Legal

Privacy Policy

Last reviewed: 11 May 2026 · Effective: 11 May 2026

NextWave ("we", "us", "our") is an Australian business providing AI automation and digital transformation services. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what information we collect, why we collect it, how we use and disclose it, and your rights regarding that information.

1. What information we collect

Information you give us directly

Contact details — name, email address, phone number, business name
Inquiry content — messages, service requirements, and budget information submitted via our contact form or chatbot
Payment information — billing details processed by Stripe. We do not store card numbers; Stripe handles payment data under their own privacy policy and PCI-DSS compliance

Information collected automatically

Usage data — pages visited, time on site, referrer source, and browser type, collected via Vercel Analytics
Geographic data — country and region derived from your IP address at the edge, used solely to personalise currency display and region-specific content. This data is processed at request time and is not stored linked to your identity
Session data — standard web server logs retained for up to 30 days for security and troubleshooting purposes

2. Why we collect your information

We use your personal information to:

Respond to your service inquiries and provide quotes
Deliver and support the services you engage us for
Send transactional communications (booking confirmations, invoices, project updates)
Improve the performance and usability of our website
Comply with our legal obligations

We do not use your personal information for unsolicited direct marketing without your consent. If you have engaged us for services, we may contact you about related offerings — you can opt out at any time by emailing ns@nextwave.au.

3. Disclosure of your information

We disclose personal information only as necessary to deliver our services:

Resend — transactional email delivery. Your email address and name are passed to Resend solely to send emails you have initiated (inquiry confirmations, booking receipts)
Stripe — payment processing. Billing information is processed directly by Stripe under their terms
Vercel — website hosting and analytics. Vercel Analytics collects aggregated, anonymised usage data. No personal identifiers are sent
AI service providers (Google Gemini, Groq) — content entered into our AI tools may be processed by these providers. Do not enter sensitive personal information into AI tool fields

We do not sell, trade, or rent your personal information to third parties. We do not use advertising networks or cross-site tracking.

4. Overseas disclosure

Some of our service providers are based outside Australia (United States). Before disclosing personal information to overseas recipients, we take reasonable steps to ensure they handle information in a manner consistent with the APPs, or we obtain your consent.

5. Data retention

Inquiry and contact data: retained for 3 years or until you request deletion
Project and billing records: retained for 7 years to meet Australian tax and accounting obligations
Analytics data: aggregated, not linked to individuals; retained indefinitely
Web server logs: 30 days

6. Security

We use HTTPS, Stripe's PCI-DSS-compliant payment vault, and access controls on all systems that hold personal data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take commercially reasonable precautions.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your information (subject to our legal retention obligations)
Complain if you believe we have breached the APPs

To exercise any of these rights, email ns@nextwave.au with the subject line Privacy Request. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Cookies and tracking

See our Cookie Policy for details on what cookies we use and how to control them.

9. Changes to this policy

We may update this policy as our services or legal obligations change. Material changes will be noted at the top of this page with a revised effective date. Continued use of our services after any change constitutes acceptance of the updated policy.

10. Contact

Privacy enquiries: ns@nextwave.au
NextWave · Melbourne, Victoria, Australia