Privacy Policy

This Privacy Policy explains how J-Squared Studios (ABN 36 692 526 097) (“we”, “us”, “our”) handles your personal information. We are committed to protecting your privacy and to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our client portal and services, you agree to the collection and use of information in accordance with this policy.

What we collect & why

We only collect personal information that is reasonably necessary to provide our services and to manage our relationship with you. Depending on how you interact with us, this may include:

• Identity and contact details — your name, business name, email address, phone number, and job title.
• Account information — login credentials and authentication data used to secure your portal access.
• Billing information — invoices, payment records, and amounts owing. Card details are handled directly by our payment processor and are never stored on our servers.
• Project information — shoot requests, briefs, deliverables, support requests, and related correspondence.
• Technical information — basic usage and device data needed to operate and secure the portal.

We collect this information directly from you when you create an account, submit a form, request a shoot, or otherwise communicate with us. Where it is lawful and practical to do so, you may deal with us anonymously or using a pseudonym, though this may limit the services we can provide.

How we use your information

We use your personal information to:

• create and manage your account and verify your identity;
• deliver, schedule, and support the creative services you engage us for;
• issue invoices and process payments;
• send service-related communications, such as sign-in links and project updates;
• respond to your enquiries, requests, and complaints; and
• meet our legal, accounting, and record-keeping obligations.

We do not sell your personal information, and we do not use it for unrelated direct marketing without your consent.

Storage & security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include access controls, encryption in transit, and row-level security on our database so that you can only access your own data. We retain personal information only for as long as it is needed for the purposes described above, or as required by law, after which it is securely deleted or de-identified. Our standard retention period is seven (7) years after the end of our relationship with you, reflecting our tax, accounting, and legal record-keeping obligations; some information may be removed sooner where it is no longer required. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Who we share your information with

We use trusted third-party service providers to operate our portal and deliver our services. We share personal information with these providers only to the extent necessary for them to perform their function, and we require them to handle it securely. The providers we rely on are:

• SupabaseDatabase and authentication hosting — stores your account and portal data.
• StripePayment processing for invoices and card details.
• XeroAccounting and invoicing.
• ResendSending transactional email (e.g. sign-in links, notifications).
• GoogleCalendar integration for scheduling shoots and meetings.
• DropboxHosting and delivering your project files.
• ReplayHosting video deliverables for review and approval.

We may also disclose your information where required or authorised by law, or to protect our legal rights.

Cross-border disclosure

Some of the service providers listed above store and process data on servers located outside Australia, including in the United States and the European Union. As required by Australian Privacy Principle 8, we take reasonable steps to ensure that overseas recipients handle your personal information in a manner consistent with the Australian Privacy Principles. By using our services, you acknowledge that your personal information may be disclosed to, and stored by, these providers overseas.

Accessing & correcting your information

Under Australian Privacy Principles 12 and 13, you have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, or misleading. Much of your information can be viewed and updated directly in your portal profile. For anything else, contact us using the details below and we will respond within a reasonable period. We will not charge you for making a request, though a reasonable cost may apply for giving access in certain cases.

Making a complaint

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first using the details below so we can investigate and respond. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer at info@jsquaredstudios.com.au. We may update this policy from time to time; the latest version will always be available on this page.