but some of our tools and services store data on servers outside Australia (typically in the United States or European Union). Where this occurs, the provider is subject to equivalent privacy protections under their local law or by contract.

Who we share it with

We do not sell personal information. Full stop.

We may share personal information with:

• Service providers. Tools we use to operate our business (email, project management, invoicing). These providers process data on our behalf and are bound by data processing terms.
• Team members and contractors. Staff or contractors who work on your project and need access to do so. They are bound by confidentiality obligations.
• Legal or regulatory requirements. Where required by law, a court order, or a regulator with appropriate authority.

We will not share client information with other clients, with third-party marketers, or with anyone who doesn't have a direct reason to see it.

Data retention

Active enquiries and clients. We retain personal information for as long as the engagement is active, and for a reasonable period afterwards (typically seven years) to comply with accounting, tax, and legal obligations.

Unsuccessful enquiries. If your enquiry doesn't result in an engagement, we retain your contact information for up to 12 months in case you get back in touch, then delete it unless you've asked us to keep it.

Deletion on request. You can ask us to delete your personal information at any time. We'll comply promptly, subject to any legal obligation that requires us to retain specific records (for example, tax invoices). See section 07 for how to make this request.

Your rights

Under the Australian Privacy Act and the APPs, you have the right to:

• Access. Request a copy of the personal information we hold about you.
• Correction. Ask us to correct information that is inaccurate, out of date, or misleading.
• Deletion. Ask us to delete your personal information, subject to our legal retention obligations.
• Complaint. Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we've handled your information in a way that doesn't comply with the APPs.

To exercise any of these rights, email hello@skaledlabs.com with the subject line "Privacy request". We'll respond within 30 days. If we can't action a request for legal reasons, we'll explain why.

If you wish to escalate a complaint to the OAIC, their contact details are at oaic.gov.au.

Cookies

This site does not use tracking cookies. Plausible Analytics (our site measurement tool) operates without cookies and does not fingerprint individual visitors. You don't need to accept or decline a cookie banner on this site because there's nothing to consent to.

Some of our embedded third-party content (such as a YouTube embed, if one appears on a page) may set cookies when you interact with it directly. In those cases the relevant third party's privacy policy applies.

Changes to this policy

We may update this policy from time to time. The current version is always at skaledlabs.com/privacy.html. We'll note the date it was last updated at the top of the page. If we make a material change that affects how we handle information we already hold, we'll notify affected clients by email.

Contact

If you have questions about this policy or how we handle your personal information, get in touch.

If you'd prefer to escalate a privacy concern to the regulator, contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.