1. What we collect

This site has no forms. There is nothing on it that submits data to us. The only ways to make contact are the email and telephone links, which open your own mail client or dialler.

So the personal information we hold is limited to:

What you send us. If you email or call, we hold whatever you choose to tell us: your name, contact details, and what you write about your business.
Server logs. This site is hosted on Cloudflare Pages. Cloudflare records standard request information such as IP address, browser type and the pages requested, as part of delivering and protecting the site. We do not use those logs to identify individuals.

We do not currently run analytics on this site. There is no Google Analytics, no Tag Manager, no advertising pixel and no third-party tracking script. If that changes, this policy will be updated before it is switched on, and any analytics will be loaded only after you consent to it.

2. Cookies

This site sets no cookies of its own. Cloudflare may set a small number of strictly necessary cookies for security and performance, which cannot be declined without breaking the site. There are no analytics, advertising or profiling cookies here.

You can block or delete cookies through your browser settings at any time. Doing so will not affect your ability to read this site.

3. How we use your information

To respond to your enquiry and answer your questions
To prepare and deliver work you have engaged us for
To send you documents relating to that work, such as quotes and invoices
To meet our legal and tax obligations

We do not send marketing email to people who have not asked for it, and we do not sell, rent or trade your information to anybody. If we ever start sending a newsletter it will be opt-in and every message will carry an unsubscribe link, as required by the Spam Act 2003.

4. Client data during a project

This section matters more than the rest, because building software means handling your business data.

The software we build runs on your own hosting account, not ours. Your operational data lives with you.
During a build we may be given access to sample or real data in order to migrate and test it. We use it only for that purpose, and we delete our working copies at handover.
Access is limited to the people actually working on your project.
If your project involves sensitive information as defined by the Privacy Act, we agree the handling arrangements with you in writing before any of it is transferred.

5. Who else receives your information

We use a small number of third parties, and only where necessary:

Cloudflare, for hosting and security of this website.
Google, because our business email runs on Google Workspace. Email you send us is stored there.
Our accounting software, for invoicing clients.

Some of these providers store data outside Australia. By contacting us you acknowledge that your information may be stored or processed overseas, and we take reasonable steps to use providers with appropriate protections in place.

We will otherwise only disclose your information where you have asked us to, or where we are required to by law.

6. How we store and protect it

This site is served over HTTPS on every page
Business systems are protected by strong passwords and multi-factor authentication
We never store credit card or payment details. Payments are handled by your bank or a payment provider directly
We keep records for as long as we need them for the work and for the period required by Australian tax and business record-keeping law, then delete them

7. Your rights

Under the Australian Privacy Principles, you may:

Ask what personal information we hold about you
Ask us to correct anything that is wrong or out of date
Ask us to delete your personal information, where we are not required to keep it
Opt out of any communications that are not about work in progress
Complain if you think we have mishandled your information

Email us and we will respond within 30 days. If you are not satisfied with how we handle a complaint, you can take it to the Office of the Australian Information Commissioner.

8. Contact us

Custom CRMs, a venture of Webstallion
159 Epping Road, Macquarie Park NSW 2113
Phone: +61 422 544 449
Email: contact@webstallion.com.au
ABN 42 852 391 887

9. Changes to this policy

We may update this policy from time to time. The current version is always at customcrms.com.au/privacy/. Last updated 16 August 2026.