Privacy policy

Last updated 10 November 2026

Appui ("we", "us") runs appui.com.au. This policy explains what personal information we collect, why, and what we do with it. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• When you send an enquiry: your name, email address, phone number and suburb (if you give them), the service you're interested in and your message. We also record the IP address the enquiry came from, to stop spam.
• When we do work for you: your contact details and the job address, and notes and prices for the work.
• When you sign in to the Appui back office (staff only): your name and email address, and a record of sign-ins and changes for security. If you choose to sign in with Google, Cloudflare or VelosoLabs, we receive your account id and email address from that service. We never receive your password for those services.

How we use it

Only to answer your enquiry, quote for and do the work you ask for, contact you about it, keep our records, and keep the site secure. We don't sell your information, and we don't use it for advertising.

Who we share it with

We use a few trusted services to run the site, and they handle data for us under their own privacy terms:

• Cloudflare hosts the website and stores our records, and checks the contact form for spam (Turnstile).
• Mailjet sends emails from the site, such as enquiry notifications and sign-in codes.
• Zoho Mail hosts our mailbox, where enquiries are delivered.
• Google and VelosoLabs, only if a staff member chooses to sign in with them.

Some of these services store data outside Australia. We only share what each one needs to do its job, and we'll share information when the law requires it.

Cookies

The public website doesn't use advertising or tracking cookies. The back office uses one cookie to keep staff signed in. Your colour-mode choice (light, dark or system) is saved in your browser only.

How long we keep it

We keep enquiries and customer records while they're useful for the work and for our business records (generally up to seven years for tax purposes), then delete them. Security logs are kept for about 13 months.

Your choices

You can ask to see the information we hold about you, ask us to correct it, or ask us to delete it, unless we have to keep it by law. Send us a request through our contact form (choose "Privacy or data request") and we'll reply within 30 days.

Security

The site uses encrypted connections (HTTPS), records are encrypted at rest, and staff accounts are protected with strong sign-in (passwords are stored only as secure hashes, and passkeys are supported). If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner.

Questions or complaints

Contact us through our contact form. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner.

Changes

If we change this policy, we'll update it here and change the date at the top.