Privacy policy.
Last updated: June 2026
1. Who we are
CXD Labs ABN 96 621 343 011 (“we”, “us”, “our”) operates the website cxdlabs.com. This policy explains how we collect, use and protect your personal information.
2. Information we collect
We collect information you provide directly through:
- Contact form – name, work email address, company name, role, the content of your enquiry, how you heard about us (optional), and whether you opt in to our newsletter
- Newsletter subscribe page – first name, email address, and company name (optional)
- Gated resource downloads – full name, email address, and company name
We also collect limited technical information automatically:
- IP address – stored only as a one-way SHA-256 hash for rate limiting and spam prevention. We cannot reverse the hash to identify you.
- Browser user agent and referring page URL – stored with form submissions to help detect spam.
- Aggregate page-view and engagement counts – we count article views and likes in aggregate. These counters are not linked to individual users.
We use Vercel Analytics, which does not use cookies and does not track individuals across sites.
3. How we use your information
- To respond to your enquiry within two business days
- To send you The CX Journal (our weekly newsletter), if you opted in – you can unsubscribe at any time via the one-click link in every edition
- To deliver gated resources you have requested
- To measure whether newsletter links are clicked – download links in our emails contain a token that lets us record that a link was opened. This helps us understand which content is useful. The token identifies the resource and the contact record associated with your subscription; no additional personal data is collected through the click.
- To prevent spam and abuse of our forms (via rate limiting and Cloudflare Turnstile)
- To understand how visitors use our website (aggregate analytics only)
4. Bot protection
Our contact, subscribe, and gated download forms use Cloudflare Turnstile to verify that submissions come from real people, not bots. Turnstile operates without tracking cookies and does not collect personal data beyond what is necessary to issue a challenge token.
5. How we store your information
Contact and subscriber information is stored securely in MongoDB Atlas (cloud-hosted, encrypted at rest and in transit). We do not sell, rent, or share your personal information with third parties for marketing purposes.
6. Third-party services
- Vercel – website hosting and analytics (privacy-respecting, no cookies)
- MongoDB Atlas – secure database hosting
- Resend – email delivery, including transactional notifications and newsletter broadcasts. Your name, email address, and an unsubscribe token are shared with Resend for the purpose of delivering emails you have opted into. Resend's privacy policy.
- Cloudflare Turnstile – bot protection on forms. No personal data is stored by Cloudflare beyond challenge verification. Cloudflare's privacy policy.
7. Your rights
You have the right to access, correct, or delete any personal information we hold about you. To exercise these rights, email us at hello@cxdlabs.com.
8. Cookies
This website does not use cookies for tracking or advertising. Vercel Analytics is cookie-free and privacy-respecting by design. Cloudflare Turnstile may set a short-lived cookie for challenge verification purposes only.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top will reflect any changes.
10. Contact
If you have questions about this policy, contact us at hello@cxdlabs.com.