Legal

Privacy Policy

Last updated 7 October 2026

How Petrex Pty Ltd collects, uses and protects personal information when you visit petrex.io or get in touch.

Who we are

This policy covers petrex.io, run by Petrex Pty Ltd (ABN 91 603 802 071), an Australian company that makes branded worlds, activations and game assets for Roblox, Fortnite and VRChat. “Petrex”, “we” and “us” mean Petrex Pty Ltd.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). For visitors in the European Union and the United Kingdom, we also follow the GDPR and the UK GDPR. Questions about this policy, and project enquiries, go to sales@petrex.io.

What we collect

When you use the contact form

  • your name and email address
  • your company, if you give it
  • what your enquiry is about: a project, a partnership, press or something else
  • your message

When you sign up for the newsletter

  • your email address
  • the consent wording you agreed to, its version and when you signed up
  • where on the site you signed up, such as the footer or the press page
  • when you confirmed your address, and when you unsubscribed if you do

When you email us or talk with us

Your contact details and anything you choose to tell us, such as project details, timelines and budgets.

Automatically, when you use the site

  • When you submit the form or sign up for the newsletter, a hashed value made from your IP address. We use it to stop repeated submissions and spam. We store the hash, not the address itself.
  • Standard request logs kept by our hosting provider, such as IP address, browser type, the page requested and the time. These are used to run and secure the site.

We do not ask for sensitive information, such as health, religious or political information. Please leave it out of your message.

How we collect it

Mostly from you: when you fill in the form, email us or talk with us. Sometimes from a colleague of yours who introduces us or copies you into a project conversation. Request logs are created automatically when your browser loads a page.

How we use it

We use personal information to:

  • reply to your enquiry and talk about a possible project
  • plan, deliver and invoice work we agree to do together
  • send you the newsletter, if you signed up for it
  • keep records of our business relationships
  • protect the site and the contact form from spam and abuse
  • meet our legal, tax and accounting obligations

We do not sell personal information, and we do not use it for advertising.

Who we share it with

We share personal information only with:

  • service providers that run parts of the site and our business for us: Cloudflare, which hosts the site (Cloudflare Workers) and stores form messages and the newsletter list in its database (Cloudflare D1); and Hostinger, which hosts our email: it delivers the email we get when a new message arrives, sends newsletter confirmation emails, and holds the mailbox where we receive and answer enquiries
  • professional advisers, such as accountants and lawyers, when they need it to advise us
  • anyone we are required by law to disclose it to

These providers handle the information on our behalf, under their own security and privacy terms.

Overseas disclosure

Some of these providers store or process information outside Australia. Cloudflare is based in the United States and runs a global network: requests are handled in the data centre nearest you, and our database is held in the region where we created it. Hostinger, our email provider, may also process information overseas. We only use providers that publish security and privacy commitments for the data they process for us.

Storage, security and retention

Form messages are stored in a managed database that only our website and Petrex's own Cloudflare account can reach. The site sends data over encrypted connections (HTTPS), and only people at Petrex who need stored enquiries for their work can access them. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and, where the law requires it, the Office of the Australian Information Commissioner.

We keep enquiries and related correspondence only as long as needed to respond and manage the relationship, and we review what we hold at least every 24 months. Hashed records used to limit repeat submissions are deleted once they are no longer needed for that. When we no longer need information, we delete it or remove the details that identify you.

Cookies and third-party content

The site does not use advertising, analytics or tracking cookies. If we add analytics later, we will choose a service that works without cookies and update this policy first.

Live player counts for Roblox games are fetched by our server, so your browser does not contact Roblox for them. Game thumbnails load from Roblox's image servers, which receive your IP address and browser details when your browser requests the images. Links to other services, such as Roblox game pages or a booking calendar, are covered by those services' own privacy policies.

Some pages show public YouTube videos that creators made about campaigns we worked on. Their thumbnails load from YouTube's image servers, which receive your IP address and browser details, as Roblox's do. The video itself loads from YouTube, through its privacy-enhanced youtube-nocookie.com player, only when you click to play it, and YouTube's privacy policy then applies.

The newsletter

The newsletter is opt-in. We add your address only when you enter it and tick the box that says you agree to receive it. Sending an enquiry through the contact form does not sign you up, and we use enquiry details only to reply and for any work that follows.

When confirmation emails are switched on, we first email you a link to confirm the address is yours (double opt-in), and we send the newsletter only to addresses that confirmed. If you didn't ask for that email, ignore it.

Every newsletter names Petrex Pty Ltd as the sender and carries an unsubscribe link, as the Spam Act 2003 (Cth) requires. Unsubscribing takes effect straight away. You can also email sales@petrex.io and we will remove you by hand.

We keep your address and consent record while you are subscribed. After you unsubscribe, or if you never confirm, we keep the record for up to 12 months so we can show when you agreed and when you opted out. A daily automatic check then deletes it.

The list is stored in Cloudflare D1, our database. Confirmation emails are sent from our own mailbox, hosted by Hostinger. If we send the newsletter through a different email service, we will name it here before the first issue goes out.

Automated decisions

We do not use automated decision-making, including profiling, to make decisions that significantly affect your rights or interests.

Children

This site is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you think a child has sent us their details, email sales@petrex.io and we will delete them.

Access and correction

You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing sales@petrex.io. We will confirm who you are first, and we reply within 30 days. There is no fee. If we refuse a request, we will explain why in writing and tell you how to complain.

If you are in the EU or UK

The GDPR and UK GDPR give you rights over your personal data. We rely on these legal bases:

  • Legitimate interests: replying to business enquiries, running our business and protecting the site from abuse.
  • Steps before a contract: when your enquiry is about a project you want us to take on.
  • Consent: for the newsletter. You can withdraw it at any time by unsubscribing.
  • Legal obligation: for records the law requires us to keep.

You can ask us to give you, correct or delete your data, to restrict or object to how we use it, and to send it to you in a portable format. Email sales@petrex.io to use any of these rights. You can also complain to your local data protection authority; in the UK that is the Information Commissioner's Office (ico.org.uk).

When your data leaves the EU or UK, our providers transfer it under the safeguards in their data processing terms, such as standard contractual clauses.

Complaints

If you are unhappy with how we have handled your personal information, email sales@petrex.io and tell us what happened. We will reply within 30 days. If our answer does not resolve it, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Changes to this policy

When our practices change, we update this policy and the date at the top of the page. If a change significantly affects how we use information you have already given us, we will tell you before it takes effect.

Questions about your information?

Email sales@petrex.io, for privacy questions and new projects alike. Petrex Pty Ltd, ABN 91 603 802 071.