Privacy policy

When you contact us, we may collect:

• your name and email address, and your organisation if you choose to provide it;
• the type of enquiry you select;
• the contents of your message and subsequent correspondence;
• information needed to assess or manage a potential research, commercial, investment, supplier, media or other professional relationship; and
• any other information you choose to provide.

Vercel, which hosts and secures the website, may process technical request information such as a source IP address, request time, requested path, response status and security events. You may browse the public website without telling us your name.

The enhanced contact form uses a random submission identifier and a completion-time marker to manage retries, prevent duplicate delivery and detect likely automated submissions. These controls do not create a user account or persistent browser identifier.

The website is not designed to collect sensitive personal information, identity documents, payment information, attachments or confidential technical material. Please do not submit confidential, proprietary, patent-sensitive, customer-sensitive or export-controlled information through the general contact form. If we receive information we did not request and do not reasonably need, we may delete or de-identify it where appropriate.

We collect personal information:

• directly from you when you use the contact form, email us or otherwise communicate with us;
• automatically through Vercel infrastructure used to deliver and secure the website; and
• from your organisation or another person where they introduce or refer you to us.

An accepted contact-form request exists in the application only long enough to validate the submission and send the resulting email through Resend. The application does not keep a database, file, queue or analytics copy of the form payload.

The delivered email is received and held in Photon Foundry’s Google Workspace business email environment. Limited operational event information is held temporarily in Vercel runtime logs as described under Retention below.

If you do not provide information marked as required, we may be unable to route or respond to your enquiry.

We may use personal information to:

• receive, assess, route and respond to enquiries;
• communicate with you and manage professional relationships;
• evaluate potential research, commercial, supplier, investment or collaboration discussions;
• operate, maintain and secure the website;
• prevent abuse, spam, fraud, duplicate delivery and other security threats;
• maintain appropriate business records;
• comply with legal obligations; and
• establish, exercise or defend legal rights.

Submitting an enquiry does not create an account, trigger an automatic reply or subscribe you to a marketing list. If we later send commercial electronic messages, we will do so with consent or as otherwise permitted by law and will provide a way to unsubscribe.

We do not sell or rent personal information.

We may disclose personal information where reasonably necessary to:

• Photon Foundry personnel and professional advisers who need it for the relevant purpose;
• Vercel, for website hosting, firewall protection, security and short-lived runtime logging;
• Resend, for contact-form email delivery;
• Google Workspace, for receipt and storage in Photon Foundry’s business email environment;
• regulators, courts, law-enforcement bodies or other parties where required or authorised by law;
• protect the rights, safety or security of Photon Foundry, website users or others; or
• support a proposed corporate transaction, subject to appropriate confidentiality safeguards.

Service providers may process information only for the services they provide or as otherwise permitted by their agreements and applicable law. Photon Foundry does not use a Log Drain or another external observability service to retain a second copy of contact-form operational logs.

Vercel and Resend are based in the United States and may process personal information there. Google Workspace and these providers’ subprocessors may process personal information in the United States or other countries in which they operate.

Where required by law, we take reasonable steps to ensure overseas recipients handle personal information appropriately.

Photon Foundry does not enable website analytics, Vercel Web Analytics, Speed Insights, advertising tracking or cross-site behavioural advertising on the public website.

The website application does not set an analytics, advertising or contact-form cookie and does not use local storage or session storage to identify visitors. The contact form does not use a CAPTCHA. Resend open and click tracking is not enabled for contact-form email delivery.

The contact form uses a hidden honeypot, an approximate completion-time marker and a random submission identifier. Vercel’s firewall processes a source IP address to apply abuse controls. The application does not copy a raw or hashed IP address into its contact-form operational logs.

We will update this policy before materially changing these practices.

We use reasonable administrative, technical and organisational safeguards appropriate to the information we hold. These may include restricted access, authentication controls, encryption in transit, service-provider controls, monitoring and secure deletion processes.

No internet transmission or storage system can be guaranteed to be completely secure. Please use the contact form only for an initial, non-confidential enquiry.

If a data breach occurs, we will investigate and respond. Where required by law, we will notify affected individuals and the Office of the Australian Information Commissioner.

The application does not retain a form-payload copy after the request. Its allowlisted operational event records may contain a timestamp, controlled outcome, deployment environment, enquiry category, random submission identifier and Resend message identifier, but not the submitted name, organisation, email address or message. Vercel retains these runtime logs for one day under the current Photon Foundry plan, and no Log Drain retains another copy.

Resend’s published service documentation currently states that it retains email data for 30 days, subject to its legal obligations and backup processes.

Enquiries and subsequent correspondence retained through Google Workspace are kept only for as long as reasonably necessary to respond, manage an ongoing professional relationship, maintain appropriate business records, manage disputes, comply with legal and record-keeping requirements, or establish, exercise or defend legal rights.

When personal information is no longer required, we take reasonable steps to delete or de-identify it, subject to lawful retention requirements.

You may ask whether we hold personal information about you and request access to or correction of that information. We may need to verify your identity before responding.

We will not charge you merely for making a request. If applicable law permits a reasonable charge for providing access, we will explain it in advance. We may refuse or limit a request where permitted by law and, where required, will explain why and identify available complaint options.

If you believe we have mishandled your personal information, please contact our Privacy Officer using the details below. You do not need to use a particular form, but enough detail to understand your concern will help us investigate it.

We will acknowledge the complaint promptly and aim to provide a substantive response within 30 days.

If the Privacy Act applies and you remain dissatisfied, you may be able to complain to the Office of the Australian Information Commissioner.

We may update this policy when our practices, services or legal obligations change. The current version and effective date will be published on this page. We will provide reasonable notice of material changes where practicable.