Enlighten Imaging

Privacy Policy

Last updated: 30 October 2026

This policy explains what personal information Enlighten Imaging collects through this website and the XMAS software, why, and what you can do about it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

The short version

  • Browsing this website: no cookies, no analytics, no tracking.
  • We only collect what you type into our forms, plus the technical details any web server sees.
  • We never sell your information or use it for advertising.
  • XMAS works with your images on your own computer.

What we collect and why

When you visit the website

We do not use cookies, analytics or any third-party tracking, and the site loads no content from other companies. Like every web server, ours records technical details of each request - your IP address, the page requested, the time and your browser type - in logs we use to keep the site running and secure. These logs are held by our hosting provider and deleted automatically after a limited period.

When you use the contact or quote form

We collect your name, email address and message, and use them only to reply to you. A quote request also includes your institution, the type of licence and the number of seats, which we use to prepare your quote. The message is delivered to our team's mailbox; it is not added to any mailing list.

When you request an XMAS trial

We collect your name, your institution and your email address.

  • Your email address is where we send the licence file. We keep it, with the dates of your trial, so that each person receives one trial and so we can re-send your licence if you ask again.
  • Your institution is written into the licence file and shown in the software ("Licensed to ..."). We keep it with your licence record.
  • Your name is used only to address the email. We do not store it.

When you buy a licence

Card payments are processed by Stripe. We never see or store your card details. Stripe gives us your name, email address, institution and what you bought, which we use to issue and deliver your licence, provide support, and keep the records the law requires. For invoiced purchases we receive the same details from you directly.

When XMAS checks your licence

XMAS contacts our server when it starts and about every five minutes while it is open, to check that your licence has not been cancelled and to count how many computers use it at the same time. Each time it sends the licence file, an identifier for the computer, a scrambled (hashed) form of the Windows user name, a random number for that session and a one-off random value that secures the answer. The hashed user name lets two people sharing one computer count as two users; the name itself is never sent.

We keep these only while XMAS is running: the record is deleted within about fifteen minutes of XMAS closing. We record the computer identifier in our server logs only when something needs a look: a cancelled licence, a licence file our server cannot verify, or a second trial on the same computer. As with any web request, your IP address also appears in our server logs.

From these checks we keep daily totals for each licence: the most computers using it at the same time, the hours it was in use, and how many times a computer was turned away because every seat was taken. These totals name no computer or person.

For a trial licence we also keep the computer identifier of the first computer it runs on, with the licence it ran, for one year, so that the same computer does not start a new trial with a different email address. It is then deleted.

Who we share it with

We do not sell, rent or trade personal information. We share it only with the service providers who run parts of our service for us, and only what each one needs:

  • website and server hosting;
  • storage for backup copies of our licence records;
  • email delivery, including sending licence files;
  • our business email and office software;
  • payment processing.

Some of these providers store or process information outside Australia, including in the United States and Singapore. We use providers that protect personal information to a standard comparable to the Australian Privacy Principles. We may also disclose information where the law requires it.

How long we keep it

  • Contact messages: for as long as needed to deal with your enquiry.
  • Trial records: for as long as we offer trials, so the one-trial-per-person rule works. You can ask us to delete yours at any time.
  • Licence and purchase records: for as long as the licence is in use, and afterwards for as long as tax and accounting law requires.
  • Daily usage totals: as long as the licence records they belong to.
  • Backup copies of these records: 30 days. Something we delete can stay in a backup for that long, then it is gone.

How we protect it

All connections to our website and licence server are encrypted (HTTPS). Access to our systems is limited to the people who need it to run the service.

Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it (except where we must keep it by law). If you are in the European Union or the United Kingdom you also have the rights the GDPR gives you, including to object to our use of your information and to complain to your local data protection authority. Email us to make any of these requests; we will reply within 30 days.

Complaints

If you have a concern about how we have handled your information, please contact us first so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this page when our practices change, and change the date at the top.

Contact us

Enlighten Imaging
Level 8, 32 Gisborne Street, East Melbourne VIC 3002, Australia
support@enlightenimaging.com