Privacy Policy.

Last updated: October 2026

This policy explains how Foundry 11 (ABN 87 176 788 968) ("Foundry 11", "we", "us") collects, uses, stores and discloses personal information. We work with businesses across Australia and New Zealand, and we handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the Information Privacy Principles in New Zealand's Privacy Act 2020.

What personal information we collect

We only collect the information we need. Depending on how you deal with us, this may include:

• Contact details, such as your name, email address, phone number, job title and the business you work for.
• Enquiry details you give us through our website forms, such as the HubSpot subscription you use, the systems you run and the problems you want help with.
• Client and project information, such as billing details, communications and the information we need to deliver our services.
• Website usage information, such as your IP address, browser and device type, the pages you visit and how you arrived at our site, collected through cookies and similar technologies.

We don't ask for sensitive information (such as health information) and we ask that you don't send it to us.

How we collect it

• When you fill in a form on our website or contact us.
• When you become a client, or work for a client, and we deliver services to you.
• When you visit our website, through cookies and analytics tools.
• From third parties where it's reasonable to do so, such as a referral, a HubSpot partner introduction or a public business profile.

Information we access while working for clients

When we implement, migrate or support systems like HubSpot for a client, we may be given access to personal information that the client holds about its own customers and contacts. In those cases we act on the client's behalf and under its instructions. The client remains responsible for that information under its own privacy policy, and we only use it to deliver the services we've been engaged for.

How we use personal information

• To respond to your enquiry and talk with you about our services.
• To prepare proposals, deliver services and provide support.
• To manage our relationship with you, including invoicing and accounts.
• To send you updates or insights, where you've agreed to receive them. You can unsubscribe at any time using the link in our emails.
• To understand how our website is used and improve it.
• To meet our legal obligations.

Cookies and analytics

Our website runs on HubSpot and uses HubSpot cookies to recognise returning visitors and connect form submissions to your contact record. We also use Google Analytics to understand how visitors use the site. You can control or delete cookies through your browser settings. Blocking cookies won't stop you using the site, but some features may not work as intended.

Who we share it with

We don't sell personal information. We share it only where needed to run our business or deliver our services, including with:

• Service providers we use, such as HubSpot (CRM, website hosting, forms and email), Microsoft (email and documents) and Google (analytics), and our accounting and payment providers.
• Technology partners, such as HubSpot, Celigo or Portant, where this is needed to deliver a service you've asked for, including buying or managing a HubSpot subscription through us.
• Professional advisers, such as our accountant or lawyer.
• Others where required or authorised by law.

Overseas disclosure

Some of our service providers store or process information outside Australia and New Zealand, including in the United States and other countries where they operate. We choose established providers that use recognised security and privacy protections, and we take reasonable steps to make sure overseas recipients handle personal information in line with Australian and New Zealand privacy law.

Automated decisions

We don't use computer programs to make decisions about individuals that could significantly affect their rights or interests. Our website forms and CRM may automatically route enquiries or send confirmation emails, but decisions about our services are made by people.

How we keep it secure

We store personal information in secure, access-controlled systems and limit access to people who need it. We keep information only as long as we need it for the purposes above or as required by law, then delete or de-identify it.

Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it. To make a request, use the form on our contact page and tell us what you need. We'll respond within a reasonable time, usually within 30 days. In limited cases the law allows us to decline a request, and if so we'll explain why.

Data breaches

If a data breach is likely to cause serious harm, we'll notify affected individuals and the relevant regulator as required under the Notifiable Data Breaches scheme in Australia or the Privacy Act 2020 in New Zealand.

Questions and complaints

If you have a question or complaint about how we've handled your personal information, contact us through our contact page. We'll look into it and respond within 30 days. If you're not satisfied with our response, you can contact:

• Australia: the Office of the Australian Information Commissioner at oaic.gov.au
• New Zealand: the Office of the Privacy Commissioner at privacy.org.nz

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.