Privacy Policy
Effective Date: 1 January 2025 | Last Updated: 15 February 2025
1. Who We Are and Data Controller
PrismCeilings Pty Ltd ("PrismCeilings", "we", "us", or "our") is an Australian company providing design, supply, and installation services for stretch ceilings across Australia. We take our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) seriously. This Privacy Policy outlines how we collect, handle, disclose, store, and protect your personal information.
For any inquiries or privacy-related requests, please contact our designated Privacy Officer at [email protected].
2. Scope of this Policy
This policy governs personal data collected via prismceilings.com.au, through our quote submission forms, electronic correspondence, design consultations, and any customer interactions related to our stretch ceiling systems.
3. Information We Collect
We gather information necessary to provide tailored ceiling estimates and execute services:
- Directly Supplied Data: Full name, email address, contact telephone number, suburb/postcode, property characteristics, room dimensions (m²), design preferences, and optional photographic uploads of existing ceilings.
- Automatically Collected Telemetry: Anonymised Internet Protocol (IP) address, approximate general location, browser version, operating system, pages visited, session duration, and referral source.
- Analytical & Marketing Signals: Aggregated behavioural events subject to Google Consent Mode v2 status and cookie preferences.
4. Purpose and Legal Basis for Processing
| Purpose of Processing | Types of Data | Australian Law Ground / Basis |
|---|---|---|
| Preparing stretch ceiling quotes in AUD and scheduling consultations | Name, email, phone, suburb/postcode, ceiling m² | APP 3 & 6 (Necessary for legitimate business functions with consent) |
| Project site logistics and installation coordination | Customer name, site contact phone, address notes | Performance of service agreement |
| Website security, fraud mitigation, and bot detection | IP address, browser headers, technical logs | APP 3 (Reasonably necessary for cybersecurity) |
| Website analytics and experience enhancement | Aggregated clickstream, anonymised cookie identifiers | User consent via Google Consent Mode v2 |
5. Cookies, Analytics and Google Consent Mode v2
We deploy Google Consent Mode v2 (Advanced configuration). By default, before you interact with our cookie banner, non-essential storage signals (such as ad_storage and analytics_storage) are kept in a denied state. We only activate analytical and marketing tags if you click "Accept All" or opt into them via our customisation controls. You can review or revoke your selection at any time via the "Cookie Settings" link located in our footer.
6. Disclosure of Personal Information
We never rent, lease, or sell personal information to commercial data brokers. We may share information with trusted Australian and international service vendors under strict confidentiality obligations, including:
- Cloud hosting infrastructure and database providers.
- Email dispatch and CRM systems supporting quote delivery.
- Professional installation contractors directly engaged in your installation.
- Law enforcement or regulatory authorities only when required by Australian court order.
7. Cross-Border Data Transfers
Where cloud applications store telemetry or backups on distributed servers outside Australia, we take reasonable steps pursuant to APP 8 to verify that offshore recipients handle your data in accordance with comparable privacy frameworks.
8. Data Retention
Inquiry details not resulting in an active contract are archived and deleted after 24 months. Contractual records, invoice logs, and warranties are retained for 7 years to meet Australian taxation and statutory record-keeping mandates.
9. Your Rights and OAIC Oversight
Under the Australian Privacy Principles, you have the right to request access to the personal data we hold about you, request corrections to inaccurate entries, or withdraw previous consent for promotional communications.
To exercise your rights, email [email protected]. If you believe your privacy rights have been breached and we fail to resolve your complaint within 30 days, you can lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
10. Security Measures
We implement robust technical and managerial safeguards, including TLS 1.3 encryption in transit, strict user access controls, and periodic firewall audits to safeguard your information against loss, unauthorized access, or misuse.
11. Children's Privacy
Our products and services are aimed at adult homeowners, architects, and business professionals. We do not knowingly gather information from individuals under the age of 18.
12. Contact the Privacy Officer
For privacy inquiries, please contact:
PrismCeilings Pty Ltd
Email: [email protected]