Privacy Policy

Privacy Policy

Last updated: May 2026

Inphinity Design Pty Ltd (ACN 697 213 862) (ABN 15 697 213 862) (“Inphinity Design”, “we”, “us”, “our”) operates the website at inphinitydesign.com and provides wellness-focused design services to clients in Australia and internationally.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights. It applies to information collected through our website, our communications with you, and the delivery of our services.

If you have any questions about this policy or how we handle your information, please contact us at hello@inphinitydesign.com.

1. Who is responsible for your information

Inphinity Design Pty Ltd is the data controller for personal information collected through this website and in the course of providing our services. Our contact details are:

Inphinity Design Pty Ltd  

Email: hello@inphinitydesign.com

2. The laws we follow

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Where we collect or use personal information of individuals located in the European Economic Area or the United Kingdom, we also comply with the EU General Data Protection Regulation and the UK GDPR. Section 9 explains your rights under those laws.

3. What personal information we collect

We collect only the information we need to deliver our services, respond to enquiries, and operate our website. Depending on how you interact with us, this may include:

• Identity and contact details such as your name, email address, phone number, and country.
• Project information you share with us when enquiring about or engaging our services, including project briefs, site information, and any materials you send us.
• Booking information when you schedule a call with us through Cal.com, including your name, email, and preferred time.
• Communication records, including emails, messages exchanged through ClickUp or WhatsApp, and recordings or transcripts of video calls where you have given consent.
• Marketing preferences, such as your email address if you subscribe to receive updates from us through Email Octopus.
• Document signing information when you sign a non-disclosure agreement or other document through Adobe Sign, including your name, email, signature, and the signed document.
• Website usage information collected automatically when you visit our website, including your IP address, browser type, device information, pages viewed, and how you arrived at the site. This is collected through Google Analytics. See section 8.

We do not seek to collect sensitive information (such as health or biometric information) and ask that you do not send it to us unless it is specifically relevant to a project we are working on with you.

4. How we collect personal information

We collect personal information in the following ways:

Directly from you

When you email us, fill in a form on our website, book a call, sign up to our email list, send us project materials, sign a non-disclosure agreement, or speak with us on a call.

Automatically through our website

Through cookies and analytics tools as described in section 8.

From third parties

Occasionally, from people who refer you to us, or from public sources such as your business or social media profile, where this is relevant to a potential engagement.

Where we collect personal information about you from a source other than you directly, we will, where reasonable, take steps to let you know we have done so.

5. How we use your information

We use personal information for the following purposes:

• To respond to your enquiries and provide information about our services.
• To deliver our services to you, including managing projects, communicating with you and your team, preparing deliverables, and coordinating with the wider project team.
• To issue invoices and manage payments.
• To send you email updates about our work, where you have subscribed.
• To operate, maintain, and improve our website.
• To comply with our legal and regulatory obligations.
• To protect our rights and interests, including in the event of a dispute.

For visitors and clients in the European Economic Area or the United Kingdom, the legal bases for this processing are: performance of a contract (where we are delivering services to you), legitimate interests (where we are responding to your enquiries, operating our website, or protecting our business), consent (where you have subscribed to our email updates or consented to a call recording), and legal obligation (where the law requires us to process your information).

6. Who we share your information with

We do not sell your personal information. We share it only where it is necessary to deliver our services, operate our business, or comply with the law.

We share personal information with:

• Our team members, subcontractors, and freelance designers engaged on your project, under written confidentiality obligations.
• Locally registered architects and other specialist consultants where a project requires their input, with your knowledge.
• Trusted service providers who help us run our business. The main providers we currently use are listed in section 7.
• Professional advisors such as our lawyers and accountants, where necessary.
• Regulators, courts, or law enforcement, where we are required to disclose information by law.
• A purchaser of our business, in connection with a sale or restructure, subject to confidentiality obligations.

7. Service providers we use
To deliver our services and operate the website, we use the following service providers, each of which may process personal information on our behalf:

• Google Workspace (email, calendar, file storage) — Google LLC.
• Dropbox (file storage and sharing) — Dropbox, Inc.
• DocSend (document sharing) — Dropbox, Inc.
• ClickUp (project management and communication) — ClickUp.
• Zoom (video calls) — Zoom Video Communications, Inc.
• Fathom (call note-taking and transcripts, where consent is given) — Fathom Video, Inc.
• Cal.com (call scheduling) — Cal.com, Inc.
• Email Octopus (email marketing) — EmailOctopus Ltd, United Kingdom.
• Adobe Sign / Adobe Acrobat Sign (signing of non-disclosure agreements and other documents) — Adobe Inc.
• Google Analytics (website analytics) — Google LLC.
• WhatsApp (messaging, used only where you have first contacted us through it) — WhatsApp / Meta Platforms, Inc.

Each of these providers has its own privacy practices. We choose providers that maintain reasonable security standards and apply confidentiality obligations to information processed on our behalf.

8. Cookies and website analytics

Our website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit a website. We use them to make the site work properly and to understand how visitors use it.

Specifically, we use Google Analytics to collect information about how visitors find and use our website, including pages viewed, time spent on the site, and general location. This information is collected in a form that does not directly identify you.

You can control or refuse cookies through your browser settings. If you disable cookies, parts of the website may not work as intended. You can also opt out of Google Analytics specifically by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

9.International transfers

We operate internationally and engage team members, subcontractors, and service providers based in different countries. As a result, personal information we hold may be transferred to, stored in, or accessed from countries outside Australia, including the United States, the United Kingdom, and the European Union.

Where we transfer personal information overseas, we take reasonable steps to ensure that it is handled in a manner consistent with the Australian Privacy Principles. Where personal information is transferred from the European Economic Area or the United Kingdom, we rely on appropriate safeguards as required by the GDPR or UK GDPR, including the European Commission’s standard contractual clauses or transfers to countries covered by an adequacy decision.

10. How we store and protect information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include access controls, encryption where appropriate, secure cloud storage with reputable providers, and confidentiality obligations on our team and subcontractors.

We retain personal information only for as long as we need it for the purposes set out in this policy, or as required by law. When it is no longer needed, we take reasonable steps to delete or de-identify it.

11. Your rights

You have the right to ask us to access the personal information we hold about you, correct it if it is inaccurate or out of date, and make a complaint if you believe we have not handled your information appropriately.

If you are located in the European Economic Area or the United Kingdom, you also have the right to request erasure of your personal information, restrict or object to our processing of it, request a copy of your information in a portable format, and withdraw your consent at any time where we rely on consent.

To exercise any of these rights, please contact us at hello@inphinitydesign.com. We will respond within a reasonable time and may need to verify your identity before acting on a request.

12. Email updates

If you have subscribed to receive email updates from us, you can unsubscribe at any time using the link in any email we send, or by contacting us at hello@inphinitydesign.com.

13. Children

Our services and website are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under that age. If you believe we have collected information from a child, please contact us and we will delete it.

14. Data breaches

If a data breach occurs that is likely to result in serious harm to affected individuals, we will notify the individuals concerned and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). Where the breach affects individuals in the European Economic Area or the United Kingdom, we will also notify the relevant supervisory authority within the timeframes required by the GDPR or UK GDPR.

15. Complaints

If you have a complaint about how we have handled your personal information, please contact us first at hello@inphinitydesign.com so we can try to resolve it.

If you are not satisfied with our response, you can contact:

• In Australia: the Office of the Australian Information Commissioner at oaic.gov.au.
• In the European Economic Area: your local data protection authority.
• In the United Kingdom: the Information Commissioner’s Office at ico.org.uk.

16. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “last updated” date.

17. Contact

For any questions about this Privacy Policy, please contact us:

Inphinity Design Pty Ltd  

Email: hello@inphinitydesign.com