Privacy Policy
Last updated: October 2026
Who we are
Arrochar Labs is a business name of Arrochar Consulting Pty Ltd (ABN 37 624 705 531), North Sydney NSW, Australia ("we", "us", "our"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect, and why
- Contact enquiries. Your name, work email, organisation, the product you are interested in and your message, when you use the contact form or email us (and your council, role and, if you give it, phone number when you request a council briefing). We use them to reply to you. These forms are delivered to our sales inbox by our email provider (Resend); they are not sent to any form-relay service.
- Newsletter. Your email address, when you subscribe. It is stored as a contact in our newsletter audience (Resend) and used only to send the newsletter. Every issue carries an unsubscribe link.
- Demo access. Your name, organisation email, organisation and role, when you request access to a product demo. We use them to decide whether to approve the request and to send you a sign-in link. Approved access is held in a signed cookie on your device for the demo you were approved for. If our email provider cannot deliver a demo request, it is sent to us instead through the FormSubmit form-relay service.
- AI Microservices purchases. Payment is taken by Stripe Checkout. Stripe collects and holds your card details and billing information under its own privacy policy; we never see or store card numbers. We receive the email address you paid with and the tool or pass you bought, which is what unlocks the tool. Sign-in to your tool account is by a link emailed to that address and a signed cookie; there is no password. The inputs you type into a tool are processed to produce your result and are not stored by us.
- Website operation. Our hosting provider (Vercel) processes standard request data such as IP address, browser type and the pages requested, in order to serve the site and protect it from abuse. We use Vercel Web Analytics to count page views and referrers in aggregate; it sets no cookies and does not identify you across sites. We do not run advertising trackers.
What we do not do
We do not sell, trade or rent personal information. We do not use the information you give us to train AI models. We do not combine it with data from other sources to build a profile of you.
Who we share it with
Only the providers that operate the site and the services above, each under its own terms: Vercel (hosting), Resend (email delivery and the newsletter audience), FormSubmit (backup delivery of demo requests only), Cloudflare (Turnstile, the bot check on our forms) and Stripe (payments). Some of these providers store data outside Australia. We do not share your information with anyone else unless the law requires it.
How long we keep it
Enquiry emails are kept for as long as the conversation is live and for our business records after that. Newsletter contacts are kept until you unsubscribe. Purchase records are kept for as long as your access lasts and as long as tax and consumer law require.
Security
The site is served over HTTPS only. Sign-in links and access cookies are signed and expire. Access to our inbox, hosting and payment accounts is limited to the people who need it and protected by multi-factor authentication. No method of transmission or storage is completely secure, and we will tell you if a breach affecting your information occurs where the law requires it.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, unsubscribe from the newsletter at any time, or ask us to delete your information where we are not required to keep it. Email sales@arrocharlabs.com. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).