Privacy Policy

Penfold Media (ABN: 94 238 442 145, "we", "us", "our") is a Melbourne-based digital product studio founded and operated by Luke Penfold. We specialize in bespoke web engineering, native mobile application development, and technical consulting.

We respect the privacy of every individual and organization that interacts with our studio. This Privacy Policy outlines how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as recognized international standards including the General Data Protection Regulation (GDPR) where applicable.

We collect information only when reasonably necessary to deliver our services, assess project feasibility, or respond to client requests:

• ▸
  Contact & Project Information: When you submit an enquiry through our project discovery form or communicate with us directly, we may collect your name, business email address, company or trading name, phone number, and brief description of your project requirements.
• ▸
  Commercial & Engagement Data: For contracted client engagements, we collect billing details, Australian Business Numbers (ABN), project specifications, and credentials strictly necessary to configure your technical environments (e.g. hosting, domain DNS, API integrations).
• ▸
  Anonymous Telemetry & Performance Data: To guarantee sub-second page performance, we monitor aggregated, non-personally identifiable telemetry such as Core Web Vitals (LCP, INP, CLS), browser type, and country of origin.

Your information is used strictly for legitimate commercial and engineering purposes, including:

We implement industry-grade technical safeguards to prevent unauthorized access, disclosure, or loss of information:

• All web traffic is transmitted via modern TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).
• Client credentials, staging tokens, and sensitive keys are stored in encrypted vaults with zero unauthenticated exposure.
• Direct contact channels and form endpoints are secured with cryptographic obfuscation, velocity checks, and honeypot traps to prevent automated harvesting and spam.

Penfold Media maintains a minimal-tracking philosophy. We do not use intrusive third-party cross-site advertising trackers or behavioural profiling cookies.

Our website uses modern static architecture (Astro) with edge hosting. Any temporary session storage or cookies used are strictly functional (e.g. remembering navigation state or UI theme preferences).

Under Australian and international privacy laws, you maintain full control over your personal information. You have the right to:

• Request a copy of the personal information we hold about you.
• Request corrections to any inaccurate or incomplete details.
• Request the deletion or purging of your records once commercial and regulatory record-keeping periods expire.

If you have any questions regarding this Privacy Policy, your personal information, or wish to exercise your data rights, please contact Luke Penfold directly: