Last updated 12.7.25

Burnt Orange (“we”, “us”, “our”) operates https://www.burntorange.com.au/. We respect your privacy and are committed to protecting the personal data you provide through booking forms and contact forms

Application of Australian Privacy Act 1988

Burnt Orange operates under the requirements of the Privacy Act 1988 (Cth). We adhere to the 13 Australian Privacy Principles (APPs), which set legal standards for how we collect, use, disclose, and manage personal information

Compliance with the Privacy Act 1988 (Cth) & Australian Privacy Principles (APPs)
Burnt Orange is committed to compliance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).

• Our policy is clear, current, and published on our website (APP 1).
• We collect, use, and disclose only the personal information needed for bookings and inquiries (APP 3, 5–6).
• We protect your data with reasonable security measures and retain it only as long as necessary (APP 11).
• You have the right to access and correct your information (APP 12, 13).
• We offer an easy opt-out for marketing communications.
• If we share your data overseas, we ensure it’s subject to legal safeguards (APP 8).
• We have a formal complaint-handling process and comply with breach reporting under Part IIIC of the Privacy Act.

1. Information We Collect

• Account Information: Name, email address, billing address, and payment details when you subscribe to our services.
• Business Information: Details about your company, including branding and design preferences.
• Communication Data: Emails, messages, or other interactions with us.

2. Why We Collect Your Data

• To process bookings and communicate confirmations.
• To respond to contact form inquiries.
• To provide optional benefits, such as follow-ups or updates, but only with your consent

3. Legal Basis

Processing rests on either:

• Contractual necessity (fulfilling bookings)
• Your consent (for marketing or updates)
• Legitimate interests (ensuring site integrity and bookings operate smoothly).

4. Consent Management

• You must opt-in for any non-essential communications.
• Consent is clearly shown via unchecked checkboxes on forms.
• You can withdraw consent anytime by contacting us.

5. Sharing Data

We do not sell or trade your personal data. However, we may share data with trusted third parties, including:

• Payment Processors: To securely process transactions.
• Cloud Storage & Hosting Providers: To store and manage business operations.
• Analytics Providers: To improve our services and website performance.
• Legal & Regulatory Authorities: When required to comply with legal obligations.
• All third parties must adhere to strict data protection policies.

6. Security Measures

• All form submissions are secured via HTTPS/SSL.
• Data access is limited to authorized staff only, protected by encryption, strong password policies, and regular audits

7. Data Retention

• Booking & contact form data: retained for up to 12 months after last interaction.
• Marketing consent logs: retained until revoked.
• Deletion requests: honoured unless legal obligations require longer retention.

8. Your Rights

Depending on your location (Australia, UK, EU), you have rights to:

• Access, correct, delete your personal data
• Object or restrict processing
• Withdraw consent for marketing
• Complain to relevant data protection authorities

9. Cookies & Tracking

We may use minimal essential cookies or analytics (e.g., booking widget logs).

• Details will be disclosed in a separate Cookie Policy
• Usage adheres to GDPR/CCPA disclosure norms

10. International Transfers

If data is processed outside Australia, we ensure lawful safeguards like standard contractual clauses or adequate jurisdiction protections.

11. Updates to This Policy

Policy updates will appear here with a new “Last updated” date.
We recommend reviewing this periodically.

12. Contact

For questions, data requests, or complaints, contact us at:
info@burntorange.com.au
Or via our website’s “Contact” section.