Privacy policy

DRAFT. Set out the categories collected: name, phone, email, property address, enquiry details, photographs of the property, and site-visit notes.

Also cover what is collected automatically through the website — analytics identifiers, IP address, referral source and campaign parameters attached to enquiry forms.

DRAFT. Quoting, scheduling, delivering work, invoicing, aftercare, and marketing where consent has been given.

State clearly that marketing consent is separate from service communication, and that it can be withdrawn at any time.

DRAFT. Important clause. Work is delivered by subcontractors, so property address and scope are disclosed to them. Set out what they receive, what they don't, and the obligations they're under.

Also name the third-party processors used — accounting, payments, email, analytics — and where data is stored.

DRAFT. Every job is photographed for records. Distinguish clearly between photography for job records and use of images in marketing — these need separate consent.

If site-visit video or recording is ever introduced, NSW surveillance and privacy law requires a reviewed consent script before any customer is recorded.

DRAFT. How records are stored, how long they're kept, and how they're secured.

DRAFT. How to request access to personal information, how to have it corrected, and how to complain — including escalation to the Office of the Australian Information Commissioner.

DRAFT. What is set, by whom, what it's used for, and how to opt out.