This policy explains how Varelma Pty Ltd (“Varelma”, “we”, “us”) collects, holds, uses and discloses personal information, and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Scope

This policy applies to personal information we collect through varelma.com and through the correspondence that follows an enquiry made on it.

It does not apply to data processed by the Varelma JDBC driver itself. The driver is software licensed to you and run inside your own environment. It connects your systems directly to your Salesforce organisation, and no data passes through Varelma infrastructure at any point. We have no access to it, and we are not a processor of it.

2. What personal information we collect

Through the enquiry form on this site, we collect the information you enter:

• Work email address — required
• Company legal name — required
• Full name — required
• Phone number — optional, required only if you ask us to call you
• Your preferred contact channel — email or phone
• A free-text description of what you currently connect to Salesforce — optional
• Whether you opted in to receive product updates

We also record limited technical information with each submission, to help us respond appropriately and to identify automated abuse:

• Country of origin of the request, as determined by our hosting provider — the country only, not a precise location
• Browser user-agent string
• Referring page address
• Date and time of submission

We do not collect sensitive information as defined by the Privacy Act through this website. We do not ask for, and you should not submit, health information, government identifiers, financial account details or credentials. Billing, legal-entity and contracting information is collected directly during procurement, not through this form.

3. Cookies, analytics and tracking

This site sets no advertising or analytics cookies. We run no third-party analytics, no advertising pixels and no cross-site trackers.

Your light/dark theme preference is stored in your browser’s local storage under the key varelma-theme. It never leaves your device and is not transmitted to us.

If spam protection (Cloudflare Turnstile) is enabled on the enquiry form, Cloudflare may set a cookie strictly to distinguish humans from automated traffic. It is not used for advertising or profiling.

4. How we collect it

We collect personal information directly from you, when you choose to submit the enquiry form or email us. We do not purchase contact lists, and we do not collect personal information about you from third parties.

5. Why we collect it, and how we use it

We collect this information for the following purposes:

• To respond to your enquiry on the channel you nominated
• To discuss licensing, pricing, technical fit and contract terms
• To keep a record of our commercial dealings with you and your organisation
• To detect and prevent spam and automated abuse of the form
• Where you have expressly opted in, to send you occasional product updates about Varelma

We will not use your information for any unrelated purpose without your consent, unless required or authorised by law.

6. Direct marketing and how to opt out

The marketing opt-in on our form is unticked by default. We only send product updates if you actively tick it. Submitting an enquiry alone does not subscribe you to anything.

Every marketing message includes a functional unsubscribe link, as required by the Spam Act 2003 (Cth). You may also opt out at any time by emailing jon@varelma.com. We will action it promptly and without cost to you.

Opting out of marketing does not stop us replying to an enquiry you have made, or corresponding with you about an active commercial matter.

7. Who we disclose it to

We do not sell, rent or trade personal information. We do not share it with third parties for their own marketing purposes.

We disclose personal information only to the service providers that operate this website and our correspondence, and only to the extent needed to provide those services:

• Cloudflare, Inc. — website hosting, DNS, and the database in which enquiries are stored
• Resend (Plus Five Five, Inc.) — transactional email delivery, used to notify us that an enquiry has arrived
• Google LLC — email hosting for the mailbox that receives and sends our correspondence

We may also disclose personal information where required or authorised by law, or where necessary to establish, exercise or defend a legal claim.

8. Cross-border disclosure

The providers listed in section 7 are based in the United States and may store or process data there or in other countries in which they operate. By submitting the form you acknowledge that your information may be disclosed to overseas recipients on this basis.

Before disclosing personal information to an overseas recipient, we take reasonable steps under APP 8 to satisfy ourselves that the recipient handles it in a manner consistent with the Australian Privacy Principles. Note that in some overseas jurisdictions you may not be able to seek redress under the Privacy Act.

9. How we store and secure it

Enquiries are stored in a Cloudflare D1 database, encrypted at rest by the provider. All traffic to and from this website is encrypted in transit using TLS. Access to the enquiry data is restricted to Varelma personnel who need it to respond to you.

We take reasonable steps under APP 11 to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of an eligible data breach, we will comply with our obligations under the Notifiable Data Breaches scheme.

We hold no third-party security compliance certification at this time and make no such claim. Security documentation is exchanged directly during procurement.

10. How long we keep it

We retain enquiry records for as long as needed for the purposes in section 5 — ordinarily for the duration of our commercial relationship with you and your organisation, plus the period required to meet our record-keeping, tax and legal obligations.

Where an enquiry does not lead to a commercial relationship, we retain the record for no longer than two years from your last contact with us, after which we destroy it or de-identify it. You may ask us to delete it sooner, and we will do so unless we are required by law to keep it.

11. Accessing and correcting your information

Under APP 12 and APP 13 you may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Email jon@varelma.com.

We will respond within a reasonable period, ordinarily within 30 days. There is no charge for making a request. We may need to verify your identity before acting on it. If we refuse access or correction, we will tell you why in writing and explain how to complain.

12. Complaints

If you believe we have breached the Australian Privacy Principles, please raise it with us first at jon@varelma.com. Set out what happened and how you would like it resolved. We will acknowledge your complaint and aim to respond substantively within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5218, Sydney NSW 2001.

13. Anonymity

You may browse this website without identifying yourself. You may also contact us anonymously or under a pseudonym, though we may be unable to progress a licensing discussion without knowing who you are and which legal entity we would be contracting with.

14. Changes to this policy

We may update this policy from time to time. The current version is always published at varelma.com/privacy, with the date it was last updated shown at the top. Material changes affecting how we handle information already collected will be notified to affected individuals where practicable.

15. Contact us

For any privacy question, access or correction request, opt-out or complaint:

Varelma Pty Ltd
Australia
jon@varelma.com