Privacy policy.
How Studio SANSA handles personal information in our client portal and the project services connected to it.
Last updated: 23 September 20261. About this policy
Studio SANSA, ABN 57 541 760 459 (we, us or our) provides the client portal at portal.studiosansa.com.au. This policy explains the information handled when you sign in, collaborate with the studio or use the portal’s connected services. It does not describe every use of information on unrelated websites. Contact us at info@studiosansa.com.au with privacy questions.
2. Information we collect
The information depends on how you use the portal and what you or your organisation share with us. It may include:
- Your name, email address, business name, account identifier and project membership.
- Project briefs, correspondence, tasks, feedback, approvals, uploaded files and links.
- Contracts, invoices, project amounts and payment-status records. The portal does not contain a card-entry form; any external payment service handles payment details under its own policy.
- Meeting details, booking responses, time zones and meeting links.
- Technical information generated when you access the service, such as IP addresses, browser information, authentication events and service logs.
Please share only information needed for your project. Avoid uploading identity documents, health information or other sensitive personal information unless we have specifically agreed a suitable way to handle it. If your files identify other people, make sure you have permission or another lawful basis to share them.
3. Where information comes from
We receive information directly from you, from your organisation’s authorised contacts, from the studio’s project records and from services you use in connection with your project. For example, a confirmed feedback booking can supply meeting details to the portal, and a Google sign-in supplies basic account information for authentication.
4. Google sign-in
If you choose Google sign-in, Google and our authentication provider, Supabase, handle the sign-in process. We receive basic identity details such as your account identifier, name, email address and profile image where provided. These details are used to identify you and manage your access.
Google sign-in does not give this portal access to your Gmail messages, Google Drive files or calendar contents. Opening a Google Drive or meeting link is separate from signing in. We do not receive your Google password. You can manage the connection in your Google Account settings; removing it does not automatically delete project records held by the studio.
5. How information is used
We use information to administer accounts and invitations, provide and coordinate project work, share files, record feedback and approvals, arrange meetings, maintain billing records, respond to enquiries, troubleshoot problems and protect the service. We may also use or disclose information where reasonably necessary to meet legal obligations or deal with a dispute. If you do not provide information needed for an account or project, some services may not be available.
7. Overseas processing
Our service providers operate internationally. Information may be stored or processed outside Australia, including in the United States, depending on the provider, hosting location, support access and the service you use. Other locations may apply to a provider’s operations. Contact us if you need details about the handling of particular project information before sharing it.
8. Storage, security and retention
The portal uses authenticated accounts, project-access controls and private storage for uploaded files. No internet service can guarantee absolute security. Keep your account secure and notify us promptly if you believe someone has accessed it without permission.
Project and account information is retained according to the needs of the project, ongoing administration, applicable record-keeping requirements and the handling of disputes. Closing access does not automatically erase invoices, contracts or project history. You can ask us to delete information; we will explain if any records must be retained. Copies may remain in provider backups until those backups expire under the provider’s retention processes.
10. Access, correction and complaints
Email info@studiosansa.com.au to request access to, correction of or deletion of personal information, or to raise a privacy concern. Tell us enough to identify the account or project and describe your request. We may need to confirm your identity before releasing or changing information.
We will consider your request and explain the outcome, including any reason information cannot be provided or deleted. For complaints, please give us a reasonable opportunity to investigate and respond. If the matter remains unresolved, you may contact the Office of the Australian Information Commissioner, where it has jurisdiction, or another relevant regulator.
11. Policy updates
We may update this policy when our services or information-handling practices change. The current version and its update date will appear here. Where required, we will notify affected users of significant changes.