Privacy Policy
Your privacy is of utmost importance to us at Moca Design Studio. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
1. Collection of Personal Information
We collect personal information that you provide directly to us through our contact and briefing forms. This information may include: your full name, email address, business or brand name, services of interest, and details regarding your project scope.
2. Use and Disclosure of Personal Information
The personal information we collect is used solely to respond to your inquiries, provide commercial proposals for branding and visual identity projects, and manage our business relationship with you. We do not use or disclose your personal information for secondary purposes (such as direct marketing) without your explicit consent.
3. Cross-Border Data Disclosure and Service Providers
To ensure secure and reliable delivery of your contact and briefing requests to our design team, we utilise trusted third-party service providers and APIs, including:
- Resend API: For secure and structured delivery of project briefs to our commercial inbox.
- Telegram Bot API: When you submit the contact form, we send an instant alert to the studio through the Telegram Bot API, alongside the email above. That alert carries the briefing details you submitted (your name, email, company, services of interest, and message). Telegram processes this data on servers located outside Australia.
Where personal information is transferred or stored overseas, we take reasonable steps to ensure that the recipient handles your personal information in accordance with the APPs.
4. Clients: Contracts, Invoices and Payments
When someone hires the studio, we collect more than the briefing details above. For a client contract, we collect your name, email address, business details when you give them (an ABN, another tax id, or your address), the contract text, your signature (a drawn image or a typed name), the time it was signed, and the IP address and device information recorded when the contract is opened and signed. We also keep a record of the invoice and payment status. Card details go straight to Stripe: the studio never sees or stores them.
We use this information to prepare, sign, and keep the contract, to issue invoices and receive payment, and to keep the records the law requires.
These service providers process that data, each in the country noted:
- Vercel and Neon: host the admin system and its database in Australia (Sydney region).
- Stripe: processes payments (United States).
- Resend: sends contract and invoice emails (United States, through Amazon SES).
The contract and invoice system also sends its own Telegram alerts, but those carry no client details: only a note that something happened, such as a contract being signed or an invoice being paid, never names, emails, contract titles, or amounts. The Telegram alerts sent from the contact form, which do carry briefing details, are covered in section 3 above.
For clients in Brazil, these international transfers rest on LGPD article 33, IX, together with article 7, V: they are necessary to carry out the contract you asked for, or the steps that come before it.
Contracts, invoices, and payment records are kept for six years after the work is finished or paid, whichever is longer between the Australian Taxation Office's five-year rule and the New South Wales limitation period of six years. After that, we remove personal details unless the law gives us a reason to keep them.
You can ask to see your records, have mistakes corrected, get a copy in a portable format, or have your personal details deleted once the retention period ends. Email contact@mocadesign.studio for any of this.
5. Access, Correction, and Rights
Under the APPs, you have the right to request access to the personal information we hold about you, and to request that we correct any inaccuracies. You may also request the deletion of your personal information. To exercise any of these rights, or if you have any questions or complaints regarding our privacy practices, please contact us at contact@mocadesign.studio.