Privacy Policy
Last updated: 15 October 2026
Kinstek ('we', 'us') is a trading name of a web design and digital marketing business operated from India. We serve businesses in Australia and elsewhere remotely. We have no office in Australia, and our Australian phone numbers are virtual numbers that connect to our team in India. This policy explains how we handle personal information collected through kinstek.com, our quote builder and your enquiries.
We do not sell, rent, or trade your personal information. Data is used solely to respond to enquiries, prepare quotes, and deliver services.
Session recordings via PostHog strictly mask all form field inputs to safeguard your privacy and sensitive text.
Transparent disclosure of Google Tag Manager, GA4, Google Ads conversion tracking, and SHA-256 hashed Enhanced Conversions.
You have the right to access, correct, or delete your information at any time, with external escalation available via the OAIC.
What we collect
Data provided through enquiries and quote tools, browser session persistence, telemetry, and bot verification.
What you give us. When you submit an enquiry or use our quote builder: your name, business name, email address, phone number, the services you need, and details about your business and project (such as industry, how long you've been operating, goals, budget and timeline). Please don't enter sensitive information (for example health, political or religious details) in free-text fields.
Saved as you go. After you submit the first enquiry form, we save your quote-builder answers as you progress, so you can continue and we can prepare your estimate. If you begin filling out an enquiry form, preliminary details you enter may be temporarily saved in your browser session or held in our operational logs so you can resume your quote or so our team can assist if your session disconnects before submitting.
Collected automatically. Your IP address, device and browser details, pages viewed, clicks and scrolling, the page that referred you, campaign (UTM) parameters and advertising click IDs (such as Google's gclid). We also use session recordings of site visits. What you type into form fields is masked in these recordings.
Bot protection. We use Cloudflare Turnstile to detect spam and automated traffic.
How we use it
Purposes for which personal information is collected, processed, and maintained.
We use the personal information we collect for the following purposes:
▪To respond to your enquiry and prepare estimates, proposals and demos.
▪To contact you about your enquiry.
▪To keep records of enquiries and client work.
▪To measure and improve our website and our advertising, including which ads lead to enquiries.
▪To protect our website from spam and abuse.
▪To meet legal and tax obligations.
We do not sell or rent your personal information.
Contacting you
Direct inquiry responses, marketing communications, and straightforward 5-day opt-out protocol.
We contact you about your enquiry because you submitted it and agreed to this (the consent box on our forms). We send marketing messages only where the law allows, and each one identifies us and includes a way to unsubscribe. You can also opt out at any time by emailing legal@kinstek.com. We act on opt-outs within 5 business days.
Cookies, analytics and advertising
Specific third-party analytics and measurement tools, Enhanced Conversions, and opt-out links.
We use:
▪Google Tag Manager to manage the tags below.
▪Google Analytics 4 for website usage statistics.
▪Google Ads conversion tracking to see which ads lead to enquiries. When you click a Google ad, a cookie is set so we can tell if you later submit an enquiry.
▪Enhanced conversions. After you submit a form, your email address or phone number may be sent to Google in hashed (SHA-256) form to match the enquiry to an ad click.
▪PostHog (data stored in the United States) for product analytics and session recordings, with form inputs masked.
▪Cloudflare Turnstile for bot protection.
We do not currently use remarketing or personalised advertising audiences. If that changes, we will update this policy first.
You can opt out through your browser's cookie settings (blocking cookies may affect how the quote builder works), through Google's Ad Settings, and with the Google Analytics opt-out add-on.
Project previews. When you open a project in our 'Our Work' viewer, the client's own website loads inside our page. That website may set its own cookies and collect data under its own policy, which we don't control.
Security
Technical encryption, operational access controls, and data breach notification protocol.
We take reasonable steps to protect personal information, including encrypted (TLS) connections, access limited to authorised team members, and bot and abuse protection. No online system is completely secure. If a data breach is likely to cause serious harm, we will notify affected people and the relevant regulator as required by law.
How long we keep it
Data retention schedules for non-proceeding enquiries, client tax records, and analytics.
We retain personal data according to the following retention schedules:
▪Enquiries that don't proceed: up to 2 years, then deleted or de-identified.
▪Client and invoice records: 7 years.
▪Analytics data and session recordings: only as long as needed to improve our website.
Your rights
Process for requesting access, corrections, or deletion within 30 days.
You can ask to access, correct or delete the personal information we hold about you by emailing legal@kinstek.com. We may ask you to verify your identity first, and we will respond within 30 days. Deletion is subject to records we are required to keep by law. If we refuse a request, we will explain why.
Complaints
Internal complaints review process and escalation to the Office of the Australian Information Commissioner.
Email legal@kinstek.com and we will acknowledge and respond within 30 days. If you are in Australia and not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).
Children
Business-to-business audience and non-collection of minors' information.
Our website is for businesses and is not directed at people under 18. We do not knowingly collect their information.
Indian law
Compliance with applicable Indian data protection law alongside international standards.
Because our team is in India, we also handle personal data in line with applicable Indian data protection law as it comes into force.
Changes
Updates to this policy and date-tracking of modifications.
We may update this policy from time to time. The date at the top shows when it was last changed.
Contact
Direct communication channels for privacy questions and regulatory correspondence.
For any inquiries regarding this Privacy Policy or our data handling practices, contact Kinstek via:
▪Legal Department: legal@kinstek.com
▪Client Desk: contact@kinstek.com
▪Telephone: (08) 6377 7466