Legal

Privacy Policy

This policy explains what personal information we collect when you use arklabsai.com, why we collect it, who we share it with, and how you can get it corrected or deleted. It's written to be read, not to be survived.

Effective 7 August 2026. Last updated 7 August 2026.

01Who we are

arklabsai.com is operated by Contrada Analytics Pty Ltd (ABN 21 660 415 556), an Australian company trading as ArkLabs AI. In this policy, “we”, “us” and “our” mean Contrada Analytics Pty Ltd.

We are the data controller for the personal information described here. For any privacy question, request or complaint, email [email protected] and we will respond within 30 days. Our postal address is available on request.

We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the EU or UK GDPR applies to you, the additional rights in section 9 apply as well.

02What we collect

We only collect what a specific interaction needs. We do not buy contact lists, and we do not collect sensitive information (health, biometric, racial or political data) through this website.

Name, email, company, phone, company type, company size, service interest, your message
When you submit the contact form. Used to answer your enquiry and to follow up about the work you asked about.
Name and email
When you request the free e-book or another gated resource. Used to email you the resource and to add you to a short educational email sequence you can leave at any time.
IP address, browser user-agent, submission timestamp
Captured automatically with every form submission. Used to block spam and enforce rate limits (five submissions per IP per hour), and as a record of consent.
Usage and device data — pages viewed, referrer, approximate location, device and browser type
Collected by Google Analytics if analytics is enabled on your visit. Used in aggregate to understand which content is useful.
Booking details — name, email, and anything you enter when scheduling
When you book a call. Handled by Google Calendar appointment scheduling under Google's own privacy terms, and used to run the meeting.
Anything you choose to send us
Email, documents, or details shared in a call. Used for the purpose you sent it for.

You never have to give us personal information to browse the site. If you don’t fill in a form, we don’t collect contact details.

03Why we use it

  • To respond to your enquiry and provide the services or resources you asked for.
  • To deliver a requested resource, such as the AI readiness guide.
  • To send a short, related educational email sequence after you download a resource — with a one-click unsubscribe in every message.
  • To prevent spam and abuse, using Cloudflare Turnstile and IP-based rate limiting.
  • To understand how the site is used in aggregate, so we can improve it.
  • To meet our legal, tax and record-keeping obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

If the GDPR applies to you

Our legal bases are: consent (marketing emails and analytics), legitimate interests (responding to enquiries, securing the site, understanding usage), performance of a contract (delivering services you engage us for), and legal obligation (records we are required to keep).

04Marketing emails

If you download a resource, we add you to a short educational email sequence — three follow-up emails over roughly two weeks, then nothing automatic after that. We may also email you directly about work you enquired about.

Every marketing email carries a one-click unsubscribe link, which removes you immediately and permanently. You can also email [email protected] and ask to be removed, or use the unsubscribe page. We comply with the Spam Act 2003 (Cth).

05Who we share it with

We share personal information only with the service providers that run this website and our communications, and only so far as they need it to do that job. Each is bound by its own contractual and privacy obligations.

Supabase
Hosts the PostgreSQL database that stores form submissions and contact records. Data is held on Supabase infrastructure.
Resend
Delivers transactional and educational email on our behalf, including the resource delivery and the follow-up sequence.
Cloudflare
Provides Turnstile, the anti-spam check on every form. Your form submission is verified against Cloudflare before it reaches us.
Google
Google Analytics for aggregate site usage, Google Calendar for call bookings, and Google Workspace for our email.
Our hosting provider
Runs the web server that serves arklabsai.com.

We may also disclose personal information where the law requires it, to enforce our Terms of Use, or to protect the rights and safety of any person.

Overseas transfer

Several of these providers store or process data outside Australia, including in the United States and the European Union. By submitting your information you consent to that transfer. We take reasonable steps to ensure recipients handle your information consistently with the Australian Privacy Principles.

06Cookies and analytics

The site uses Google Analytics to measure aggregate usage. It sets cookies that record a randomised identifier, the pages you visit and roughly where you are. We do not use those cookies to identify you personally, and we do not run advertising or retargeting pixels.

Your choice

We use Google Consent Mode. If you are visiting from the European Economic Area, the United Kingdom or Switzerland, analytics cookies are switched off by default and stay off unless you accept them on the banner shown on your first visit. Outside those regions analytics runs by default, and you can turn it off at any time.

To change your choice at any point, use the Cookie settings link in the footer of any page. Your preference is stored in a first-party cookie on your own device for 12 months, and nowhere else.

You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. The site works normally with cookies disabled.

Strictly necessary

Cloudflare Turnstile may set a short-lived token to confirm you are not a bot, and our content delivery network sets cookies needed to serve and secure the site. These are required for the site and its forms to work, are not used for tracking, and are not covered by the consent banner.

07How long we keep it

  • Enquiries and downloads that don’t become client work — kept for up to 24 months from your last interaction with us, then deleted or anonymised.
  • Unsubscribed contacts— we retain the email address on a suppression record so we don’t email you again by mistake.
  • Client records — kept for at least 7 years after the engagement ends, as Australian tax and corporate record-keeping laws require.
  • Technical logs — IP addresses and user-agent strings tied to form submissions are kept with that submission and deleted with it.

You can ask us to delete your information earlier — see section 9.

08How we protect it

We use encrypted connections (HTTPS) across the site, access-controlled credentials for the database, secrets held in server-side environment variables rather than in the browser, and anti-spam verification on every form. Access to contact records is limited to people who need it to do their work.

No system is completely secure. We can’t guarantee absolute security, and you send information to us at your own risk. If a data breach occurs that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

09Your rights

You can ask us at any time to:

  • Give you a copy of the personal information we hold about you.
  • Correct anything that is inaccurate, incomplete or out of date.
  • Delete your information, where we are not legally required to keep it.
  • Stop sending you marketing, or withdraw a consent you previously gave.

Email [email protected]to make a request. We’ll respond within 30 days, and we won’t charge you for a reasonable request. We may need to verify your identity first.

If you are in the EU or UK

You also have the right to restrict or object to processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority.

If you’re not satisfied

Contact us first at [email protected] so we can try to resolve it. If you remain unsatisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

10Children

This site is aimed at businesses and is not directed at children. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email [email protected] and we will delete it.

11Other sites

Our site links to third-party sites, including LinkedIn, X and Google Calendar. This policy doesn’t cover them. Read their privacy policies before giving them your information.

12Changes to this policy

We may update this policy as our services or systems change. The effective date at the top always reflects the current version. If we make a change that materially affects how we handle your information, we’ll take reasonable steps to tell you.

Questions about this policy? Email [email protected].