Privacy
Policy.

This privacy policy is issued by Zargari Carpentry, a carpentry and joinery business operating in North West Sydney and serving All Greater Sydney. Our contact details are at the end of this policy and on the home page.

We collect only what we need to respond to enquiries and deliver carpentry services. Specifically:

• Identifying details you provide via our quote form, name, email address, phone number, suburb.
• Project details you provide, the description of the work you're asking us to quote, indicative budget, timeline, and any configurator spec you've generated.
• Communications, the content of any email, phone call, text or letter you send us.
• Technical information automatically logged for security purposes, your IP address, browser type, and timestamps of requests. We use this only to rate-limit our quote form and detect abuse.
• Analytics information, but only if you agree when asked. See section 09 for exactly what this is, what we can and can't see, and how to change your mind.
• Job-related information for active clients, site address, plans, drawings, photographs, invoices.

We do not collect: payment card numbers (paid via independent invoicing), government identifiers (TFN, Medicare, driver's licence), biometric data, health information, racial or political information, religious beliefs, or other sensitive information as defined under the Privacy Act.

• Directly from you when you submit the quote form or message us.
• From phone, email, or in-person conversations.
• From referral partners and architects you authorise to share details with us.
• From our website's server logs (IP address + browser type only).
• From analytics on this website, if you agreed to it when asked (section 09).

If we receive your personal information from a third party (e.g. an architect introducing you), we treat that information under this policy as if you'd given it to us directly.

We use the personal information we collect to:

• Respond to your quote enquiries.
• Prepare quotes, scopes of work, and contracts.
• Plan, schedule, and deliver the carpentry work you've engaged us for.
• Issue invoices and process payments (via our independent accounting system).
• Maintain records for tax, warranty and statutory obligations.
• Improve our quote form and identify abuse (server logs only).
• Understand which pages and which advertising actually bring in enquiries, so we spend on what works, only with your consent (section 09).
• Comply with our legal obligations (tax, building / consumer law, work health and safety).

We do not use your personal information for direct marketing without your express consent. We do not sell, rent, or trade personal information.

We disclose personal information only where necessary for the purposes above, and only to the following categories:

• Email delivery (Resend, Inc.) , quote-form submissions are forwarded to our inbox via Resend, a transactional email provider with servers in the United States. Resend is bound by their own privacy policy and standard contractual data-processing terms.
• Hosting (Vercel, Inc.), this website is hosted on Vercel's infrastructure (primarily US data centres with Australian edge locations). Vercel processes request data on our behalf.
• Database (Supabase), quote-form enquiries and our website analytics are stored in a managed PostgreSQL database hosted in Mumbai, India. Access is restricted to the business owner via an authenticated account.
• Error monitoring (Sentry), if something on the site breaks, a technical report is sent to Sentry (servers in Germany) so we can fix it. These reports can include your IP address, browser, and what you were doing at the moment of the error. They are used only for debugging.
• Analytics and advertising (Google), only if you consented under section 09. Google Analytics and Google Ads receive information about your visit and process it on servers in the United States and elsewhere, under Google's own privacy policy and data-processing terms. If you declined, nothing is sent to Google.
• Subcontractors and suppliers, when a job requires another trade or supplier (engineers, suppliers, freight), we may share the site address, contact details and relevant scope information so they can do their work.
• Professional advisers, our accountant, insurer, or legal advisers, where required to manage our business or comply with the law.
• Authorities, where required by law, court order, or regulator request (e.g. ATO, WorkCover, Fair Trading NSW).

We require everyone we share information with to handle it consistently with this policy and applicable privacy law.

Some of the third parties we use store and process data outside Australia:

• Resend and Vercel, United States.
• Supabase, our database, India (Mumbai region).
• Sentry, error reports, Germany.
• Google, United States and other countries, and only if you consented to analytics under section 09.

By submitting your information through the quote form, you consent to that cross-border disclosure. We take reasonable steps to ensure overseas recipients handle your personal information consistently with the APPs, including via their standard contractual terms.

• The site is served over HTTPS only, all data is encrypted in transit.
• Form submissions are validated server-side and pass through rate-limiting and abuse-detection (honeypot + IP throttling) before reaching our inbox.
• Email is stored in our business inbox (Google Workspace), protected by two-factor authentication.
• Active-job files are kept on access-controlled cloud storage.
• Paper records (drawings, signed contracts) are stored in a locked office.
• We retain personal information only as long as needed for the purposes above, or as required by tax, warranty and statutory obligations (typically 7 years for tax records, 6 years for residential building records under NSW Home Building Act).

No system is perfectly secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. If we become aware of a notifiable data breach, we will notify affected individuals and the OAIC in line with the Notifiable Data Breaches scheme.

Under the APPs you have rights with respect to the personal information we hold about you:

• Access, you can ask us for a copy of the personal information we hold about you. We'll respond within 30 days. A small fee may apply for unusually large requests, but ordinarily it's free.
• Correction, if any information we hold about you is inaccurate, out of date or incomplete, ask us and we'll correct it.
• Deletion, you can ask us to delete your personal information. We'll do so unless we're required by law to retain it (e.g. for tax or warranty records).
• Anonymity / pseudonymity, where practical (e.g. general enquiries), you can deal with us anonymously or under a pseudonym.

To make any of these requests, email zargaricarpentry@gmail.com with your name and the request. We may need to verify your identity before we release information.

Nothing below happens unless you agree. The first time you visit, we ask. If you decline, or simply ignore the banner, no analytics of any kind run, nothing is sent to Google, and we record no visit for you. The site behaves identically either way, we don't withhold anything, and we don't ask again on every page.

Regardless of your answer, this site always uses a small amount of browser storage that isn't tracking, your sound-toggle preference, a one-time loader flag, and a record of the choice you made here so we don't keep asking. None of it identifies you.

If you do agree, three things run:

• Google Analytics 4, which tells us how many people visited, which pages they looked at, roughly where in the world they were, and how they found us. Google sets cookies to do this.
• Google Ads conversion tracking, which tells us whether an enquiry came from an ad we paid for. Without it we can't tell which advertising is worth continuing.
• Our own visit counter. We record the page you viewed, how long you were on it, how far you scrolled, the site that referred you, your device and browser type, and an approximate location, typically your city, worked out from your connection. We give your browser a randomly generated ID so we can tell a returning visitor from a new one. It is a random number. It is not linked to your name, email, or anything you've ever sent us.

We do not store your IP address in our analytics. Your approximate location is worked out at the moment your request arrives and only the resulting place name and map co-ordinates are kept. Our analytics database has no field capable of holding an IP address, so this isn't only a promise, it's how the system is built. (Separately, and regardless of your consent choice, our web server keeps short-term security logs that do include IP addresses, as described in section 02.)

A location derived this way is approximate. It reflects where your internet connection appears to be, which is often the nearest major city rather than your suburb, and a VPN or mobile network can put it somewhere else entirely. We use it to understand which areas our work reaches. We cannot use it to find an address.

We keep analytics records for 14 months, then delete them automatically. Google applies its own retention to the data it holds.

Changing your mind: clear this site's data in your browser settings, or use your browser's “clear cookies and site data” option for this site, and the banner will appear again on your next visit so you can answer differently. You can also ask us directly using the contact details in section 14 and we'll delete what we hold about your visits.

We don't maintain a marketing email list. Any email we send to you will be a direct response to your enquiry or relate to a job we're actively working on for you. If we change that in future, we'll comply with the Spam Act 2003 (Cth), you'll have consented to it and every email will carry a clear unsubscribe option.

This site is intended for adults engaging professional carpentry services. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal information through the quote form, email us and we'll delete it promptly.

If you believe we've breached the APPs or mishandled your personal information:

1. Contact us first, email zargaricarpentry@gmail.com with the words “Privacy complaint” in the subject line. We'll acknowledge within 5 business days and substantively respond within 30 days.
2. If you're not satisfied, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
   • Online: oaic.gov.au/privacy/privacy-complaints
   • Phone: 1300 363 992

We may update this policy from time to time, for example if we introduce new services, change providers, or laws change. The current version is always at https://zargaricarpentry.com/privacy with the “Last updated” date at the top. Material changes will be highlighted on this page for 30 days.

For any privacy matter, access, correction, complaint, or general questions:

Business

Zargari Carpentry

Email

zargaricarpentry@gmail.com

Phone

0414 285 493

Service area

All Greater Sydney