Privacy policy

This policy describes how Hazır Studio (ABN 42 839 638 864, "we", "us") handles personal information collected through hazir.dev, our purchase flow and our customer support. It applies to visitors and customers in Australia, the European Economic Area, the United Kingdom, and everywhere else in the world.

We comply with the Privacy Act 1988 (Cth) including the thirteen Australian Privacy Principles, and with the General Data Protection Regulation (GDPR) and UK GDPR where they apply. If you have a privacy question or want to exercise any of the rights described below, email hello@hazir.dev. We respond within 30 days.

1. What we collect

• Order data — name, billing country and a transaction ID — when you buy a Hazır product. Card numbers and other payment credentials are collected and stored by Stripe; we never see them.
• Email address, when you subscribe to drop alerts, submit a bespoke brief, or contact support.
• Bespoke brief content — name, business, budget range, project description — when you submit the form on /#bespoke.
• Aggregate analytics — page views, referrer, viewport size — via Google Analytics 4. IP addresses are anonymised before processing. We do not use Analytics for advertising.
• Server logs from our hosting provider, used for security and abuse prevention. Logs are retained for no longer than 30 days unless we are investigating an incident.

2. Why we use it

We use personal information to deliver the product you bought, to send the licence key and download link, to respond to your enquiry, to understand which pages of the site are useful, and to keep the service secure. The lawful bases under GDPR are: contract for orders and licences; legitimate interests for analytics, security and bespoke enquiries; and consent for the drop-alert newsletter, which you can withdraw at any time by clicking unsubscribe.

3. Where data lives

• Stripe processes payments. Stripe stores payment data in line with PCI-DSS and its published privacy policy.
• Supabase (PostgreSQL hosted in Australia or the customer's region) stores subscriber emails, bespoke brief content, and licence records. Access is restricted to the studio principal.
• Google Analytics 4 stores aggregate analytics. We have signed Google's standard data-processing terms.
• Vercel hosts the website itself. Server logs sit on Vercel's infrastructure for the retention window above.

4. International transfers

Some of our processors (Stripe, Google) operate in countries outside your own. Where data leaves the EEA or UK, we rely on the European Commission's Standard Contractual Clauses and equivalent UK transfer provisions. You can request copies of those by emailing the studio.

5. Retention

Order records are kept for seven years to meet Australian tax and record-keeping obligations. Subscriber emails are kept until you unsubscribe. Bespoke brief content is kept for two years from the date of the brief, then deleted. Analytics data follows Google's default retention setting of fourteen months.

6. Your rights

• Request access to the personal information we hold about you.
• Request correction or deletion of your data.
• Object to or restrict our processing where it is based on legitimate interests, and withdraw consent for marketing at any time.
• Request a portable copy of your data in a common machine-readable format.
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au), or your local supervisory authority if you're in the EEA or UK.

To exercise any of the rights above, email hello@hazir.dev. We may verify your identity before responding.

7. Cookies

Hazır.dev sets a small set of essential cookies for analytics and rate-limiting. There is no advertising cookie or third-party tracker. You can disable cookies in your browser without losing access to any product feature.

8. Changes

We may revise this policy. The "last updated" date above changes on every revision. Material changes that affect existing customers are emailed before they take effect.

9. Operator

Hazır Studio · Melbourne, Australia · ABN 42 839 638 864.