Privacy Policy

1. Who we are

LEXYLON (ABN 81 834 713 796) is a software engineering consultancy headquartered in Melbourne, Australia. We handle personal information in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth), and this policy explains what that means in practice when you use lexylon.com or correspond with us.

Privacy is not a compliance checkbox for a firm whose work sits inside client production systems. The same discipline we apply to enterprise data applies to yours, starting with a simple principle: we collect almost nothing.

2. What we collect

The only personal information we hold is what you choose to send us:

• Enquiry and discovery session forms: your name, work email address, company name, and the message you write.
• Direct correspondence: emails you exchange with us at hello@lexylon.com, including anything you attach to them.
• Site usage data: the pages you view, how long they take to load, your browser and device type, the site that referred you, and a rough location derived from a truncated IP address. This comes from the measurement tools described in section 3 and is never joined to your name or email address.

This website has no user accounts, no login, and no profiling of any kind.

3. Analytics and cookies

We measure how the site is used so we can tell which pages help visitors and which ones need work. Two tools do that job:

• Google Analytics 4 sets first-party cookies (named _ga and _ga_ followed by a property code) that tell one browser apart from another between visits. Google truncates IP addresses before storing them, advertising and remarketing features are switched off, and Google may process this data on servers outside Australia under its own privacy terms.
• Vercel Web Analytics and Speed Insights count page views and loading performance without cookies and without any identifier that persists from one visit to the next.

Neither tool receives the contents of a form, your name, or your email address. No advertising or marketing cookies are set by this site, and we never sell, rent, or trade personal information to anyone, for any reason. If you would rather not be counted, block cookies for lexylon.com in your browser or install the Google Analytics opt-out add-on; the site works identically either way.

4. How we use your information

We use the details you provide to reply to you, to schedule and prepare discovery sessions, and to deliver the engagements you ask us to undertake. For visitors in regions covered by the GDPR or UK GDPR, our lawful bases are your consent (when you submit a form) and our legitimate interest in responding to a request you initiated.

5. Client engagements and confidentiality

Information shared during a consulting engagement is governed by the written agreement and any non-disclosure terms covering that engagement, and those documents prevail over this policy wherever they are stricter. Our standing position is absolute discretion: the systems we build and the environments we work in stay confidential unless a client gives us written permission to say otherwise.

6. Service providers and overseas disclosure

Form submissions and our replies travel through a reputable third-party email delivery provider, which may process data on infrastructure located outside Australia. Where personal information crosses a border this way, we take reasonable steps, consistent with Australian Privacy Principle 8, to ensure the recipient handles it to a standard comparable with Australian law. Site usage data is processed by Google (analytics) and Vercel (hosting and performance measurement), both of which run infrastructure outside Australia. We do not hand your details to any other category of third party.

The website assistant is an AI chat. What you type into it is sent to Anthropic's Claude model through Vercel AI Gateway to generate a reply, and both may process that text outside Australia under their own terms. Lexylon does not store assistant conversations. If you ask the assistant to have us contact you, the details you give it and the conversation so far are emailed to us as an enquiry and handled like any other enquiry under this policy. Do not share confidential or sensitive information through the assistant; use the discovery session for that.

7. Security and retention

Collecting little is the strongest safeguard, and we add encryption in transit and access limited to the people who need to answer you. We keep enquiry details only as long as the conversation or engagement they belong to remains active, plus any period Australian law requires for business records, after which they are deleted. Analytics data is retained for 14 months and then discarded automatically.

8. Your rights

You can ask us at any time to access, correct, or delete the personal information we hold about you by writing to hello@lexylon.com. We respond within 30 days. Visitors protected by the GDPR, UK GDPR, or comparable laws keep every right those frameworks grant, exercised through the same address. If a data breach ever occurred that was likely to result in serious harm, we would notify affected individuals and the regulator under the Notifiable Data Breaches scheme.

9. Complaints

If you believe we have mishandled your information, contact hello@lexylon.com and we will investigate promptly. Australian residents who remain unsatisfied can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to this policy

Any revision to this policy is published on this page with an updated effective date. Material changes to how we handle enquiry data would be flagged plainly at the top of the document.