1. Who we are
OnePage Studios (“we”, “us”, “our”) is a trading name of Kelvin Amarelle, a sole trader based in New South Wales, Australia. We design and build one-page websites for small businesses, mainly in the United Kingdom, Australia and the United States.
We are the “controller” of the personal information described in this policy. We handle personal information in line with the UK General Data Protection Regulation and Data Protection Act 2018 (for people in the UK), the EU GDPR where it applies, and the Australian Privacy Principles in the Privacy Act 1988 (Cth).
2. What we collect
Information you give us
When you use our enquiry form, email us or become a client, we may collect:
- Contact details: your name, email address, phone number (optional) and country.
- Business details: your business name and type, current website or social pages, domain, and a description of your business and customers.
- Project details: your goals, the sections and features you want, branding and content status, package, hosting preferences, preferred currency, timing and any other information you choose to share.
- Project materials: text, images, logos and login details for third-party platforms you give us so we can build or host your website.
- Billing details: information needed to invoice you and record payments. We don't store full card numbers. Payments are handled by our payment providers.
Information collected automatically
- Analytics (only with your consent): if you accept analytics cookies, Google Analytics collects information such as pages viewed, approximate location, device and browser type, and how you arrived at the site.
- Server logs: our hosting provider may record technical information such as IP address, browser type and time of visit for security and reliability.
- Preferences: your browser stores your cookie choice and preferred display currency (see Cookies).
Please don't send us sensitive information (such as health information) through the enquiry form. We don't need it to quote for a website.
3. How we use it, and our lawful bases
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Responding to your enquiry and preparing a quote | Steps taken at your request before entering a contract; our legitimate interest in responding to enquiries |
| Designing, building, launching and supporting your website, and providing the Hosting & Care Plan | Performance of our contract with you |
| Invoicing, payments, record keeping and tax | Legal obligation; performance of a contract |
| Understanding how our website is used (Google Analytics) | Your consent, which you can withdraw at any time |
| Keeping our website secure and working properly | Our legitimate interests |
| Showing completed work in our portfolio, as set out in our Terms | Our legitimate interests (you can ask us not to) |
We don't sell your personal information, and we don't use it for automated decision-making or profiling. We won't send you marketing emails unless you've asked to receive them.
4. Who we share it with
We only share personal information with service providers who help us run the business, and only as much as they need:
- Web3Forms: processes enquiry form submissions and delivers them to our inbox.
- Our email provider: stores enquiries and project correspondence.
- Google (Google Analytics): website analytics, only if you consent.
- Hosting, domain and infrastructure providers: hosting this site and, if you choose our Care Plan, your website.
- Payment providers and accounting software: processing and recording payments.
- Professional advisers: such as accountants or lawyers, where necessary.
- Authorities: where we're required to by law.
5. International transfers
We're based in Australia, so information you send us is accessed and stored in Australia. Some of our service providers (including Google and Web3Forms) may process data in other countries, including the United States. Where UK or EU data protection law requires it, we rely on appropriate safeguards for these transfers, such as the UK International Data Transfer Addendum or Standard Contractual Clauses, the UK–US data bridge, or the provider's own approved transfer mechanisms.
6. Cookies & analytics
We keep cookies to a minimum. Analytics cookies are never set unless you click “Accept analytics” in our cookie banner.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| ops-consent-v1 | Essential (browser storage) | Remembers your cookie choice | Until you clear it |
| ops-currency | Preference (browser storage) | Remembers your preferred display currency | Until you clear it |
| _ga | Analytics (Google) | Distinguishes visitors so we can count visits | 2 years |
| _ga_<ID> | Analytics (Google) | Keeps track of session state | 2 years |
You can change your choice at any time using . If you reject analytics, we'll delete any Google Analytics cookies set on this site. You can also block cookies in your browser settings. Google's use of analytics data is described in Google's partner sites policy.
Our fonts are hosted on our own server, so loading this site doesn't send your information to a font provider.
7. How long we keep it
- Enquiries that don't go ahead: up to 12 months after our last contact, then deleted.
- Client records, contracts and invoices: up to 7 years after the project or Care Plan ends, to meet tax and accounting obligations in Australia and the UK.
- Project materials and login details: deleted or returned after handover, or when your Care Plan ends, unless you ask us to keep them.
- Analytics data: kept in Google Analytics for up to 14 months.
8. Security
We use reputable providers, encrypted connections (HTTPS), strong passwords and two-factor authentication where available, and we limit access to client information. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information. If you share platform login details with us, please change them once your project is complete.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- object to, or ask us to restrict, how we use your information;
- receive your information in a portable format;
- withdraw consent at any time (for example, to analytics cookies), without affecting earlier processing.
To make a request, use the enquiry form and select “A privacy request”. We'll respond within one month (UK/EU) or 30 days (Australia), and we may need to confirm your identity first. There's normally no charge.
Our services aren't aimed at people under 18, and we don't knowingly collect their information.
10. Complaints
If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You also have the right to complain to a regulator:
- United Kingdom: the Information Commissioner's Office, ico.org.uk
- Australia: the Office of the Australian Information Commissioner, oaic.gov.au
- European Union: your local data protection authority
11. Changes & contact
We may update this policy from time to time. The “last updated” date at the top shows when it last changed. Significant changes will be highlighted on this page.
Questions? Use the enquiry form (choose “A privacy request” or “A general question”), or message us on Instagram or Facebook.