Privacy Policy

Who we are

Sensori Design is a sole trader business registered in Western Australia, Australia. We operate at sensoridesign.com.au and provide neuroinformed sensory environment assessment and modular design intervention products.

In this policy, "Sensori Design", "we", "us" and "our" refer to the sole trader operating this business. "You" and "your" refer to anyone who uses our website, assessment, or purchases our products.

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because our assessment collects information that may relate to health or disability status, we treat all assessment data as sensitive information and apply the highest standard of care accordingly.

What information we collect

Assessment responses

When you complete our Sensory Profile Assessment, your responses are submitted to generate a personalised sensory profile and recommendations. Assessment responses may include information about sensory sensitivities, neurological traits, health conditions, sleep patterns, daily function, and your physical environment.

By default, assessment responses are processed in real time to generate your results and are not stored on our servers after your profile has been generated. Your profile is delivered to you directly.

Research records (opt-in)

At the results screen you can optionally consent to us retaining your individual answers to validate and improve the assessment instrument. If you tick this box, we store a research record containing your item-level answers, your computed profile summary, the assessment version you completed, and your email address. The record is linked to your email address so you can ask for its deletion at any time. Research records are held in our internal records mailbox; no separate database is kept. If you do not tick the box, no record of your answers is retained.

Email address

We collect your email address once, at the point where your Phase A Sensory Profile results are displayed. Providing your email address is optional. If provided, we use it to:

• Email you a copy of your profile token so you can return to the assessment later
• Send product-related communications you have opted in to receive

Your email address is stored by our email delivery provider, Resend, for the purpose of delivering transactional messages. Those messages, and the research record if you opt in, carry the content described under Resend in Section 05.

Profile emails are blind-copied to our internal mailbox. This internal copy — which includes your results summary and profile token — is how we keep a record of the profiles we have delivered and who we are corresponding with.

Beta reader details

If you join the guide beta through the sign-up form on our landing page, we collect your name and email address. These are stored with MailerLite, our mailing-list processor, and used to send you the guide download email and a small number of beta follow-ups, such as the feedback form. Every email includes a one-click unsubscribe link. Joining the beta is optional and invitation-based.

Profile token

When you complete Phase A of the assessment, we generate a profile token — an encoded summary of your sensory profile. This token is emailed to you. It contains no personally identifying information; it encodes only your sensory pattern results. You use this token to return to the assessment and begin Phase B without retaking Phase A.

Your profile token is not stored in any database on our servers. It lives in your email inbox, in your browser session, and in the internal blind copy of your profile email described above.

Purchase information

When you purchase a product from Sensori Design, your payment and billing information is collected and processed by Lemon Squeezy, our payment provider and merchant of record. We do not receive or store your credit card details. We receive only confirmation of a completed transaction and the product purchased.

Analytics data

We use Vercel Analytics to understand how our website is used. Vercel Analytics collects aggregate, anonymised data about page views and performance. It does not use cookies, does not collect personal information, and does not track individuals across sessions or devices.

We also use PostHog, a product analytics service, on our assessment. PostHog records anonymous usage events — page views and named interaction milestones, such as an assessment phase being completed or a results button being clicked. Some events carry coarse, non-identifying summary attributes (for example, the profile-pattern label shown at the end of Phase A, or the room type selected in Phase B). Until you provide an email address, these events are anonymous. If you enter your email address at the results screen, we link your session's events to that email address — an identified person profile — so we can connect assessment engagement with the people we correspond with. Automatic click-tracking is disabled, and your individual assessment answers are never sent to PostHog. PostHog is hosted on its EU Cloud, with event data stored in the European Union. PostHog has been in use since April 2026 and was first disclosed in version 1.1 of this policy; email linkage was introduced in version 1.2 — see Section 11.

Communications you send us

If you contact us by email or through any contact form, we collect the information you include in your message, including your name and email address, for the purpose of responding to your enquiry.

How we collect information

We collect information directly from you when you:

• Complete the Sensory Profile Assessment
• Provide your email address at the Phase A results screen
• Join the guide beta through the sign-up form on our landing page
• Purchase a product
• Contact us

We collect aggregate, non-personal analytics data automatically through Vercel Analytics, and anonymous usage events through PostHog, when you visit our website or use the assessment.

We do not collect information about you from third parties, social media platforms, or data brokers.

Why we collect and use information

Information	Purpose	Legal basis (APP 3)
Assessment responses	Generate your sensory profile and product recommendations	Consent — provided by completing the assessment
Email address	Deliver profile token; send transactional communications	Consent — provided voluntarily at results screen
Research records (opt-in)	Validate and improve the assessment instrument	Consent — separate opt-in checkbox at the results screen
Beta reader details	Deliver the guide download email; send beta feedback follow-ups	Consent — provided by submitting the beta sign-up form
Profile token	Enable return to assessment without retaking Phase A	Necessary for performance of the service
Purchase confirmation	Fulfil product delivery; transaction records	Necessary for performance of contract; legal obligation
Analytics (aggregate + anonymous events)	Understand site and assessment usage and improve the product	Legitimate interest — anonymised or not linked to identity
Enquiry correspondence	Respond to your enquiry	Consent — provided by contacting us

We do not use your information for automated decision-making that produces legal or similarly significant effects without human review. Assessment outputs are generated by AI (see Third-party services below) and are intended as informational starting points, not clinical determinations.

Third-party services

We use the following third-party services to operate Sensori Design. Each service processes data as described below. We have selected these providers for their privacy standards and their suitability for handling sensitive information.

We do not integrate with social media platforms, advertising networks, or any other third-party services beyond those listed above.

How long we keep information

Information	Retention period
Assessment responses	Not retained after profile generation, unless you opt in to research retention — then kept as a research record until you ask us to delete it.
Profile token	Not stored in any database. Exists in your email inbox, your browser session, and the internal blind copy of your profile email.
Email address	Retained until you unsubscribe or request deletion.
Beta reader details	Retained in MailerLite until you unsubscribe or request deletion, or until the beta mailing list is retired.
Purchase records	Retained for 7 years to meet Australian tax and accounting obligations.
Enquiry correspondence	Retained for 2 years, then deleted unless ongoing relationship requires otherwise.
Analytics data	Vercel Analytics: aggregate and anonymised — no personal data retained. PostHog: usage events — anonymous unless you provide your email address at the results screen, after which your session's events are linked to it; deletion on request.

When data is no longer required, it is deleted or de-identified in a manner that prevents reconstruction.

Sensitive information

Our assessment collects information about your sensory processing profile, neurological traits, health and sleep patterns, and may touch on disability status or neurodivergent conditions. Under the Australian Privacy Act 1988, this constitutes sensitive information and is subject to stricter handling requirements.

We handle sensitive information only with your consent and only for the purpose for which it was collected — generating your sensory profile and recommendations. We do not use sensitive information for any secondary purpose without your express consent.

Our assessment is not a clinical diagnostic tool. Results are informational only and should not be used as a substitute for professional medical, psychological, or occupational therapy assessment.

Overseas disclosure

Some of the third-party services we use operate servers outside Australia. When your information is processed by these services, it may be transferred to and stored in the United States, the European Union, or other countries.

Under APP 8 of the Australian Privacy Act, we take reasonable steps to ensure that overseas recipients handle your information in a manner consistent with the APPs. We have reviewed the privacy policies and data handling practices of each third-party service listed in Section 05 and are satisfied that appropriate safeguards are in place.

By using our services and providing your information, you consent to these transfers.

Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correct — request that we correct personal information that is inaccurate, out of date, incomplete, or misleading
• Delete — request deletion of your personal information where we are not required to retain it by law
• Withdraw consent — withdraw consent to receiving marketing or transactional emails at any time by using the unsubscribe link in any email or by contacting us directly
• Complain — lodge a complaint if you believe we have mishandled your personal information (see Section 10)

To exercise any of these rights, contact us at hello@sensoridesign.com.au. We will respond within 30 days. In some cases we may need to verify your identity before actioning your request.

We do not charge a fee for access requests unless the request is manifestly unfounded, repetitive, or excessive.

Complaints

If you believe we have mishandled your personal information or breached the Australian Privacy Principles, please contact us first so we have the opportunity to resolve your concern directly.

Contact us at hello@sensoridesign.com.au. We will acknowledge your complaint within 5 business days and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email.

Continued use of our services after any change constitutes your acceptance of the updated policy. We recommend reviewing this page periodically.

Previous versions of this policy are available on request.

Version history

• v1.2 — 18 July 2026. Disclosed three data-handling changes shipping with the July 2026 assessment update: an opt-in research record (item-level answers retained, with a separate consent checkbox, to validate the instrument), an internal blind copy of profile emails, and linkage of PostHog analytics events to your email address when you provide it. Updated the collection, purpose, and retention sections to match.
• v1.1 — 2 July 2026. Added disclosure of PostHog (EU Cloud) product analytics on the assessment — in use since April 2026 but not named in v1.0 — and of MailerLite as the mailing-list processor for the guide beta. Added beta reader details to the collection, purpose, and retention sections. No change to how assessment responses are handled.
• v1.0 — 24 April 2026. First published version.

Contact us

For any questions about this privacy policy or how we handle your personal information, contact us at: