Privacy Policy

CTRLSZE (a trading name of AURACO PTY LTD, an Australian proprietary limited company, ABN 36 695 730 404) takes your privacy seriously. This policy describes what personal information we collect when you visit our website, how we use it, who we share it with, and the rights you have under Australian privacy law.

This policy applies to ctrlsze.studio only. Our products (such as HiBud) have their own privacy policies, listed on the relevant product website.

Who we are

AURACO PTY LTD is an Australian proprietary limited company. The contact for any privacy matter is hello@ctrlsze.studio.

Information we collect

Information you give us

When you contact us, subscribe to our newsletter, or sign up for a paid tier on our blog, we collect the information you provide — typically your name, email address, and the contents of your message. If you purchase a paid subscription, our payment processor (Stripe) handles your payment details; we do not see or store your full card number, but we receive billing information necessary to fulfil and account for the transaction.

Information we collect automatically

We use Plausible Analytics. Plausible is a privacy-respecting analytics service that does not use cookies or collect personally identifiable information. It records aggregated data such as page views, referrer, country (not city or precise location), browser type, and time of visit. We use this data to understand how the site is performing.

How we use your information

We use the personal information we collect to:

• Respond to your inquiries and communicate with you
• Send you the emails you have requested (newsletter, transactional emails) — which you can unsubscribe from at any time
• Process payments and provide receipts for paid subscriptions
• Detect, prevent, and address technical issues, fraud, and abuse
• Comply with our legal obligations under Australian law

Who we share your information with

We do not sell your personal information. We share it only with third-party service providers we use to operate our business, and only to the extent necessary for them to provide their service. These include:

• Resend — for sending emails (newsletters, transactional emails)
• Stripe — for processing payments (when applicable)
• Vercel — for hosting our website
• Cloudflare — for DNS and email forwarding for hello@ctrlsze.studio
• Neon — for our database
• Plausible — for privacy-respecting analytics

Some of these providers operate outside Australia. Where personal information is transferred internationally, we take reasonable steps to ensure that the recipient handles the information in a manner consistent with the Australian Privacy Principles.

We may also disclose your personal information where required by Australian law, court order, or to protect our legal rights or the safety of others.

Data retention

We retain personal information for as long as necessary to provide our services and comply with our legal obligations. Specifically:

• Email and contact records: retained for as long as you remain a subscriber, plus a reasonable period after unsubscription for legal and operational purposes (typically up to 24 months)
• Payment and billing records: retained for at least seven years, as required by Australian tax law
• Suppression list: we retain a minimal list of email addresses that have unsubscribed, to ensure we do not contact those people again

Security

We use reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, or alteration. These include encrypted storage, access controls, two-factor authentication on critical systems, and regular reviews of our security practices. No system is perfectly secure; if a data breach affecting you ever occurs, we will notify you in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

Your rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request that we correct inaccurate information
• Request that we delete your personal information (subject to our legal retention obligations)
• Unsubscribe from any marketing communication, at any time
• Make a complaint to us if you believe we have mishandled your information

To exercise any of these rights, email hello@ctrlsze.studio. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies and tracking

Our website does not use tracking cookies. We use Plausible Analytics, which is cookie-free. If we ever introduce cookies in the future (for example, to keep you logged in), we will update this policy and our cookies page.

Children

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to this policy

We may update this policy as our services evolve. The "last updated" date at the top reflects the most recent change. If we make material changes affecting your rights or how we handle your data, we will notify you by email or through a prominent notice on our website.

Contact us

If you have questions about this policy or our handling of your personal information, contact us at hello@ctrlsze.studio.

AURACO PTY LTD trading as CTRLSZE · ABN 36 695 730 404