Bauwerk Colour Australia Pty Ltd respects the privacy of its customers, website visitors, trade partners, contractors, applicants and other individuals with whom it deals.

This Privacy Policy explains how we collect, hold, use and disclose personal information and how individuals may access, correct or complain about the handling of their personal information.

We manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian privacy, communications and data-protection laws.

Privacy Policy — Australia

Effective date: 1 July 2000
Last updated: 22 July 2026

1. About us

1.1 Responsible entity

Bauwerk Colour Australia Pty Ltd
ABN: 17 675 546 371
Principal business address: 1/15 Emplacement Cres., Hamilton Hill WA 6163, Australia
Postal address: PO Box 599, South Fremantle WA 6162, Australia
Telephone: +61 8 9433 3860
Email: info@bauwerk.com.au
Privacy enquiries: info@bauwerk.com.au

In this Policy:

• Bauwerk, we, us and our mean Bauwerk Colour Australia Pty Ltd.
• personal information means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in material form or not.
• sensitive information has the meaning given in the Privacy Act and includes certain information about health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal records and biometric information.
• services include our websites, online stores, customer support, trade services, deliveries, consultations, colour services, marketing activities and other business operations.

1.2 Related Bauwerk businesses

Bauwerk operates through related businesses and sales channels in Australia and other countries.

Where another Bauwerk company separately collects and controls personal information, that company’s applicable privacy policy may also apply.

We may share information with related Bauwerk entities where reasonably necessary for the purposes described in this Policy and where permitted by law.

2. Scope of this Policy

This Policy applies to personal information collected through:

• the Australian Bauwerk Colour website and online store;
• orders, quotations and invoices;
• email, telephone and online enquiries;
• customer-service and product-support interactions;
• trade-account applications and relationships;
• shipping, delivery and returns processes;
• product complaints and claims;
• events, consultations, surveys and competitions;
• social-media interactions;
• marketing subscriptions;
• applications for employment or contracting work; and
• other dealings with Bauwerk Colour Australia.

This Policy should be read with our:

• Terms and Conditions of Business;
• Shipping and Returns Policy;
• website cookie or consent settings;
• product-claim forms;
• trade-account terms; and
• any collection notice provided for a particular interaction.

3. Personal information we collect

The kinds of personal information we collect depend on the nature of the interaction.

3.1 Identity and contact information

We may collect:

• full name;
• business or trading name;
• job title;
• postal, billing and delivery addresses;
• email address;
• telephone number;
• account username;
• preferred language;
• communication preferences; and
• authorised representatives and contacts.

3.2 Order and transaction information

We may collect:

• products ordered;
• colours and quantities;
• order and invoice numbers;
• quotation details;
• payment status;
• transaction records;
• discounts and trade pricing;
• delivery instructions;
• order history;
• returns and refunds;
• credit notes;
• customer-service history; and
• loyalty, trade or account information.

3.3 Payment information

Payments may be processed by third-party payment providers.

Depending on the payment method, we or our providers may collect:

• payment-card type;
• masked card number;
• cardholder name;
• billing address;
• transaction identifier;
• payment authorisation result;
• bank-payment information; and
• fraud-screening information.

We do not ordinarily intend to retain complete payment-card numbers or card security codes within Bauwerk’s own general business systems.

3.4 Delivery and location information

We may collect:

• delivery and collection addresses;
• recipient details;
• authority-to-leave instructions;
• access details;
• carrier tracking information;
• proof of delivery;
• delivery photographs;
• delivery signatures;
• site contact details; and
• general location information relevant to delivery or service provision.

3.5 Project and technical information

Where assistance is requested for a project, colour selection, application or product concern, we may collect:

• project name and location;
• building or room type;
• substrate and surface information;
• product system and preparation details;
• photographs and videos of the project;
• plans, specifications or schedules voluntarily supplied;
• applicator, builder, architect or designer details;
• environmental and application conditions;
• sample and brush-out information; and
• technical correspondence.

3.6 Product claims and complaint information

When a product, delivery or damage claim is made, we may collect:

• proof of purchase;
• order, batch and production information;
• photographs and videos;
• original digital image or video files;
• available file metadata;
• project and site information;
• product samples;
• delivery packaging and shipping records;
• contractor and applicator details;
• invoices, timesheets and labour records;
• technical or expert reports;
• claim declarations;
• details of alleged loss or damage;
• communications with carriers, insurers and advisers; and
• information reasonably necessary to investigate, verify and resolve the claim.

Original digital files may contain technical information such as the recording device, date, time and location.

We will use this information only for legitimate purposes associated with claim assessment, fraud prevention, dispute resolution, safety, insurance, legal compliance and related business administration.

3.7 Trade and business information

For trade accounts and commercial relationships, we may collect:

• ABN or ACN;
• business structure;
• business address;
• director or authorised-officer information;
• trade references;
• purchase history;
• credit terms;
• credit and payment history;
• Personal Property Securities Register information;
• licence or professional information where relevant;
• information about employees or representatives; and
• information required to manage commercial risk.

3.8 Website and device information

When a person visits or uses our website, we or our technology providers may collect:

• Internet Protocol address;
• browser and device type;
• operating system;
• device identifiers;
• pages visited;
• links selected;
• search terms;
• date and time of access;
• referring website;
• session and interaction information;
• approximate location derived from an IP address;
• shopping-cart activity;
• checkout activity;
• cookie and similar-technology identifiers;
• advertising identifiers; and
• website performance and error information.

3.9 Marketing and preference information

We may collect:

• newsletter subscriptions;
• consent and opt-out records;
• product and colour interests;
• campaign engagement;
• email opening and link information where enabled;
• browsing or purchasing preferences;
• event participation;
• survey responses; and
• communication-channel preferences.

3.10 Social-media information

If a person interacts with Bauwerk through a social-media or content-sharing platform, we may receive:

• account name or profile name;
• public profile information;
• comments, messages and reactions;
• content submitted to us;
• campaign or advertising engagement; and
• information the platform makes available in accordance with the user’s settings and the platform’s terms.

The relevant platform separately controls information collected through its own services.

3.11 Recruitment and contractor information

Where a person applies for employment, contracting or work experience, we may collect:

• contact details;
• curriculum vitae;
• employment and education history;
• qualifications;
• references;
• work eligibility;
• interview notes;
• salary or fee expectations;
• background-check information where lawful and relevant; and
• other information voluntarily supplied as part of the application.

Employee records may be governed by separate workplace processes and legal provisions.

3.12 Sensitive information

We do not generally seek to collect sensitive information from customers.

We will collect sensitive information only where:

• it is reasonably necessary for our functions or activities;
• the individual consents;
• the collection is required or authorised by law; or
• another lawful exception applies.

For example, limited health or accessibility information may be provided where reasonably necessary to arrange safe access, delivery, communication or participation.

4. How we collect personal information

4.1 Direct collection

We usually collect personal information directly from the individual when they:

• place an order;
• create an account;
• request a quotation;
• contact us;
• subscribe to marketing;
• submit an enquiry or claim;
• participate in a survey or promotion;
• provide a review or testimonial;
• communicate through social media;
• attend an event or consultation;
• apply for a trade account; or
• apply for employment or contracting work.

4.2 Collection from other persons

We may collect personal information from:

• a customer’s employee, contractor or representative;
• builders, painters, architects, designers and project managers;
• delivery recipients;
• related Bauwerk businesses;
• stockists or authorised commercial partners;
• carriers and logistics providers;
• payment and fraud-prevention providers;
• professional advisers;
• referees;
• publicly available business sources;
• social-media and technology platforms; and
• government or regulatory records where lawful.

4.3 Unsolicited information

If we receive personal information that we did not request, we will determine whether we could lawfully have collected it.

Where we could not lawfully have collected it and it is lawful and reasonable to do so, we will destroy or de-identify it.

4.4 Anonymity and pseudonyms

Individuals may interact with us anonymously or using a pseudonym where this is lawful and practicable.

Identification will usually be necessary where we need to:

• process or deliver an order;
• provide account-specific support;
• assess a product or payment claim;
• issue an invoice or refund;
• verify authority;
• establish a trade or credit account;
• comply with law; or
• protect against fraud or misuse.

5. Why we collect, hold, use and disclose information

We may collect, hold, use and disclose personal information to:

• provide products and services;
• process, fulfil and administer orders;
• produce and tint Goods;
• issue quotations, invoices, refunds and credits;
• process and verify payments;
• arrange shipping, delivery, collection and returns;
• manage customer and trade accounts;
• communicate about orders, products and services;
• answer enquiries;
• provide product and application support;
• assess project requirements;
• investigate product, colour, delivery and damage claims;
• verify evidence supplied in support of a claim;
• detect and prevent fraud, misuse and unlawful activity;
• manage complaints and disputes;
• enforce or defend contractual and legal rights;
• obtain technical, insurance, accounting or legal advice;
• manage warranties and Australian Consumer Law obligations;
• maintain product, production and quality-control records;
• improve products, services, websites and customer experience;
• perform analytics, research and business planning;
• maintain website and system security;
• personalise website content where permitted;
• conduct direct marketing where lawful;
• manage promotions, surveys and events;
• administer trade and commercial relationships;
• assess applications for employment or contracting;
• comply with tax, accounting, safety, regulatory and legal obligations;
• respond to courts, regulators and law-enforcement bodies where required or permitted;
• manage a business sale, restructuring or corporate transaction; and
• carry out other purposes notified at the time of collection or authorised by law.

6. Use and disclosure

We generally use or disclose personal information for the purpose for which it was collected.

We may also use or disclose it for:

• a related purpose the individual would reasonably expect;
• another purpose to which the individual has consented;
• a purpose required or authorised by law; or
• another purpose permitted under the Privacy Act.

We do not sell personal information as a standalone commercial product.

This does not prevent us from using service providers, advertising platforms, analytics providers or related companies for the legitimate purposes described in this Policy.

7. Parties to whom we may disclose information

We may disclose personal information where reasonably necessary to:

• related Bauwerk companies;
• website, ecommerce and content-management providers;
• hosting and cloud-storage providers;
• payment gateways, banks and payment processors;
• fraud-prevention and account-security providers;
• carriers, couriers, warehouses and logistics providers;
• customer-support and communications providers;
• email, messaging and marketing-service providers;
• data analytics and website-performance providers;
• advertising and social-media platforms where permitted;
• IT, cybersecurity and software providers;
• accountants, auditors and tax advisers;
• insurers and insurance advisers;
• legal advisers and dispute-resolution providers;
• laboratories, technical consultants and product experts;
• printers, fulfilment partners and contractors;
• debt-recovery and credit-management providers;
• prospective purchasers, investors or advisers involved in a genuine business transaction;
• courts, tribunals, regulators, government authorities and law-enforcement bodies; and
• other persons where the individual has consented or disclosure is otherwise permitted by law.

We require service providers to handle personal information only for authorised purposes and subject to appropriate confidentiality, privacy and security obligations, so far as reasonably practicable.

8. Overseas disclosures and international processing

8.1 Overseas recipients

Some of our related companies and service providers are located outside Australia or use international infrastructure.

Personal information may therefore be disclosed to, stored in or accessed from countries including:

• Australia;
• New Zealand;
• the United States;
• Canada;
• the United Kingdom;
• countries within the European Economic Area;
• countries in which related Bauwerk businesses operate;
• countries in which our technology or professional-service providers operate; and
• destination or transit countries relevant to an international order or delivery.

The specific countries may change as providers, systems and business requirements change.

8.2 Safeguards

Before disclosing personal information to an overseas recipient, we will take reasonable steps required by applicable law to ensure that the recipient handles the information consistently with the Australian Privacy Principles, unless an exception applies.

Depending on the circumstances, safeguards may include:

• contractual privacy obligations;
• confidentiality requirements;
• security reviews;
• access restrictions;
• provider due diligence;
• data-processing terms; and
• other reasonable protective measures.

8.3 International website use

The website may be accessible from outside Australia.

Individuals using the Australian website from another country acknowledge that their information may be transferred to and processed in Australia and other locations described in this Policy, subject to applicable law.

9. Cookies and similar technologies

9.1 Technologies used

Our website and service providers may use:

• cookies;
• pixels;
• tags;
• scripts;
• local storage;
• software development kits;
• device identifiers; and
• similar technologies.

9.2 Purposes

These technologies may be used to:

• enable essential website functions;
• remember preferences;
• maintain sessions and shopping carts;
• process checkout activity;
• secure accounts and transactions;
• detect fraud;
• measure website performance;
• diagnose errors;
• understand how visitors use the website;
• improve content and navigation;
• measure marketing effectiveness;
• personalise content; and
• provide or measure advertising where permitted.

9.3 Cookie controls

Where a consent-management tool is provided, individuals may use it to manage non-essential cookie preferences.

Browser and device settings may also allow cookies or similar technologies to be blocked or deleted.

Disabling essential or functional technologies may affect website operation, account access, checkout or other services.

9.4 Third-party platforms

Third-party analytics, advertising, video, social-media or payment services may collect information under their own privacy policies and technologies.

The individual should review the privacy settings and policies of those providers.

10. Direct marketing

10.1 Marketing communications

Where permitted by law, we may use personal information to send information about:

• Bauwerk products;
• colour and application resources;
• events;
• services;
• educational content;
• offers;
• surveys; and
• other Bauwerk news.

10.2 Basis for marketing

We may send direct marketing where:

• the individual has consented;
• the individual would reasonably expect us to use the information for that purpose;
• another lawful basis applies; or
• the communication is otherwise permitted under applicable marketing and communications laws.

10.3 Opting out

Marketing communications will provide a simple method to unsubscribe where required.

An individual may also ask us at any time to stop sending direct marketing by:

• using the unsubscribe function;
• adjusting available account or cookie preferences; or
• contacting us using the details in this Policy.

We will action an opt-out request within a reasonable period and without charge.

10.4 Service communications

Opting out of marketing does not prevent us from sending necessary non-marketing communications concerning:

• orders;
• deliveries;
• payments;
• account security;
• product safety;
• recalls;
• claims;
• legal notices; or
• other existing transactions.

10.5 Source of information

Where required by law, an individual may ask us to identify the source of personal information used for direct marketing, unless it is unreasonable or impracticable to provide that information.

11. Automated processing and decision support

11.1 Automated tools

We and our service providers may use computer programs and automated tools to assist with:

• payment authorisation;
• transaction and fraud screening;
• account and website security;
• spam and misuse detection;
• delivery routing;
• stock and demand planning;
• customer-service routing;
• marketing segmentation;
• product recommendations;
• website personalisation; and
• business analytics.

11.2 Decisions affecting individuals

Where we arrange for a computer program to use personal information to make or substantially assist in making a decision that could reasonably be expected to significantly affect an individual’s rights or interests, we will provide the transparency required by applicable law.

This may include information about:

• the kinds of decisions made;
• the kinds of personal information used;
• the role of automated processing; and
• how an individual may seek further information or human review where applicable.

11.3 Human review

Where reasonably appropriate, an individual may contact us if they believe an automated process has produced an incorrect or unfair result relating to them.

12. Accuracy and correction

We take reasonable steps to ensure that personal information we collect, use and disclose is accurate, complete, relevant and up to date.

Individuals should notify us if their information changes or appears incorrect.

We may take reasonable steps to verify requested corrections before changing records.

Where we correct personal information previously disclosed to another APP entity, we will take reasonable steps to notify that entity where required by law.

13. Data security

13.1 Reasonable protection

We take reasonable steps to protect personal information from:

• misuse;
• interference;
• loss;
• unauthorised access;
• unauthorised modification; and
• unauthorised disclosure.

13.2 Security measures

Depending on the information and system involved, our measures may include:

• role-based access;
• account authentication;
• access reviews;
• encryption or secure transmission;
• reputable hosting and service providers;
• system monitoring;
• backups;
• staff confidentiality obligations;
• privacy and security procedures;
• software maintenance;
• incident-response processes;
• physical security; and
• secure destruction or de-identification.

For security reasons, we do not publish detailed technical controls that could weaken their effectiveness.

13.3 Customer responsibilities

Individuals are responsible for:

• keeping account credentials confidential;
• using secure passwords;
• protecting devices;
• checking the authenticity of communications;
• notifying us of suspected unauthorised account use; and
• avoiding the transmission of unnecessary sensitive information.

No transmission or storage system can be guaranteed to be completely secure.

14. Data breaches

A data breach may involve personal information being:

• lost;
• accessed without authorisation;
• disclosed without authorisation; or
• otherwise compromised.

Where we become aware of a suspected breach, we will take reasonable steps to:

• contain the incident;
• investigate what occurred;
• assess the information and individuals affected;
• reduce the risk of harm;
• preserve relevant evidence;
• address security weaknesses; and
• comply with notification and reporting obligations.

Where the Notifiable Data Breaches scheme applies and an eligible data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

Notifications may include recommendations about steps affected individuals should take.

15. Retention and destruction

15.1 Retention periods

We retain personal information only for as long as reasonably necessary for:

• the purpose for which it was collected;
• fulfilment of orders and services;
• customer and product support;
• claims and warranty administration;
• quality-control and product-traceability purposes;
• legal, tax and accounting obligations;
• fraud prevention;
• dispute and litigation requirements;
• insurance requirements;
• record-keeping obligations; and
• legitimate business administration.

15.2 Factors affecting retention

Retention periods vary according to:

• the type and sensitivity of the information;
• the nature of the transaction;
• legal limitation periods;
• product and batch-traceability needs;
• unresolved complaints or disputes;
• safety or regulatory requirements; and
• whether the information remains necessary for a lawful business purpose.

15.3 Destruction and de-identification

Where personal information is no longer required and we are not legally required or authorised to retain it, we will take reasonable steps to destroy it or permanently de-identify it.

Information may remain for a limited period in secure backups or archives until it is overwritten or safely removed in accordance with normal system processes.

15.4 De-identified information

We may retain and use information that has been de-identified so that it no longer identifies or reasonably identifies an individual, including for:

• analytics;
• product improvement;
• quality control;
• forecasting;
• research;
• reporting; and
• business planning.

16. Access to personal information

16.1 Access requests

An individual may request access to personal information we hold about them.

Requests may be made using the contact details in this Policy.

16.2 Verification

We may require reasonable information to:

• confirm the requester’s identity;
• confirm their authority to act for another person;
• identify the information requested; and
• protect the privacy of other individuals.

16.3 Response

We will respond within a reasonable period.

Where practicable, we will provide access in the form requested.

16.4 Grounds for refusal

We may refuse or limit access where permitted or required by law, including where access would:

• unreasonably affect another person’s privacy;
• reveal commercially sensitive evaluative information;
• prejudice an investigation;
• be unlawful;
• reveal information connected with legal proceedings;
• pose a serious threat to life, health or safety; or
• fall within another statutory exception.

Where access is refused, we will generally provide written reasons and information about available complaint mechanisms, except where it would be unreasonable or unlawful to do so.

16.5 Charges

We will not charge for making an access request.

We may charge a reasonable amount for the cost of providing access where permitted by law, but not for correcting personal information.

17. Correction of personal information

An individual may request correction of personal information they believe is:

• inaccurate;
• out of date;
• incomplete;
• irrelevant; or
• misleading.

We will take reasonable steps to correct the information where appropriate.

If we refuse a correction request, we will generally provide written reasons and information about complaint options.

An individual may ask us to associate a statement with the relevant record explaining that they consider the information inaccurate, out of date, incomplete, irrelevant or misleading.

18. Privacy enquiries and complaints

18.1 Contacting us

Privacy enquiries, access requests, correction requests and complaints may be sent to:

Privacy Contact
Bauwerk Colour Australia Pty Ltd
Email: info@bauwerk.com.au
Telephone: +61 8 9433 3860
Postal address: PO Box 599, South Fremantle WA 6162, Australia

18.2 Information to include

A complaint should include:

• the complainant’s name and contact details;
• a description of the concern;
• relevant dates and communications;
• any supporting information; and
• the outcome requested.

A person is not required to use a particular form to make a privacy complaint.

18.3 Our complaint process

We will:

• acknowledge the complaint within a reasonable period;
• investigate it in good faith;
• request additional information where reasonably necessary;
• consider the relevant privacy requirements;
• communicate the outcome; and
• take appropriate corrective action where warranted.

We aim to provide a substantive response within 30 days, although complex matters may require additional time.

If additional time is required, we will advise the complainant where reasonably practicable.

18.4 External complaint

If the individual is not satisfied with our response, they may contact the Office of the Australian Information Commissioner.

The OAIC may generally expect the individual to raise the matter with us first and allow us a reasonable opportunity to respond.

19. Links and third-party services

Our website may contain links to third-party websites, applications, videos, maps, social-media services or other external content.

We do not control the privacy practices of those third parties.

The individual should review the privacy policy and settings of an external service before providing personal information.

A link or embedded service does not necessarily mean that Bauwerk endorses all of the provider’s privacy or data-handling practices.

20. Children and young people

Our online store and services are not directed primarily to children.

We do not knowingly seek to collect personal information directly from children without appropriate involvement of a parent or guardian where this is required.

If we become aware that we have collected a child’s personal information in circumstances where it should not have been collected, we will take reasonable steps to delete or de-identify it, subject to applicable law.

21. Business transfers and corporate changes

If Bauwerk undertakes or considers:

• a sale of business;
• merger;
• acquisition;
• financing;
• restructuring;
• transfer of assets; or
• insolvency process,

personal information may be disclosed to prospective purchasers, investors, financiers and professional advisers where reasonably necessary.

We will take reasonable steps to protect confidentiality and limit disclosure to information relevant to the proposed transaction.

Any successor handling the information will be required to comply with applicable privacy obligations.

22. Legal rights and commercial protection

Nothing in this Policy prevents Bauwerk from collecting, using, retaining or disclosing information where reasonably necessary and lawfully permitted to:

• investigate suspected fraud or misrepresentation;
• verify evidence submitted in support of a claim;
• protect Bauwerk, its customers, staff and systems;
• enforce contracts;
• recover debts;
• establish, exercise or defend legal claims;
• obtain confidential legal advice;
• comply with a lawful request;
• cooperate with regulators or law-enforcement authorities;
• respond to safety concerns; or
• protect intellectual property and confidential business information.

Where possible, we will limit such handling to information reasonably necessary for the relevant purpose.

23. Changes to this Policy

We may update this Policy to reflect:

• changes in law;
• regulatory guidance;
• technology;
• service providers;
• business operations;
• information-handling practices; or
• security requirements.

The current version will be published on our website with its effective date and last-updated date.

Material changes will apply prospectively unless:

• the individual consents;
• the change is required by law; or
• retrospective application is otherwise lawful and reasonable.

We recommend reviewing this Policy periodically.

24. Availability of this Policy

This Policy is available free of charge on our website.

A person may request a copy in another reasonably available form by contacting us.

© 2026 Bauwerk Colour Australia Pty Ltd. All rights reserved.