Zendrex Labs

1. Overview & Who We Are

Zendrex Labs (ABN: 89 769 608 452) is a web design and development studio operating remotely Australia-wide, with no fixed premises. This policy explains what personal information Zendrex collects through zendrexlabs.com and the services it links to (quote requests, the free audit tool, project discovery, and client engagements), why it's collected, who it's shared with, and how you can access, correct, or delete it.

Zendrex is identified in this policy and everywhere else client-facing only by its registered trading name — no individual's name appears in this document, per Zendrex's standing anonymity policy.

2. What We Collect

Quote form

Business name, industry, your name, email, and phone; project details (tier, pages, content status, logo status, add-ons, domain preference, retainer tier, payment method preference); and, for a redesign project, your current site's URL and platform.

Contact form

Your name, email, phone, the service you're enquiring about, your current site (if any), and any details you provide.

Our contact, quote, discovery and free audit forms are protected by Cloudflare Turnstile, a quick “I'm not a robot” check that helps keep spam and bots out. To tell people from bots, Cloudflare processes limited technical information about your visit (such as your IP address and browser details) under its own privacy policy. When you submit a form, your IP address is passed to Cloudflare once to verify that check; Zendrex does not store it with your submission. The free audit tool also keeps a count of audits per IP address, to limit repeated use. The count is deleted automatically one hour after your most recent audit.

Free Website Security & Speed Audit

Your name (optional), email, and the URL you'd like scanned. See Clause 15 of Zendrex's Client Service Agreement for how the scan itself works — in short, only the URL you provide is sent to Google's PageSpeed Insights service; no personal information is sent to Google as part of the scan.

How you found us

We record which link or page brought you to us and, if you choose to tell us, how you heard about us, so we can see which marketing works. That means the campaign tags in the link you followed (utm_source and utm_campaign), the website you came from (without any search terms or other details in its address), and your answer to the optional “Where did you hear about us?” question. This is stored with your quote, contact or free audit request and deleted when it is (see Clause 7).

Project discovery questionnaire

If you proceed with a project, the discovery form collects considerably more: full page content and any documents you upload, brand assets (logo, photos), style and colour preferences, competitor/inspiration sites, trust signals and reviews, tone-of-voice answers, domain and registrar details, Google Business Profile details (address, hours, phone, categories) if you've purchased Local SEO, business email setup preferences, and — if you've told us your site needs one — your own Privacy Policy document, which we place on your site on your behalf (Zendrex does not draft this document for you).

Confirming your project

If you accept your Client Service Agreement electronically, we record your typed name, the date/time, the IP address the confirmation was submitted from, your browser's user-agent (a short string identifying your browser and device type), and the version of the Agreement you accepted, together with the pricing you agreed to. This is your electronic signature and our evidence of the Agreement: it is stored in Cloudflare KV, a copy is emailed to you, and it is kept for at least 7 years after the engagement ends (see Clause 7). This is the only place Zendrex stores your IP address.

Payment information

Zendrex never sees or stores your full card details. Card, BECS Direct Debit and PayTo payments are processed directly by Stripe — Zendrex only receives your name, email, business name, and the invoice/subscription details needed to bill you correctly.

If you pay by PayID (direct deposit), the payment goes straight to Zendrex's business bank account. Zendrex then sees the payer name, amount and reference your bank sends with it, and keeps that record with your invoice.

3. How We Use It

To respond to your enquiry or quote request, scope and deliver the project you've engaged us for, invoice and bill you, run the free audit tool and send you its results, and communicate with you about your project or retainer. We don't use your information for unrelated marketing without your consent, and we don't sell or rent it to anyone.

4. Who We Share It With

Stripe (payment processing & invoicing) — your name, email, business name, and payment/subscription details. Stripe is a US-based payment processor; your information may be processed or stored on infrastructure outside Australia as part of its standard operation.
PurelyMail (our email provider) — carries the emails Zendrex sends and receives, including form notifications and anything sent to or from you.
Google PageSpeed Insights — receives only the URL you ask us to scan via the free audit tool, never your personal details.
Anthropic (Claude AI) — used internally (a) after you've engaged Zendrex and completed the discovery questionnaire, to help draft an internal build brief from your discovery answers; and (b) to help draft a follow-up email if your enquiry hasn't progressed, using only the service type and options you selected (never your email address or phone number). Every follow-up is reviewed and approved by a person before it is sent. Anthropic processes this data under its own API terms.
Google Business Profile — only if you've purchased Local SEO: the business details you give us for your profile (business name, address, hours, phone, categories) are entered into Google Business Profile on your behalf, where Google publishes them under its own terms.
Cloudflare — our hosting and infrastructure provider (website hosting, form storage, file storage, and access security). Cloudflare hosts and secures the systems described in this policy but does not use your data for its own purposes. Cloudflare also runs Cloudflare Web Analytics for us (see Clause 5), and the Turnstile spam check on our forms (see Clause 2), which processes limited technical information about your visit, including your IP address.

Zendrex does not sell, rent, or share your information with any other business — including any business under common ownership — beyond what's listed above.

5. Cookies & Tracking

zendrexlabs.com does not use analytics or advertising cookies. We use Cloudflare Web Analytics, which counts page views and measures page speed without cookies or local storage, and which Cloudflare says does not fingerprint visitors by IP address, browser or any other data. When you arrive, your browser's session storage keeps a note of the link that brought you (see “How you found us” in Clause 2), so it can be sent with a form if you fill one in; nothing is sent if you don't, and the note is cleared when you close the tab.

The project discovery form saves your in-progress answers to your own browser's local storage so you don't lose them if you navigate away — this data stays on your device, is never transmitted to Zendrex or anyone else, and you can clear it at any time through your browser's settings.

6. How We Store & Protect It

Form submissions are stored in Cloudflare KV; uploaded files are stored in a private Cloudflare R2 bucket, reachable only through an access-gated link — neither is publicly browsable. Zendrex's admin tools sit behind Cloudflare Access authentication. Everything on zendrexlabs.com is served over HTTPS.

7. How Long We Keep It

Where you've engaged Zendrex for a project or retainer: your information is kept for the life of that engagement, and for 7 years afterward, consistent with standard Australian business record-keeping practice for invoices and related records.
Your Client Service Agreement acceptance record (see Clause 2): kept for at least 7 years after the engagement ends, as evidence of the Agreement. Because it's a legal record, it isn't deleted early on request while that period runs.
Files you upload (logos, photos, documents): deleted automatically 12 months after they're uploaded. The finished website keeps the copies it uses.
Where you've submitted a quote, contact, or free audit request that doesn't turn into a project: kept for 12 months from your last contact with us, then deleted automatically, unless you ask us to delete it sooner.

You can ask us to delete your information earlier at any time — see Clause 8 below.

8. Your Rights & How to Contact Us

You can ask Zendrex what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. We'll respond within a reasonable time.

Zendrex's turnover currently falls under the threshold at which the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles apply as a matter of law to most small businesses — this policy is followed as a voluntary commitment regardless, consistent with Zendrex's security-first positioning.

If you're not satisfied with how we've handled your information, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Children's Information

zendrexlabs.com is a business-to-business website and isn't directed at children. We don't knowingly collect information from anyone under 18.

10. International Data

Some of the third parties listed in Clause 4 (notably Stripe and Anthropic) may process or store information on infrastructure located outside Australia, as part of their own standard operations.

11. Changes to This Policy

Zendrex may update this policy from time to time — the date at the top reflects the most recent version. Continuing to use zendrexlabs.com or Zendrex's services after an update means you accept the current version.

12. Contact

Questions about this policy, or a request about your information: [email protected].