Privacy Policy.

This document combines our privacy statement and privacy policy. It describes in plain language what data we collect, why, how we use it, and who we work with.

Cenaramar does not sell personal data. To run our services we share limited personal data with a small number of trusted operational suppliers (for example, our email provider, our hosting provider, and our payment processor when applicable). Those companies do not sell your personal data and are contractually prevented from doing so. They may use the data only for the purposes we have engaged them for and must handle it in a confidential and secure manner consistent with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).

It is important to us that you know how your data is collected and used by Cenaramar.

Overview

At Cenaramar we respect the privacy of personal information in our care. This Privacy Policy describes how we deal with personal information we collect about visitors to cenaramar.com, recipients of our cold outreach emails, prospects who view their preview sites at regen.cenaramar.com, clients we work with on website projects, and anyone who contacts us via email or social media.

If you are a contractor or job applicant working with us, please contact us directly for details about how we handle your personal information — those arrangements are outside the scope of this policy.

Types of personal information collected

The types of personal information we may collect include:

• Identity and contact details: name, business name, email address, phone number, business address, and social media handles (e.g. Instagram).
• Business information: publicly available information about your business that we use to research and build website previews — for example, your existing website's content, your Google Business reviews, opening hours, services offered, and photos.
• Communications: records of emails, messages, calls, and meetings between you and us, including any feedback, briefs, or change requests you send.
• Project artefacts: brand assets you provide (logos, photos, copy), draft content, design preferences, and any files you upload as part of a project.
• Payment details: if you become a client, your billing name and the details required to process invoices. We do not store full credit card numbers; payment processing is handled by our payment provider.
• Technical data: when you visit our websites, your IP address, browser type, device type, referring URL, and pages viewed. See Digital services below for detail.

We may not be able to provide our services without your personal information. For example, we cannot send you a preview, deliver a website project, or invoice you without your name and email.

How personal information is collected and held

We may collect personal information from your interactions with us, including when you:

• respond to a cold outreach email from us (for example, from [email protected]);
• visit a preview website we have built for your business;
• contact us directly via email, phone, or social media;
• engage us as a client and provide information needed to deliver the project; or
• visit one of our websites (cenaramar.com, regen.cenaramar.com, or related domains).

We may also collect publicly available information about your business — for example, the contents of your existing website, your Google Business profile, public photos, public reviews, and your social media presence — in order to research the business and build a tailored website preview to show you.

We may monitor and record communications with us (including email) for security, dispute resolution, and quality purposes.

We hold personal information electronically using reputable hosting and email providers based primarily in Australia, the United States, and the European Union. We implement reasonable measures to protect the security of that personal information, including encrypted transport (TLS), access controls on our systems, and regular software updates. We take measures in respect of destroying or de-identifying personal information that is no longer needed for any lawful purpose.

Purposes for handling personal information

We handle your personal information to:

• provide, deliver, administer, and improve our website-design services;
• research businesses we may pitch to and prepare tailored previews;
• contact you with proposals, project updates, and follow-ups;
• process payments and issue invoices;
• respond to questions, feedback, and complaints;
• maintain our records and improve our internal processes;
• comply with our legal obligations.

We may send you direct marketing communications by email — for example, an initial cold outreach about a preview we have built for your business, or follow-ups regarding our services. Every marketing email we send includes a clear way to opt out (a working List-Unsubscribe header for one-click removal in supported clients, plus a reply-to-unsubscribe instruction). To opt out of any further marketing communications, email [email protected] with the subject "Unsubscribe" and we will remove you from our outreach lists.

We do not currently send SMS marketing.

Sharing of personal information

We do not sell your personal data to any third party.

We may share limited personal information with service providers we engage to operate our business. The main categories are:

• Email hosting and delivery: Migadu (Switzerland) hosts our mailboxes and handles inbound and outbound email for cenaramar.com and cenaramarstudio.com.
• Website hosting and CDN: our websites and the preview sites at regen.cenaramar.com are served via Cloudflare and our own infrastructure. Cloudflare may collect access logs (IP address, user agent, request URL) as part of providing the service.
• AI and image generation services: we use third-party AI services (e.g. OpenAI, Anthropic, ByteDance image and video generation services, Google) to research businesses and generate draft assets. We send these providers prompts and reference materials that may include publicly available information about a business; we do not knowingly send them sensitive personal information about individuals.
• Payment processing: if and when we collect payment, the processor (e.g. Stripe) handles your payment details directly. We do not store full credit card numbers.
• Professional advisers: our accountant and any legal advisers we engage from time to time, when relevant to a matter.

These providers do not sell your personal data and are bound by their own privacy obligations and our agreements with them. We may also disclose personal information where we are required to do so by law or to protect our lawful interests.

Digital services, cookies, and analytics

We provide information and services through a range of digital channels including websites (e.g. cenaramar.com, regen.cenaramar.com), email, and our presence on platforms such as Instagram. These services are operated by us or our service providers.

Our websites do not use third-party tracking analytics (Google Analytics, Facebook Pixel, etc.) at the time of writing. Cloudflare, as our CDN/proxy, may record server-side access logs for security and operational purposes; these typically include your IP address, browser, operating system, and the URL you requested.

Our websites may use small data files commonly known as cookies only to the extent necessary for the site to function (for example, remembering whether you have dismissed a notification). We do not currently use third-party advertising or behavioural tracking cookies. If we add such cookies in future, we will update this policy and provide an appropriate consent mechanism.

You can configure your browser to reject and delete cookies and to block JavaScript. Doing so may limit the functionality of some parts of our websites.

Our websites may contain links to other sites. We are not responsible for the privacy practices or policies of those sites and recommend that you review their own privacy policies before providing personal information to them.

Preview sites at regen.cenaramar.com

As part of our outreach we may build a preview website for a prospective client and host it at regen.cenaramar.com/<your-business-slug>/. These preview sites:

• are gated by HTTP Basic Authentication so they are not accessible to the general public or search engines;
• carry HTTP and HTML directives instructing search engines and AI crawlers not to index them (X-Robots-Tag: noindex, <meta name="robots" content="noindex">, robots.txt Disallow);
• display a clearly marked disclosure bar at the bottom of every page identifying the site as an unofficial preview built by Cenaramar and not affiliated with the business shown;
• contain content drawn from publicly available sources about your business (your website, Google Business profile, public reviews, etc.) — we do not include private information you have not made publicly available.

If you are the business shown in a preview and you would like the preview removed, email [email protected] with "Preview removal request" in the subject line and we will take it down promptly (typically within one business day) and remove the underlying data from our active systems within a reasonable period thereafter.

Procedures for access, correction, and feedback

You have a right under the Privacy Act 1988 (Cth) to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. If you wish to access or correct any personal information we hold about you, or have any feedback or concerns about privacy, please contact us at [email protected].

Where you seek a response from us, we will let you know who is handling your matter and when you can expect a full response. In the case of access and correction requests, please provide as much detail as you can about the particular information you seek so we can retrieve it efficiently. We may need to verify your identity before disclosing personal information.

Under the Privacy Act we are required to provide our reasons if we refuse a request. Where we decide not to make a requested correction and you disagree, you may ask us to make a note of your requested correction with the information.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact

Queries regarding privacy should be directed to:

Cenaramar
Sydney, Australia
[email protected]