Privacy policy

REJN-X Pty Ltd · ACN 700 080 520 · ABN 59 700 080 520 · rejn-x.ai/privacy-policy · Last updated: 23 October 2026

This privacy policy explains how REJN-X Pty Ltd ("REJN-X", "we", "us") handles personal information.

We follow the 13 Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) when we handle personal information, and we follow the Notifiable Data Breaches scheme in that Act.

Cookies are described in our cookie policy. This privacy policy covers personal information more broadly.

Questions about your information? Contact our Privacy Officer using the details in section 1, use the Book a call form, or message us in the client portal if you're a client.

1. Who we are

We work across Perth and Western Australia. We have not published a shopfront address on this website.

2. What personal information we collect

The information we collect depends on how you deal with us.

2.1 Book a call form

When you use the Book a call form (in the pop-up or on the contact page) we collect your name, mobile number and email address; your trade, or that you're not a tradie; what you need (for example a website, AI, an app or film); anything else you choose to add; and whether you agreed to us contacting you about your enquiry.

The form also records which page and button you used, the website that sent you to us, and any campaign tags in the link you followed (for example utm_source), so we know how you found us.

2.2 Client portal and client records

If you become a client, we set up a client portal account for you. Through the portal and while we work together we collect:

• your name, role, phone, email and login details, and those of anyone you add to your account
• your business details, such as business name, ABN, address, service areas, licences and opening hours
• your answers to our onboarding forms
• your electronic signature on your agreement, and our record of signing (the document version, the signer's name and position, the portal account email, and the date and time)
• the IP address and browser details of the device used to sign or approve, kept as part of that record
• your approvals and instructions in the portal, with their dates
• photos, logos, videos and other files you upload or send us
• change requests, messages and support history
• project details, invoices and payment records

Photos, signatures and other files are kept in access-controlled private storage.

Your payments are processed by our payment provider. We see payment status and the last digits of your card so we can manage your account, but we do not see or store your full card number.

2.3 References, testimonials and photos

If you give us a reference or testimonial, or photos for your website, we use them to build your website and, with your permission, on our own website as examples of our work. We only publish your name, business name, testimonial or photos on our site or in our marketing if you have agreed in writing, and you can ask us to remove them at any time.

If photos or files include other people, such as staff or customers, you must have their permission for us to use them. Please don't upload anything we don't need, such as customer invoices or identity documents.

2.4 Website visits

When you visit this website, our cloud hosting provider receives standard technical information such as your IP address, browser type and the pages you request, so it can deliver and secure the site. Our website forms use a spam-protection service that checks form submissions to block automated spam. When you use a form, that service receives your IP address and information about your browser and device. We use Google Analytics, with Google Tag Manager to load it, to understand how people use this website so we can improve it.

Website analytics. Google Analytics runs when you visit our website unless you turn it off. It collects:

• the pages you view, and how long you spend on them
• your device type, operating system, browser and screen size
• your approximate location (such as country, state or city), which Google works out from your IP address. We don't see your IP address in our analytics reports
• how you arrived, such as the website or search engine that sent you and any campaign tags in the link you followed
• things you do on the site, such as clicking a Book a call button or opening or sending a form. It records that the form was opened or sent, but not what you type into it
• a random ID stored in an analytics cookie, so we can tell new visits from repeat visits. This ID doesn't tell us your name or contact details

We look at this information as totals and trends, and we don't use it to identify you. We don't use analytics information for advertising, remarketing or ad personalisation, and we don't combine it with your Book a call or client portal details. Google Analytics is provided by Google LLC. See How Google uses information from sites or apps that use its services and Google's privacy policy.

Turning analytics off. You can turn analytics off at any time with Cookie settings in the footer of any page (or Settings in the cookie notice). When you do, we stop sending analytics from that point, delete the analytics cookies from your browser, and remember your choice so analytics doesn't load on later visits. You can also install Google's Google Analytics opt-out browser add-on, which stops Google Analytics on every website you visit. The website works the same either way. Questions about analytics? Contact our Privacy Officer at privacy@rejn-x.ai.

We don't use advertising or other tracking tools on this website. If we ever add them, we'll update this policy and our cookie policy before they start.

2.5 Calls and messages

When we call you back, or you message us, we keep a note of what we discussed so we can respond and, if you become a client, do the work. We do not record calls.

We do not collect government identifiers (for example Medicare numbers) through the website, and we don't ask for information we don't need.

2.6 Register interest form

If you register interest in one of our apps, we collect your name, your email address, the app you chose, and your business and role if you give them. We also keep which boxes you ticked, the wording you were shown, and the date and time, as our record of your consent. We use these details to email you about the app you chose, including when it's available. If you also tick the separate, optional box, we use them to email you news and offers about our apps (section 6). You can register interest without ticking that box. Section 12 explains how long we keep these details.

3. Information we handle for our Full Kit clients

For clients on our Full Kit service we run online ads, follow-up SMS, call tracking and a lead record on the client's behalf. When someone enquires with one of those businesses, we may handle their name, phone number, email, suburb, enquiry details, call details and message history.

We handle that information to provide the service to our client, and the client decides how it's used. The client is responsible for its own customers' privacy, including its own privacy policy, and we act as its service provider. We only use that information for the client's purposes, keep it secure, don't sell it or use it for our own marketing, and return it to the client and delete it when our service ends, as our agreement with the client sets out (see section 11).

We only send SMS to people who have enquired with the business, each message identifies the business, and every message explains how to opt out. If you reply STOP, we stop straight away and always within 5 business days. For calls to a tracking number, we log the caller's number, the tracking number, the date and time, whether the call was answered, and how long it lasted. We do not record, listen to or transcribe calls, and we do not keep voicemail.

If you're one of our client's customers and have a question about your information, please contact that business first. You can also contact our Privacy Officer and we'll help or pass your request on.

4. How we collect it

• Directly from you: the Book a call form, the register interest form, the client portal, calls, and files you send.
• From someone acting for you: for example a business partner or office manager who books a call for your business.
• Automatically: through the website, our hosting provider, the form check described in section 2.4, our consent cookie, and Google Analytics unless you turn it off (section 2.4 and our cookie policy).
• From publicly available sources: for example your existing website or Google Business Profile, when we look at it to prepare for our call or your website.

You can ask general questions without giving your name, but we'll need your contact details to call you back or do work for you.

If you give us personal information about another person (for example a reference or a staff member), you must have their authority to do so.

If we collect information about you from someone else and we're required to tell you, we'll do so within a reasonable period unless an exception applies.

5. Why we collect and use it

We collect and use personal information only for purposes you would reasonably expect, including to:

• respond to enquiries about websites, apps, AI and film, and talk through pricing
• set up your client portal account and onboard you
• make, sign and keep a record of our agreement with you
• build, host and look after your website or other work
• send project messages (preview links, change requests, updates)
• email you about an app you've registered interest in and, if you've asked for them, news and offers about our apps
• process payments and keep accounting records
• improve and secure the website and the portal, including understanding how visitors use the website (website analytics, unless you turn it off)
• meet legal and insurance obligations, and handle complaints

We do not sell personal information.

If we want to use personal information for an unrelated purpose you wouldn't reasonably expect, we'll ask first where the APPs require it.

6. App updates and marketing emails

We don't send marketing SMS, and we only send marketing emails to people who have asked for them:

• App updates. If you register interest in one of our apps and tick the box asking for it, we email you about that app, including when it's available. Once the app has launched and we've sent you that email, we stop, unless you also asked for news and offers (section 12).
• News and offers. If you also tick the separate, optional box (it is never ticked for you), we email you news and offers about our apps. You don't need to tick it to register interest.

Every marketing email identifies REJN-X Pty Ltd as the sender, tells you how to contact us, and includes an unsubscribe link. You can opt out of app updates, news and offers, or both, at any time, using the link or by contacting our Privacy Officer. Opting out is free, and we act on it straight away and always within 5 business days. We don't use or disclose your details for anyone else's marketing, and we don't buy or rent email lists. Otherwise, we'll contact you only about your enquiry, the services you've asked for or use, or your account.

7. AI tools and automated decisions

Our websites and our client portal do not send your information to an AI service.

We do use AI-assisted tools to run our business:

• coding tools, which we use to build and maintain websites and our own systems, and which can read our project files. Under the settings we use for our coding tools, personal information is not used to train AI models.
• assistant tools, which help us with email, scheduling, documents and project information
• image tools, used only for the generated images add-on
• business email and document tools, which may include built-in AI features
• ad tools for our Full Kit service, which help us create our clients' ads and monitor how their campaigns are performing. They work with our client's business information, the ad content and campaign results (such as spend, clicks and enquiry numbers). A person at REJN-X reviews every ad before it runs and decides on every campaign change.

Personal information in our project files, emails and documents (such as business details, contact details, onboarding answers, photos and signatures) may be processed by the providers of those tools, outside Australia (section 9). For the generated images add-on, the provider receives a description of your business and any reference images you give us for that purpose. We use these tools to help our people do the work; a person at REJN-X reviews what they produce.

We don't use computer programs, including AI, to make decisions about you that could significantly affect your rights or interests. Creating ads and monitoring campaigns are decisions about our clients' advertising, not about individual people. Automatic follow-up messages and alerts to our clients are sent the same way for every enquiry and don't decide anything about you. If that changes, we'll update this policy first.

8. Who we disclose it to

We disclose personal information only as needed to run the business, including to:

• people who work with us and need it to do the work
• service providers who host the website and portal, store files, send messages, check form submissions, provide website analytics, provide AI-assisted tools or process payments
• the business you enquired with, if you contacted one of our Full Kit clients
• our clients' advertising, SMS and call-tracking providers, for Full Kit clients
• insurers and professional advisers when needed for a claim, audit or advice
• regulators, courts or police if the law requires it
• a buyer of the business, on the usual confidential basis, if we sell or restructure

We require service providers who handle personal information for us to protect it and use it only for our purposes.

9. Overseas disclosure

Some of the service providers we use store or process personal information outside Australia. The kinds of providers, and the countries where they are likely to be located, are:

Before we disclose personal information to an overseas provider, we take reasonable steps to make sure it handles the information in a way that is consistent with the Australian Privacy Principles, usually through its terms and data protection commitments. Contact our Privacy Officer if you'd like the current list of providers.

10. How we hold and secure it

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:

• access to the portal, private file storage and admin tools limited to people who need it
• HTTPS on this website and the portal
• passwords and, where available, multi-factor authentication on accounts that hold client data
• reputable cloud hosting with encryption in transit and at rest

No online transmission or storage is completely secure. If you think your dealings with us are no longer secure, contact our Privacy Officer straight away.

11. Data breaches

If we become aware of a data breach that is likely to cause serious harm to anyone whose personal information we hold, we'll act quickly to contain it, assess it, and notify the people affected and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires. If the breach affects information we hold for a client, we'll also tell that client promptly.

12. How long we keep it

We keep personal information only as long as we need it for the purposes in this policy, or as the law requires (for example tax and company records).

• Enquiries that don't go ahead: deleted or de-identified within 2 years.
• Website analytics: information linked to the analytics ID in your browser is automatically deleted by Google Analytics after the retention period set in our account (no more than 14 months). We may keep reports that show only totals and trends, which don't identify anyone. The analytics cookies in your browser last up to 2 years unless you turn analytics off or clear them (see our cookie policy).
• Client and project records: kept for 7 years after our work ends, to meet tax and company record-keeping requirements. This includes signed agreements, signing and approval records, and invoices.
• Other client portal content (such as onboarding answers and uploaded files we no longer need): after a client leaves, the portal stays available read-only for 90 days, then we delete or de-identify this content within 60 days.
• Full Kit clients' leads data: exported to the client within 10 business days after our service ends, kept for 30 days for corrections, then deleted within a further 30 days. We keep consent and opt-out records for as long as the law requires.
• Register interest details: if you asked only for emails about the app you chose, we keep your details until that app launches and we send you the email telling you it's available, then delete them within 30 days. If we stop work on the app before it launches, we delete them within 30 days of that decision. If you also asked for news and offers, we keep your details until you unsubscribe, and we delete them within 30 days if we haven't sent you an email for 24 months. If you unsubscribe or withdraw your consent at any time, we stop emailing you within 5 business days and delete your details within 30 days. In every case we keep a short record of your email address, what you unsubscribed from (if anything) and when, so that we don't email you again, and we keep a record of your consent (the wording, the boxes ticked, and the date and time) for 2 years after we delete your details, to show that our emails were sent with your consent.

When we no longer need information, we take reasonable steps to destroy it or permanently de-identify it.

13. Access and correction

You can ask for a copy of the personal information we hold about you, and ask us to correct it if it's wrong, out of date or incomplete. Contact our Privacy Officer using the details in section 1, or message us in the portal if you're a client. We'll need to confirm who you are first. We'll respond within 30 days and won't charge you for making a request.

In some limited cases the law allows us to refuse. If we do, we'll tell you why in writing and how you can complain.

14. Complaints

If you think we've mishandled your personal information, please tell us first, in writing, using the contact details in section 1. We'll acknowledge your complaint within 5 business days, look into it, and give you our response, usually within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

15. Cookies

The cookies we use and how to change your preferences are set out in our cookie policy. The first-party consent cookie is named rejnx_consent and remembers your choice. Google Analytics cookies are set unless you turn analytics off. You can change your choice at any time with Cookie settings in the footer. When the client portal is available, its sign-in will store session information in your browser; our cookie policy will describe it before the portal opens.

16. Changes to this policy

We may update this policy from time to time, and the "Last updated" date will change. The current version is always at rejn-x.ai/privacy-policy. If a change materially affects information we already hold, we'll take reasonable steps to let you know, for example in the portal.