Privacy policy

Ardor Labs Pty Ltd (ABN 45677860294) (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

This policy explains how we collect, use, store and disclose personal information in connection with our website at ardorlabs.dev and the services we provide.

Information we collect

We collect personal information that you provide directly to us, including:

  • your name, email address, company name and role, when you submit an enquiry or application through our website
  • any additional information you choose to include in your message

We do not collect personal information from third-party sources. We do not collect sensitive information as defined under the Privacy Act.

Cookies and analytics

This website uses privacy-respecting analytics (Vercel Web Analytics) to understand how visitors use our site. These analytics do not use cookies and do not personally identify you.

If you consent to analytics via the banner shown on your first visit, we may collect additional performance data to improve site speed. You can change your preference at any time by clearing your browser's local storage for this site.

We do not use cookies for advertising, tracking, or profiling.

How we use your information

We use the personal information we collect to:

  • assess and respond to your enquiry
  • communicate with you about our services
  • comply with our legal obligations

We do not sell, rent or share your personal information with third parties for marketing purposes. We will not use your information for any purpose other than those described in this policy without your consent.

Legal basis for processing

Under the GDPR, we process your personal information on the following legal bases:

  • Consent(Article 6(1)(a)) — when you submit an application through our website and tick the consent checkbox, you consent to us processing your data for the purposes described in this policy.
  • Legitimate interests(Article 6(1)(f)) — we have a legitimate interest in responding to enquiries, assessing potential engagements, and improving our services. This interest does not override your fundamental rights and freedoms.

Third-party services

We use the following categories of third-party processors to operate our website and handle communications:

  • Hosting:Vercel Inc. (United States) — serves the website and processes page requests. Operates under Standard Contractual Clauses (SCCs).
  • Email delivery:Google LLC (United States) — delivers application notification emails via Google Workspace SMTP. Operates under SCCs.
  • Analytics:Vercel Inc. (United States) — privacy-respecting web analytics, loaded only with your consent. Operates under SCCs.

These providers process data on our behalf under data processing agreements that include appropriate safeguards for international transfers.

Data retention

We retain personal information submitted through our application form for 24 months from the date of submission. After this period, your information is securely deleted.

If an engagement proceeds from your application, relevant information is retained for the duration of the engagement plus 7 years for legal and accounting purposes, in accordance with Australian record-keeping requirements.

You may request earlier deletion at any time by contacting us (see “Your rights” below).

Data security

We take reasonable steps to protect your personal information from unauthorised access, modification, disclosure or loss. These measures include encrypted data transmission, access controls and secure infrastructure.

No method of electronic storage or transmission is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

International data transfers

Your information may be processed in countries outside Australia, including the United States, where our hosting and email providers operate.

For transfers from the European Economic Area (EEA), we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, which our service providers (Vercel, Google) have adopted.
  • Supplementary measures including encryption in transit and at rest.

For transfers from Australia, we comply with Australian Privacy Principle 8 by taking reasonable steps to ensure overseas recipients handle your information in accordance with the APPs.

Your rights

Under the Privacy Act 1988, you have the right to:

  • request access to the personal information we hold about you
  • request correction of inaccurate or outdated information
  • request deletion of your personal information
  • request a copy of your personal information in a structured, commonly used, machine-readable format (data portability)
  • withdraw consent where we rely on consent to process your information

To exercise any of these rights, contact us at admin@ardorlabs.dev. We will respond within 30 days.

If you are located in the European Economic Area, you may also have rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

Data protection contact

For any questions about how we handle your personal information, or to exercise your rights, contact our data protection lead at admin@ardorlabs.dev.

Complaints

If you believe we have handled your personal information in a way that breaches the Australian Privacy Principles, you may lodge a complaint with us at admin@ardorlabs.dev. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Last updated: 30 March 2026