1. About this policy
DesignDash is operated by TopHat Media. In this policy, “DesignDash”, “we”, “us” and “our” refer to the business providing the DesignDash website design services.
We aim to handle personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. We may also choose to follow the practices in this policy when an exemption applies.
This policy covers personal information handled through designdash.com.au and in connection with DesignDash enquiries, bookings, payments and client projects.
2. Information we collect
Depending on how you interact with us, we may collect:
- your name, business name, email address and telephone number;
- your current website address and information about the website or digital service you want;
- preferred project dates, project briefs, messages and correspondence;
- booking, package, deposit, invoice and transaction records;
- content and account-access details you choose to provide for a project;
- technical information such as IP address, device, browser, approximate location, request times and security logs; and
- records of privacy requests, complaints and how we responded.
Please do not provide sensitive information, passwords, payment card numbers or confidential third-party information in free-text fields. Where project access is needed, we will arrange an appropriate method separately.
3. How we collect information
We usually collect information directly from you when you complete a booking form, open Stripe Checkout, pay a deposit, contact us, supply project materials or work with us on a website.
The general enquiry form currently displayed on the website is a layout preview. Information typed into that preview is not saved or sent. The booking form is live: when you continue to payment, the booking details are sent through our website server to Stripe to create a secure checkout session.
We may also receive information from Stripe about the status of a payment, from our hosting and security providers, or from a person authorised to act for your business.
4. How we use information
We may use personal information to:
- respond to enquiries and assess project requirements;
- create bookings, process deposits and issue or manage invoices;
- deliver, administer and support website services;
- communicate about project scope, timing, changes and support;
- maintain business, accounting, tax and transaction records;
- protect the website, prevent fraud, investigate misuse and resolve disputes;
- comply with legal obligations and enforce our agreements; and
- improve our services and business processes using aggregated or de-identified information where practical.
We will not use personal information for unrelated marketing without permission where consent is required. You may ask us to stop direct marketing at any time.
5. Sharing and overseas processing
We disclose personal information only where reasonably needed for the purposes above, with your consent, or where authorised or required by law. Recipients may include:
- Stripe and related payment, fraud-prevention and financial service providers;
- Vercel and other website hosting, infrastructure, security, storage or communications providers;
- professional advisers such as accountants, insurers, lawyers or technical contractors who need the information to perform their work; and
- government, regulatory, law-enforcement or dispute-resolution bodies where legally required or reasonably necessary.
Some service providers may store or process information outside Australia, including in the United States and other countries where they or their subcontractors operate. Privacy protections in those countries may differ from Australian law. We select established providers and take reasonable steps appropriate to the circumstances, but we cannot control the infrastructure or legal obligations of independent providers.
We do not sell or rent personal information.
6. Payments
Stripe processes DesignDash deposits through a Stripe account presented to customers as TopHatMedia.com.au. Stripe collects and handles payment details under its own privacy policy and terms.
DesignDash does not receive or store your full card number or card security code. We may receive transaction identifiers, payment status, customer contact details and other information needed to match a payment to a booking, prevent fraud, provide services and keep business records.
7. Security and retention
We use reasonable administrative, technical and organisational safeguards designed to protect personal information from loss, misuse, interference and unauthorised access, modification or disclosure. Measures may include access controls, reputable service providers, encrypted network connections, restricted credentials, monitoring and backups where appropriate.
No website, transmission or storage system can be guaranteed completely secure. You are responsible for using secure devices and communication channels and for not sending passwords or payment card details through ordinary form fields or email.
We retain information only for as long as reasonably needed for the purposes described in this policy, to meet accounting, tax, insurance and legal obligations, or to establish or defend legal claims. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to technical backup cycles and lawful retention requirements.
If we become aware of a data breach, we will assess and respond to it and provide notifications where required by applicable law.
9. Access and correction
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before responding.
We will respond within a reasonable period. In some circumstances the law permits or requires us to refuse access or correction. If that happens, we will generally explain the reason and available complaint options where it is lawful to do so. We do not charge for making a request, although a reasonable access cost may apply where permitted and explained in advance.
10. Privacy complaints
If you have a privacy concern, contact us with enough detail for us to understand and investigate it. We aim to acknowledge a complaint promptly and provide a substantive response within 30 days where reasonably possible.
If you are not satisfied with our response and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner at oaic.gov.au. The OAIC generally expects you to complain to the organisation first and allow time for a response.
11. Changes to this policy
We may update this policy when our services, providers, information-handling practices or legal obligations change. The current version will be published on this page with its effective and review dates. Material changes will apply from publication or a later date stated in the updated policy.
12. Contact us
Privacy contact — DesignDash, operated by TopHat Media
Email: support@gumnutlearning.com
Website: designdash.com.au
Location: Australia
Please write “DesignDash privacy request” in the subject line. You may also request this policy in another accessible format.