1. What we collect

One form, on the contact page. Everything it asks for is optional except a name, an email address and one sentence about the problem. Nothing else on this site submits data to us: the email and telephone links open your own mail client or dialler.

The personal information we hold is limited to:

What you put in the enquiry form. Your name and email address, and, if you choose to give them, your phone number, your business name, what software you pay for now, how many people would use a system, and what you write about the problem.
What you send us directly. If you email or call instead, we hold whatever you choose to tell us.
Server logs. This site is hosted on Cloudflare Pages. Cloudflare records standard request information such as IP address, browser type and the pages requested, as part of delivering and protecting the site. We do not use those logs to identify individuals.

Where a form submission goes. It is received by a small function running on Cloudflare, which passes it to a Google Apps Script web app in our own Google Workspace account. That sends us the enquiry by email. It is not posted to any advertising platform, any customer data platform, or any third party we have not named on this page.

Spam protection. The form carries a hidden field that only automated submissions fill in, and it may use Cloudflare Turnstile, which checks that a submission comes from a real browser. Turnstile is a privacy-preserving alternative to a CAPTCHA: it does not profile you and it does not track you across sites. When it is active it may set a short-lived Cloudflare cookie for that check.

We do not currently run analytics on this site. There is no Google Analytics, no Tag Manager, no advertising pixel and no third-party tracking script. If that changes, this policy will be updated before it is switched on, and any analytics will be loaded only after you consent to it.

2. Cookies

This site sets no cookies of its own. Cloudflare may set a small number of strictly necessary cookies for security and performance, including for the spam check on the enquiry form, which cannot be declined without breaking it. There are no analytics, advertising or profiling cookies here.

You can block or delete cookies through your browser settings at any time. Doing so will not affect your ability to read this site.

3. How we use your information

To respond to your enquiry and answer your questions
To prepare and deliver work you have engaged us for
To send you documents relating to that work, such as quotes and invoices
To meet our legal and tax obligations

We do not send marketing email to people who have not asked for it, and we do not sell, rent or trade your information to anybody. If we ever start sending a newsletter it will be opt-in and every message will carry an unsubscribe link, as required by the Spam Act 2003.

4. Client data during a project

This section matters more than the rest, because building software means handling your business data.

The software we build runs on your own hosting account, not ours. Your operational data lives with you.
During a build we may be given access to sample or real data in order to migrate and test it. We use it only for that purpose, and we delete our working copies at handover.
Access is limited to the people actually working on your project.
If your project involves sensitive information as defined by the Privacy Act, we agree the handling arrangements with you in writing before any of it is transferred.

5. Who else receives your information

We use a small number of third parties, and only where necessary:

Cloudflare, for hosting and security of this website.
Google, because our business email runs on Google Workspace. Email you send us, and every enquiry submitted through the form, is stored there.
Our accounting software, for invoicing clients.

Some of these providers store data outside Australia. By contacting us you acknowledge that your information may be stored or processed overseas, and we take reasonable steps to use providers with appropriate protections in place.

We will otherwise only disclose your information where you have asked us to, or where we are required to by law.

6. How we store and protect it

This site is served over HTTPS on every page
Business systems are protected by strong passwords and multi-factor authentication
We never store credit card or payment details. Payments are handled by your bank or a payment provider directly
We keep records for as long as we need them for the work and for the period required by Australian tax and business record-keeping law, then delete them

7. Your rights

Under the Australian Privacy Principles, you may:

Ask what personal information we hold about you
Ask us to correct anything that is wrong or out of date
Ask us to delete your personal information, where we are not required to keep it
Opt out of any communications that are not about work in progress
Complain if you think we have mishandled your information

Email us and we will respond within 30 days. If you are not satisfied with how we handle a complaint, you can take it to the Office of the Australian Information Commissioner.

8. Contact us

Custom CRMs, a venture of Webstallion
159 Epping Road, Macquarie Park NSW 2113
Phone: +61 422 544 449
Email: [email protected]
ABN 42 852 391 887

9. Changes to this policy

We may update this policy from time to time. The current version is always at customcrms.com.au/privacy/. Last updated 18 August 2026.