Privacy Policy

Steel Window Design
ABN 56 202 457 259
Last updated: 31 July 2026

1. About this policy

Steel Window Design (“we”, “us”, “our”) designs, manufactures, glazes and installs custom steel windows and doors for the Australian building and construction market.

We respect your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access, correct or complain about our handling of it.

We are bound by the Privacy Act 1988 (Cth) and we handle personal information in accordance with that Act and the Australian Privacy Principles (APPs).

This policy applies to our website at www.steelwindowdesign.com.au, our showroom and factory, and all dealings we have with customers, builders, architects, designers, suppliers, contractors and job applicants.

2. What personal information we collect

2.1 Information you give us

When you contact us, request a quote, book a showroom or virtual appointment, or engage us for a project, we may collect:

your first and last name;
your email address;
your phone number;
the State and postcode of your project or delivery address;
the full site address where windows or doors are to be delivered or installed;
the content of your message or enquiry;
how you heard about us (for example, referral, Google, Instagram, Facebook, magazine or expo);
plans, sketches, drawings, photographs, inspiration images and any other files you upload or send us;
details of the builder, architect, designer, glazier or other trades involved in your project;
your business name, ABN and trading details, if you deal with us as a business;
payment and billing information, including invoicing details and records of deposits and payments (we do not store full credit card numbers — card payments are handled by our payment provider); and
CCTV footage, if you visit our Preston showroom or factory (see section 3); and
any other information you choose to give us in correspondence, in person, by phone, or through our social media pages.

2.2 Information we collect automatically from our website

When you visit our website, we and our service providers may automatically collect:

your IP address and general location derived from it;
your browser type, device type and operating system;
the pages you view, how long you spend on them, and the links you click;
the website or advertisement that referred you to us; and
information collected through cookies and similar technologies.

2.3 Information from third parties

We may collect personal information about you from third parties, including:

builders, architects, designers or project managers who engage us on your behalf, or who provide your details as the site contact;
our installers, glaziers and delivery contractors;
referral sources, advertising platforms and lead-generation services; and
publicly available sources, such as company registers, planning documents and social media profiles. Where we collect personal information about you from someone else, we will take reasonable steps to let you know that we have done so, what we collected and why — unless you would already be aware of it, or doing so is unreasonable or impracticable in the circumstances.

2.4 Sensitive information

We do not seek sensitive information (such as health information) as part of our normal business. If we ever
need it — for example, site access requirements relating to a disability, or a work health and safety matter —
we will only collect it with your consent and only where it is reasonably necessary.

3. How we collect personal information

We collect personal information:

through the enquiry and “Get a Quote” forms on our website;
by email, telephone, SMS and messaging apps;
through our Instagram and Facebook pages, including direct messages and comments;
in person at our Preston showroom and factory, and during site measures and installations;
through CCTV and security systems operating at our Preston premises;
during virtual showroom appointments and video calls;
through cookies and analytics tools on our website; and
from the third parties described in section 2.3.

CCTV

We operate CCTV cameras at our Preston showroom and factory for security, safety and the protection of
property and stock. Cameras are positioned to monitor entry points, the factory floor and yard areas.

Signage is displayed where cameras are in use. Footage is retained only for as long as we need it for those
purposes and is then overwritten or deleted, and it is accessed only by authorised personnel or where we
are required to provide it to police, insurers or a regulator.

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym. In practice we
cannot quote, manufacture, deliver or install without your name, contact details and site address.

4. Why we collect, hold, use and disclose your information

We use personal information to:

respond to your enquiry and prepare quotations and estimates;
prepare shop drawings and manufacturing documentation;
arrange and carry out site measures, delivery, glazing and installation;
manage your order, project timeline and warranty claims;
invoice you and manage payments, including debt recovery;
communicate with you about your project, including changes, delays and scheduling;
manage our relationships with builders, architects, designers, suppliers and contractors;
comply with our obligations under building, construction, work health and safety, taxation and consumer laws, and with the Australian Glass and Window Association’s requirements;
keep records of our products, warranties and installations;
improve our products, services and website;
with your consent or where otherwise permitted by law, send you marketing about our products, and photograph or film completed projects for use in our portfolio, website and social media;
consider your application if you apply for a job with us; and
resolve complaints and disputes and, where necessary, establish, exercise or defend legal claims.

We will not use or disclose your personal information for a purpose other than the one we collected it for, unless you would reasonably expect it, you have consented, or the law requires or permits it.

5. Photography of completed projects

We may photograph or film windows, doors and completed installations for our website, social media, marketing material and awards submissions. We aim to photograph the product rather than people, and we do not publish the street address of private homes without permission.

If you do not want your project featured, tell us in writing at any time and we will not use it — or, if it is already published, we will remove it from material we control. We cannot recall printed material already distributed, or content republished by third parties such as builders, magazines or awards bodies, but we will stop using the images ourselves.

6. Who we disclose your information to

We may disclose your personal information to:

our staff and contractors, including estimators, drafters, factory staff, installers and glaziers;
builders, architects, designers, project managers and other trades working on your project, where disclosure is necessary to coordinate the work;
delivery, freight and transport providers, including interstate carriers;
suppliers and manufacturers of glass, hardware, steel and finishes;
our professional advisers, including accountants, insurers, lawyers and auditors;
payment processors, banks and debt recovery agents;
IT, hosting, email, CRM, cloud storage, website and marketing service providers, including our web developer;
government agencies, regulators, courts and law enforcement, where required or authorised by law;
and
a purchaser or potential purchaser of our business or assets, subject to appropriate confidentiality arrangements.

We do not sell your personal information.

7. Overseas disclosure

We operate only in Australia. Our showroom, factory, staff and installers are all located here, and we do not sell, manufacture or install overseas.

However, some of the technology providers we rely on to run our business — for example, website hosting and analytics, email, cloud file storage and advertising platforms — store or process data on servers located outside Australia. This means some personal information may be disclosed to overseas recipients even though our business operations are entirely Australian.

Based on the service providers we currently use, personal information may be stored or processed in Australia, the United States, Ireland and Singapore. We will update this list if our providers change.

Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, usually through our contracts with those providers. Under section 16C of the Privacy Act 1988 (Cth), we may remain accountable for how those providers handle your information.

8. Cookies, analytics and online advertising

Our website uses cookies and similar technologies to make the site work, remember your preferences, measure how the site is used, and support our advertising.

This may include:

essential cookies, which are necessary for the website and its forms to function;
analytics tools, such as Google Analytics, which help us understand how visitors find and use our site;
advertising and remarketing tools, such as Google Ads and Meta (Facebook and Instagram) pixels, which may show you our advertising on other websites and platforms after you visit ours; and
Google reCAPTCHA, which we use on our forms to prevent spam and abuse. reCAPTCHA collects hardware and software information and sends it to Google for analysis. Its use is subject to the Google Privacy Policy and Terms of Service.

You can control or block cookies through your browser settings. If you block cookies, some parts of our website may not work properly. You can opt out of Google Analytics using Google’s browser opt-out add-on, and manage advertising preferences through Google Ad Settings and your Meta account settings.

9. Direct marketing

We may send you information about our products, projects and services by email, SMS, post or telephone where you have consented or where we have collected your details in the course of providing, or offering to provide, our services to you.

Every marketing email and SMS we send identifies us as the sender, includes our contact details, and contains a free unsubscribe facility. We will action an unsubscribe request within 5 working days, and our unsubscribe facility remains available for at least 30 days after a message is sent. You can also opt out at any time by emailing info@steelwindowdesign.com.au with “Unsubscribe” in the subject line. Opting out of marketing does not stop us from contacting you about a project, quote, order or warranty matter.

We handle commercial electronic messages in accordance with the Spam Act 2003 (Cth), and any marketing telephone calls in accordance with the Do Not Call Register Act 2006 (Cth).

10. Security of your information

We hold personal information in our business systems — including our email, accounting, customer management and cloud file storage systems, operated on our behalf by reputable third-party providers — and in paper files at our Preston premises.

We take reasonable steps, including technical and organisational measures, to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure. These include:

restricting access to systems and records to staff and contractors who need it;
using password protection, access controls and reputable, secured cloud services;
securing our premises, showroom and factory; and
securely destroying or de-identifying personal information when it is no longer needed.

No method of transmission or storage is completely secure. While we take reasonable steps, we cannot guarantee the security of information you transmit to us over the internet.

Data breaches

If we have reasonable grounds to suspect that personal information we hold has been lost, or accessed or disclosed without authorisation, we will carry out an assessment expeditiously and, in any case, take all reasonable steps to complete it within 30 calendar days.

If we then have reasonable grounds to believe the breach is likely to result in serious harm to any individual, and we cannot prevent that harm through remedial action, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, consistent with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

11. How long we keep your information

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires.

In practice, this means we generally retain project records — including drawings, specifications, correspondence and installation records — for at least the duration of our 10-year frame warranty. We retain financial and tax records for at least five years as required by Australian taxation law, and for seven years where the Corporations Act 2001 (Cth) applies to our financial records. Unsuccessful enquiries and quotes are generally retained for a shorter period. When information is no longer required, we destroy or de-identify it.

12. Accessing and correcting your information

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact us using the details in section 14. We may ask you to verify your identity. We will respond within a reasonable period, which will normally be no more than 30 calendar days.

There is no fee for making a request. We may charge a fee for the time and cost of retrieving and providing access to a large volume of records. Any such charge will not be excessive, will not exceed our actual costs, and we will tell you the amount before we proceed.

If we refuse access or correction, we will tell you in writing why, and how you can complain.

13. Complaints

If you think we have breached the Australian Privacy Principles or mishandled your personal information, please tell us first so we can put it right.

Send your complaint in writing to the contact details in section 14, setting out what happened and how you would like it resolved. We will acknowledge your complaint promptly and aim to give you a written response within 30 days.

If you are not satisfied with our response, or we have not responded within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC). The OAIC generally requires you to raise your complaint with us first and allow us 30 days to respond.

Online: webform.oaic.gov.au
Website: www.oaic.gov.au
Phone: 1300 363 992 (Monday to Thursday, 10am–4pm AEST/AEDT)
Post: GPO Box 5288, Sydney NSW 2001

You may also have rights under other laws, including the Australian Consumer Law.

14. How to contact us

Privacy enquiries — Steel Window Design

Attention: Privacy Officer
Email: info@steelwindowdesign.com.au
Phone: 0434 843 426
Address: 27–29 Raglan Street, Preston VIC 3072

15. Changes to this policy

We may update this policy from time to time to reflect changes to our business, technology or the law. The current version is always available at www.steelwindowdesign.com.au/privacy-policy. Material changes will be noted by an updated “Last updated” date at the top of this page. Please check back periodically.

This policy is available free of charge on our website. If you would like a copy in another form — for example, by email or in print — contact us using the details in section 14 and we will provide one where it is reasonable to do so.