Privacy Policy

Last updated: June 28, 2026

This Privacy Policy explains how Siilak (& Siilak) ("we", "us", "our") collects, uses, stores, and protects personal information when you use siilak.com and related websites, applications, and services operated on our multi-tenant platform (collectively, the "Services").

By using the Services, creating an account, submitting a form, making a booking, uploading content, or otherwise providing information to us, you acknowledge this Privacy Policy. Where required by law, we will ask for your consent separately (for example, for non-essential cookies or recruitment applications).

1. Who we are

Siilak (& Siilak) provides creative, digital, and business services including website and content management, media production, studio bookings, campaigns, recruitment tools, invoicing, and client portals.

For privacy enquiries and data subject requests, contact us at start@siilak.com or via the contact details shown on the site you are visiting.

2. Multi-site platform

Our platform hosts multiple websites ("Sites") for Siilak and its clients. Each Site may have its own branding, contact details, and content. Personal data is generally processed in the context of the Site you use and the service you request.

Site administrators and authorized staff may access data needed to operate that Site (for example, bookings, uploaded media, or support messages). We apply role-based access controls and process data only as needed to deliver the Services.

3. Information we collect

Account data: name, email address, password hash, profile details, avatar, role, and activity timestamps when you register or sign in.

Contact and form data: information you submit through contact forms, newsletter sign-ups, chat, support tickets, visitor uploads, or recruitment applications (including CVs and attachments).

Booking and business data: names, emails, phone numbers, booking dates, studio preferences, invoices, client records, campaign content, and related metadata.

Usage and technical data: pages viewed, referrers, browser/device type, IP address, session identifiers, and interaction events when analytics cookies are enabled.

Cookies and similar technologies: essential cookies (session, locale, cookie consent) and, with your consent, analytics cookies such as internal visit tracking and Microsoft Clarity when configured for a Site.

Payment-related data: where payments are processed, transaction references and billing details may be handled by our payment provider; we do not store full card numbers on our servers.

4. How we use your information

Provide, operate, and improve the Services, including CMS pages, media hosting, bookings, campaigns, and user accounts.

Authenticate users, maintain security, prevent abuse, and enforce our terms.

Respond to enquiries, provide customer support, and deliver requested communications.

Process recruitment applications and manage hiring workflows where you have consented.

Analyze Site usage and performance when you have accepted analytics cookies.

Comply with legal obligations and protect our rights, users, and the public.

5. Cookies and consent

We use essential cookies that are necessary for the Services to function (for example, login sessions, language preference, and storing your cookie choice).

Non-essential analytics cookies are used only after you choose "Accept all" or enable analytics in "Manage preferences". You can change your choice at any time via the "Cookie preferences" link in the site footer.

See our cookie banner and this policy for details about analytics tools that may be loaded after consent.

6. Legal bases (EEA, UK, and similar jurisdictions)

Contract: processing needed to provide the Services you request (accounts, bookings, deliveries).

Legitimate interests: securing our platform, improving Services, and communicating about your account or transactions, balanced against your rights.

Consent: non-essential cookies, marketing where applicable, and recruitment data retention where consent is requested.

Legal obligation: records we must keep for tax, accounting, or regulatory purposes.

7. Sharing and processors

We do not sell your personal information. We may share data with trusted service providers who help us operate the Services, such as hosting providers, email delivery, analytics (when consented), map services (Mapbox), and payment processors. These providers may only process data on our instructions and subject to appropriate safeguards.

We may disclose information if required by law, court order, or to protect the rights, property, or safety of Siilak, our users, or others.

8. International transfers

Our infrastructure and providers may process data in the European Economic Area and other countries. Where data is transferred outside your jurisdiction, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required.

9. Data retention

We retain personal data only as long as needed for the purposes described in this policy, unless a longer period is required by law. Account data is kept while your account is active and for a reasonable period afterward. Booking, invoice, and business records may be retained for statutory accounting periods. Analytics data is retained according to our internal analytics retention settings. Recruitment data is retained for the duration of the hiring process and as agreed in your application consent unless a longer period is required by law.

10. Your rights

Australian Privacy Act: you may also request access to and correction of your personal information, and complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your data.

Access a copy of the personal data we hold about you.

Correct inaccurate or incomplete data.

Request deletion of your data where applicable.

Restrict or object to certain processing.

Data portability where technically feasible.

Withdraw consent at any time for processing based on consent (such as analytics cookies).

Lodge a complaint with your local data protection authority.

11. How to delete your data

To request deletion or export of your personal data, email start@siilak.com from the address associated with your account and describe your request. We may need to verify your identity before processing deletion.

You can delete some content yourself (for example, profile information or uploaded media where the product allows). We may retain minimal records where required for legal, security, or accounting purposes.

Clearing cookies in your browser removes local cookie data; use "Cookie preferences" in the footer to withdraw analytics consent.

12. Security

We use administrative, technical, and organizational measures to protect personal data, including access controls, encrypted transport (HTTPS), and secure session handling. No method of transmission or storage is completely secure; please use a strong password and protect your account credentials.

13. Children

The Services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be communicated on the Site or by email where appropriate.

15. Contact

Siilak (& Siilak) — privacy enquiries: start@siilak.com

If you use a client Site hosted on our platform, you may also contact that Site's published contact email for matters specific to that Site.