Privacy Policy

In this Privacy Policy, “Preforma”, “we”, “us” and “our” refer to Xiaoshuai Song, also known as Shawn Song, trading as Songable Studio, a sole trader, ABN 89 831 726 266, operating the Preforma service brand.

Preforma is not a separate legal entity or company.

This policy does not state that the Privacy Act 1988 applies where that legal question has not been determined.

Preforma may collect:

1. your name and contact details
2. property addresses and general property information
3. enquiry responses and correspondence
4. project objectives, priorities, timing and budget context
5. referral information
6. newsletter consent records
7. technical information reasonably required to operate and protect the website

If an engagement proceeds, Preforma may also receive:

1. property documents and plans
2. photographs
3. authority and planning information
4. specialist reports
5. client instructions
6. information required to prepare and deliver the agreed review

Do not submit contracts, identity documents, financial information or other highly confidential documents through the public enquiry form.

Detailed property documents should only be provided after the initial enquiry and through the communication or transfer method agreed with Preforma.

Information may be used to:

1. receive, assess and respond to enquiries
2. determine whether a requested service may be suitable
3. prepare proposals and define the service scope
4. communicate with clients
5. provide and administer agreed services
6. maintain business and engagement records
7. respond to questions, concerns or disputes
8. operate and protect the website and related systems
9. comply with applicable legal obligations

Newsletter consent is optional and is separate from submitting an enquiry.

Where you opt in, Preforma may record information such as:

1. your email address
2. the consent wording and version
3. the selected language
4. the source page
5. the submission date and time

Preforma may use Brevo to manage newsletter subscriptions and send marketing communications.

Marketing messages will identify Preforma, provide contact information and include a way to unsubscribe.

Service communications relating to an enquiry or engagement are separate from optional marketing communications.

Preforma may use approved third-party providers for services such as:

1. website hosting
2. email delivery
3. newsletter management
4. document transfer and storage
5. communications
6. security
7. other technical business functions

Brevo processes enquiry or newsletter information where used for those functions.

1. the client requests or authorises the disclosure
2. the disclosure is reasonably required to provide an agreed service
3. the disclosure is permitted or required by law

Some service providers may store or process information outside Australia, depending on their infrastructure and account configuration.

Preforma does not sell personal information.

Client information, documents or reports will not ordinarily be disclosed to an independently identified or referred professional unless:

Clients remain responsible for deciding whether to appoint any recommended professional.

Preforma takes reasonable steps appropriate to its operations to protect information against loss, misuse, interference and unauthorised access, modification or disclosure.

However, no website, email system or internet transmission can be guaranteed completely secure.

Clients should use the separately agreed method when providing detailed or confidential documents.

If Preforma becomes aware of a data incident, it will assess the incident and take reasonable response steps, including notifications where required by applicable law.

Personal information is retained only for as long as reasonably required for:

1. the relevant enquiry or engagement
2. service administration
3. business and financial records
4. dispute management
5. security purposes
6. applicable legal or regulatory obligations

Information that is no longer reasonably required will be deleted, destroyed or de-identified where reasonably practicable.

You may contact Preforma to:

1. request access to personal information held about you
2. request correction of inaccurate information
3. withdraw newsletter consent
4. ask how your information has been handled
5. raise a privacy concern

Preforma will assess the request and explain any lawful or practical reason why it cannot be completed in full.

The website uses a functional locale cookie to remember whether you selected the English or Simplified Chinese version of the website.

The website includes Vercel Analytics for visitor measurement, Vercel Speed Insights for performance measurement and, when configured, Google Ads tracking for advertising and successful enquiry conversions. Google Ads may use cookies and process technical information. These services are separate from the optional Insights engagement feature described below.

When Insights engagement is enabled, a first-party browser cookie helps remember anonymous likes and reduce repeated view counts. It expires after 180 days without a successful engagement request. No visitor registration is required, and this feature does not collect your name or email address.

Views count article visits, not completed reads or verified unique people. Likes represent anonymous browser identities. Clearing or blocking cookies may reset your like state and prevent reliable deduplication.

The server uses a secret key to hash article-specific browser identifiers before storing them in Supabase PostgreSQL. View deduplication lasts 24 hours. Expired view and security rate-limit records are scheduled for removal daily, normally within 48 hours. Active likes remain counted until you unlike, we can validate and fulfil a deletion request, or the article is retired. We retain only the article association and an article-specific pseudonymous identifier for an active like, without a like timestamp, name, email address, raw IP address or user agent. Aggregate view totals remain without individual visit histories.

For abuse prevention, the server briefly processes the connecting IP address and derives a daily keyed hash. The engagement database does not store raw IP addresses or user agents. Hosting providers may separately process technical logs under their own retention settings.

Supabase and our hosting provider process this information to operate the feature and may process data outside Australia, depending on project configuration. Engagement is not used to subscribe you to marketing. You may contact us with privacy or deletion questions; because the identifiers are pseudonymous, we may be unable to associate a record with you without information from your browser. If your cookie expires, is cleared or is replaced, we cannot recover your previous like identity: its like can remain counted, you may not be able to unlike or identify it for deletion, and a new browser identity may add another like. We do not collect extra identifying information to restore that link.

Preforma may update this Privacy Policy when its services, systems, providers or legal obligations change.

The current version and its last-updated date will be published on this page.

Privacy questions, access requests, correction requests or complaints:

Email: hello@preforma.au