BRILLIANTCANVASArchitectural Ceilings Australia
Australian Privacy Principles Compliance

Privacy Policy

Last Updated: 24 October 2025

1. Who We Are & Data Controller

This Privacy Policy describes how BrilliantCanvas Pty Ltd ("BrilliantCanvas", "we", "us", or "our") collects, manages, holds, and protects personal information obtained through our website and client service operations. We operate in Australia and comply strictly with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For all privacy inquiries, please contact our designated Privacy Officer at [email protected].

2. Scope of This Policy

This policy applies to all visitors, commercial contractors, homeowners, architects, and users submitting inquiries, accessing architectural articles, or requesting stretch ceiling estimations via this website.

3. Information We Collect

We collect information only where reasonably necessary for our core business activities:

  • Information Provided Directly: When you complete an enquiry form, we collect your name, email address, telephone contact number, project suburb and postcode, room area in square metres, and notes or photographs uploaded regarding your ceiling layout.
  • Automatically Collected Technical Data: When you navigate our pages, our servers log your Internet Protocol (IP) address, operating system, browser configuration, referring URL, time and duration of visit, and device parameters.
  • Cookies & Consent Telemetry: Anonymised tracking data gathered strictly upon your explicit preference selection through Google Consent Mode v2.

4. Purpose of Collection & Lawful Grounds

We process personal data for specific, lawful purposes aligned with Australian legal requirements:

PurposeData TypesLawful Basis (Privacy Act 1988 Cth)
Providing tailored quotes and scheduling on-site laser surveysFull name, email, phone, suburb, project specificationsContractual performance & customer request (APP 3)
Website diagnostics, cybersecurity & server protectionIP address, browser logs, access timestampsLegitimate operational interest & IT security (APP 6)
Aggregated analytics & marketing evaluationPseudonymised cookie metrics, session durationInformed user consent via Cookie Banner
Taxation and legal statutory record retentionInvoices, project sign-offs, email communicationsAustralian taxation and corporate compliance

5. Cookies, Analytics & Google Consent Mode v2

Our website operates Google Consent Mode v2 (advanced architecture). By default, before you take action on our consent banner, non-essential storage signals (including analytics_storage, ad_storage, ad_user_data, and ad_personalization) are set to 'denied'. Only strictly necessary functional and security cookies operate. If you select "Accept All" or customize your categories, your choice updates our telemetry tags and is stored locally in your browser for future sessions.

6. Disclosure of Data to Third Parties

We respect your privacy and state explicitly: We do not sell, rent, or trade your personal data to third-party data brokers. We disclose data strictly to vetted service providers assisting our operations (such as secure cloud hosting providers and certified email relay platforms) or when required by enforceable Australian law enforcement requests.

7. Cross-Border Data Transfers

Where third-party digital infrastructure (such as enterprise cloud hosting or email routing servers) resides overseas, we ensure our contractors adhere to standards comparable to the Australian Privacy Principles under APP 8.

8. Data Retention Periods

We hold personal inquiry details for the period required to service your project and fulfil statutory commercial obligations. General non-converting contact inquiries are permanently pruned after 24 months. Contractual records and work safety documentation are retained for seven (7) years in accordance with Australian taxation legislation.

9. Your Rights & Regulatory Recourse

Under the Privacy Act 1988 (Cth), you possess the right to request access to the personal data we hold about you, request corrections to inaccurate records, or seek deletion where retention is no longer legally mandated. To exercise these rights, email [email protected]. If you believe your privacy request has not been addressed satisfactorily, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Data Security Measures

We enforce technical and organisational safeguards including Transport Layer Security (TLS/HTTPS 256-bit encryption), access restrictions, and secure server environments to safeguard your details against loss, misuse, or unauthorised alteration.

11. Children's Privacy

Our website and architectural services are intended exclusively for individuals aged 18 and older. We do not knowingly collect personal data from minors.

12. Policy Revisions

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory adjustments. Changes will be published here with an updated revision date.

13. Contact Information

For inquiries regarding our privacy standards or to withdraw marketing consent, contact our privacy representative directly at: BrilliantCanvas Pty Ltd — Email: [email protected].