Privacy Policy

JXM Studio (“JXM Studio”, “we”, “us”) is a web design, advertising and AI implementation studio based in Auckland, New Zealand, with an Australian base in Melbourne. We build websites, run ad campaigns and implement AI systems for businesses across New Zealand and Australia.

This policy explains what personal information we collect, why we collect it, who we share it with and what you can do about it. It covers www.jxmstudio.com, every form and landing page on it, and the lead forms we run on Facebook, Instagram and Google.

We handle personal information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where we deal with people in Australia, we also follow the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Information you give us

When you fill in a form on our site, submit an Instant Form on Facebook or Instagram, book a call, email us or call us, we collect what you put in it. Depending on the form that is typically your name, email address, phone number, business name, website address, your location or service area, and your answers about what you are trying to achieve, your budget and your timeline.

Information collected automatically

When you visit the site we and our analytics providers collect technical information: IP address, browser and device type, referring URL, the pages you view, how far you scroll, what you click, and the ad, campaign or search that sent you. We also record anonymised session replays of site visits through PostHog so we can see where pages confuse people and fix them.

Information from advertising platforms

If you submit a lead form inside Facebook, Instagram or Google, that platform passes us the details you entered in it, along with the ad and campaign the form belonged to.

Client project information

If you become a client we collect what the project needs: billing details, account access you choose to grant us, content you send us, and the contact details of people on your team we need to work with. We do not go looking for personal information beyond what the work requires.

We do not deliberately collect sensitive information such as health, racial or ethnic origin, religious beliefs or criminal record. Please do not send it to us.

We use personal information to:

• reply to your enquiry, quote on work and book calls with you
• deliver the services you have engaged us for, and invoice you for them
• send you follow-ups about an enquiry you started, and occasional updates and offers you can unsubscribe from at any time
• measure which pages, ads and campaigns actually produce enquiries, so we stop paying for the ones that do not
• improve the site, fix problems and keep it secure
• meet our legal, tax and record-keeping obligations

We do not sell your personal information, and we do not rent or trade contact lists.

The site uses cookies and similar technologies. Some are needed to make pages work. Others are for analytics and advertising. The tools we run are:

• Google Analytics 4 and Google Tag Manager, for traffic and behaviour reporting.
• Google Ads conversion tracking, so we can see which ads and keywords produce enquiries.
• Meta Pixel and the Meta Conversions API, so Facebook and Instagram can attribute enquiries and sales to the right ad. Where we send Meta information about a customer, contact details are hashed before they leave us.
• PostHog, for product analytics, conversion funnels and session replay. PostHog traffic is proxied through our own domain.
• Cal.com, for scheduling calls you book with us.

You can block or delete cookies in your browser settings. You can opt out of Google Analytics with the Google Analytics opt-out add-on, and control ad personalisation in Google My Ad Center and your Facebook ad preferences. Blocking cookies may stop parts of the site working properly.

We share personal information only with the service providers we need to run the business, and only for the purposes above. They include:

• hosting and infrastructure providers, including Vercel and Cloudflare
• Google, for Workspace email, Google Sheets, Analytics, Tag Manager and Google Ads
• Meta, for Facebook and Instagram advertising and lead forms
• PostHog, for analytics and session replay
• Cal.com, for call bookings
• our internal CRM and email tools, for tracking and following up enquiries
• our accountant and payment providers, for invoicing

Several of these providers store data outside New Zealand and Australia, including in the United States and the European Union. When information leaves the country we take reasonable steps to make sure it is protected by comparable safeguards.

We will also disclose information where the law requires it, or where it is necessary to protect our rights, our clients or someone’s safety.

Enquiries that do not turn into work are kept for up to two years, so we recognise you if you come back. Client records are kept for the life of the engagement and for seven years afterwards, which is what our tax and record-keeping obligations require. Analytics data is kept on the retention settings of each platform, generally 14 months or less for Google Analytics. When information is no longer needed we delete it or de-identify it.

The site runs over HTTPS. Access to our forms, CRM and client accounts is limited to the people who need it, protected by strong passwords and two-factor authentication, and reviewed when someone leaves a project. No system is perfectly secure, so we cannot guarantee it, but if a breach happens that is likely to cause serious harm we will notify you and the relevant Privacy Commissioner as the law requires.

You can ask us at any time to:

• tell you what personal information we hold about you
• give you a copy of it
• correct anything that is wrong or out of date
• delete it, where we are not required to keep it
• stop sending you marketing emails, which you can also do from the unsubscribe link in any of them

Email web@jxmstudio.com and we will respond within 20 working days. There is no charge. We may need to confirm who you are before we release anything.

If you are not happy with how we have handled your information, you can complain to the Office of the Privacy Commissioner in New Zealand at privacy.org.nz, or to the Office of the Australian Information Commissioner at oaic.gov.au.

Our site links to other websites and to work we have built for clients. We are not responsible for their privacy practices, so read their policies before handing over information.

Our services are for businesses. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

We update this policy when our tools or our obligations change. The current version is always on this page with the date it was last updated at the top. Material changes will be highlighted here.