Privacy Policy
We respect your privacy. This policy explains, in plain language, what information we collect, why we collect it and how we keep it safe.
Last updated: 31 October 2026
01Who we are
Nexa Web Development ("Nexa", "we", "us") is a web development studio based in Sydney, Australia. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.
02What we collect
We only collect information you choose to give us, plus basic technical data needed to run the site:
- Contact and audit forms: your name, email, phone, business name, website and message.
- Client onboarding: business details, branding preferences, service information and files you upload, such as logos and photos of your work.
- Technical data: IP address, browser type and pages visited, used for security, spam prevention and anonymous analytics.
03How we use it
- To reply to your enquiry and deliver the services you request.
- To plan, design and build your website.
- To send you project updates and occasional relevant emails, which you can opt out of at any time.
- To keep our website secure and block spam or abuse.
- To understand how our website is used so we can improve it.
04Where it is stored
We use trusted providers to run our business. Your information may be stored or processed by:
- Vercel (website hosting) and Neon (secure database).
- Google Drive: files you upload during onboarding are saved to Nexa's private Google Drive.
- Resend (email delivery), Cloudflare Turnstile (spam protection) and Google Analytics (website statistics).
Some of these providers may store data outside Australia. We only use providers with strong security and privacy standards.
05Google user data
Our website connects to Google Drive only to store files that clients upload to us. We do not access, read or use any other files in anyone's Google account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
06Sharing your information
We do not sell, rent or trade your personal information. We only share it with the providers listed above to run our services, or when required by law.
07Security and retention
We protect your information with encrypted connections, access controls and private, single-use onboarding links. We keep your information only as long as needed to provide our services or meet legal obligations, then delete it.
08Your rights
You can ask to access, correct or delete your personal information at any time. Email contact@nexawebdev.comand we'll respond within 30 days. If you are unhappy with our response, you can contact the Office of the Australian Information Commissioner (OAIC).
09Changes and contact
We may update this policy from time to time. The latest version will always be on this page. Questions? Email contact@nexawebdev.com.