Privacy

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, to the extent they apply to us. TO CONFIRM: whether the small business exemption applies to the operating entity. We follow the principles either way.

What we collect

• Contact form: name, email, phone (optional), organisation (optional), and your message.
• Full-service quote form: name, email, phone (optional), the property address, development type, building class, the complexity options you tick, and your notes.
• Accounts and sign-in: name, email, and a password stored only as a hash. Sign-in uses a session cookie. Signing in by an emailed link is currently paused.
• BeachCheck and property records: the address you search, the public records we retrieve for it, and files you upload against a property or project.
• Orders and payments: email, what you ordered, amounts, and order status. Card details are entered on Stripe and are not stored by us.
• Technical data: standard server logs (for example IP address, page, time and browser type) kept by our hosting provider for security and troubleshooting.

Cookies and similar storage

• A session cookie that keeps you signed in (up to 14 days).
• A cart cookie that remembers items in your cart (up to 30 days).
• A theme preference (light or dark) saved in your browser.

We do not use advertising cookies. TO CONFIRM: whether any web analytics service is enabled at the Cloudflare account level.

Why we use it

To reply to you, prepare quotes, deliver BeachCheck and engineering work, take payment, keep accounts secure, meet legal obligations, and improve the service. We do not sell personal information.

Who we share it with

• Cloudflare, which hosts this site, stores uploaded files, and routes and sends our email.
• Stripe, which processes payments.
• Our database provider. TO CONFIRM: provider name and region.
• Our internal operations system, where enquiries are logged so they can be followed up. TO CONFIRM: the operator of that system and where it is hosted.
• Public data sources we query for a property address, which receive the address searched.

Some of these providers store data outside Australia. TO CONFIRM: the countries involved. Where required by law we disclose information to authorities.

Keeping it safe and how long we keep it

Access is limited to people who need it, sign-in is protected, and data is held with reputable hosting providers. TO CONFIRM: retention periods. Engineering records may need to be kept for a number of years.

Your rights

You can ask to see or correct the personal information we hold about you, or make a complaint about how we have handled it. Email the address above and say it is a privacy request. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).