Privacy Policy

1. Who we are

NORMIX is operated by SHUO ZHANG.

ABN: 80 118 971 288

In this policy, “we”, “us” and “our” refer to NORMIX, operated by SHUO ZHANG (ABN 80 118 971 288). Our team may include consultants and collaborators authorised to act on our behalf.

Privacy enquiries: [email protected]

2. What this policy covers

This policy explains how we handle personal information in connection with this website and initial business enquiries.

If we undertake client work involving additional information or processing arrangements, these will be addressed in the relevant engagement documentation and, where necessary, additional privacy information.

3. Information you provide

If you contact us by email or telephone, we may receive your name, contact details, organisation, role, enquiry and any information or attachments you choose to provide.

Our website does not provide a consultation form or a public customer account.

Clicking “Email Us” opens an email application. Your message is sent through email services rather than stored in a website enquiry database.

Please avoid including sensitive personal information or confidential client materials in an initial enquiry. We will discuss suitable arrangements if such information is needed.

You may make a general enquiry without providing your full name, although we may need identifying and contact information to provide a proposal or deliver services.

4. Website and technical information

Our hosting and security providers may process technical information such as IP addresses, request times, requested URLs, browser information and security events to deliver and protect the website.

Authorised users accessing restricted preview or administration areas may also have authentication and access information processed.

This technical processing is separate from the content of an email enquiry.

5. Analytics and cookies

We do not currently use a website analytics service.

Restricted access and security features may use cookies or similar technologies where required for their operation.

We do not use advertising pixels or behavioural advertising on this website.

6. How we use information

We use relevant information to:

• respond to enquiries and communicate with you;
• understand potential service requirements;
• prepare proposals and administer agreed engagements;
• operate, protect and maintain the website;
• keep appropriate business records;
• address complaints, security issues or legal requirements.

We do not sell personal information.

7. Service providers and other recipients

We use service providers where necessary to operate our website and communications.

These include Cloudflare for hosting and security, and Google/Gmail for email communications. GitHub supports website source code and content management; enquiry emails are not intentionally copied into the website repository.

Authorised personnel or professional advisers may receive information where reasonably needed for an agreed purpose. We may also disclose information where required or permitted by law.

We do not intentionally publish enquiry information on the website.

8. Overseas processing

Our technology providers operate internationally. Information may be processed or stored outside Australia, including in the United States and other locations used by those providers.

We do not promise that all website or email information remains in Australia.

Provider locations and processing arrangements may change. Contact us to ask about the arrangements relevant to your information.

9. Storage and security

We take reasonable steps appropriate to the information and circumstances to restrict access and protect information against misuse, loss and unauthorised access or disclosure.

No internet transmission or storage method is completely secure. Ordinary email should not be used to send highly sensitive material without first agreeing an appropriate arrangement.

10. Retention

We retain information for as long as reasonably needed for the purpose for which it was collected, legitimate business records, applicable legal obligations or the resolution of disputes.

Retention decisions consider whether an enquiry became an engagement, the nature of the records and any applicable professional or legal requirements.

When information is no longer needed, we take reasonable steps to delete or de-identify it, subject to applicable obligations and the normal operation of backups and service-provider systems.

11. Access, correction and deletion requests

You may contact us to request access to or correction of personal information we hold about you. You may also ask us to delete information.

We may need to verify your identity. Requests will be assessed in light of applicable law, information we actually control and any legitimate requirement to retain records.

If we cannot fulfil a request, we will explain the reason where appropriate.

12. Privacy concerns and complaints

Please email [email protected] with the subject “Privacy enquiry” or “Privacy complaint”.

Describe the issue and how you would like us to respond, without including unnecessary sensitive information.

We will acknowledge your complaint and explain the next steps. We aim to provide a substantive response within 30 days, or explain why more time is needed.

If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner to ask whether your complaint falls within its jurisdiction:

https://www.oaic.gov.au/privacy/privacy-complaints

13. External websites

Links to third-party websites are provided for convenience or reference. Their information-handling practices are governed by their own policies.

14. Changes to this policy

We may update this policy when our services, technology or information-handling practices change. The current version and its effective date will be displayed on this page.