Privacy Policy

About Central Skylights

In this policy, “Central Skylights”, “we”, “us” and “our” refer to the business operating the Central Skylights website and providing skylight products, quotations, appointments, installation services and related customer support.

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

The kinds of personal information we may hold

The information we collect depends on how you interact with us. It may include:

How personal information reaches us

We generally collect information directly from you when you:

• submit an online quote, contact or enquiry form;
• upload room, ceiling, roof, skylight or property photos;
• book or change a home-visit appointment;
• place an online, telephone, email or showroom order;
• create or use a customer account;
• speak with our staff, installers, plasterers or customer-service team;
• visit our showroom, warehouse or website;
• provide feedback, a review or a complaint; or
• communicate with us by email, phone, SMS or another channel.

We may also receive information from another person involved in your project, such as a partner, owner, tenant, builder, architect, roofer, property manager or tradesperson. We may receive transaction or delivery information from payment processors, suppliers and delivery providers.

Why we collect, hold and use personal information

• to respond to enquiries and provide product or installation advice;
• to assess photos, plans and property details for quotation purposes;
• to prepare, issue and follow up quotations;
• to book, confirm, reschedule and manage home visits or installations;
• to supply, deliver, install and support skylights and related products;
• to process orders, payments, refunds and account enquiries;
• to communicate with customers before, during and after a project;
• to maintain business, taxation, accounting and service records;
• to improve our website, forms, products and customer experience;
• to prevent fraud, misuse, spam and security incidents;
• to manage complaints, disputes, legal claims and safety matters; and
• to comply with legal and regulatory obligations.

If we cannot collect information reasonably required for a quote, appointment, order or installation, we may be unable to provide that service or may need to request further details.

How we handle property images and documents

Photos, videos, plans, drawings and measurements submitted for an enquiry may reveal details about your home or property. We use this material to understand the project, recommend suitable products, prepare quotations, plan work and maintain service records.

We may share relevant project material with employees, installers, plasterers, suppliers, technical advisers or other service providers where reasonably necessary to assess or complete the work.

Who we may share personal information with

We do not sell or rent personal information. We may disclose relevant information to:

• Central Skylights employees and authorised team members;
• installers, plasterers, inspectors and other contractors engaged for your project;
• product manufacturers, wholesalers and technical-support providers;
• couriers, freight companies and delivery providers;
• payment processors, banks and fraud-prevention services;
• website hosting, ecommerce, form, appointment, email, cloud-storage, analytics and IT providers;
• accountants, insurers, professional advisers and debt-recovery providers;
• government agencies, regulators, courts or law-enforcement bodies where required or authorised by law; and
• another business in connection with a proposed or completed sale, restructure or transfer of all or part of our business, subject to appropriate confidentiality arrangements.

We aim to disclose only the information reasonably necessary for the recipient to perform the relevant service or function.

Payment and financial information

Online and electronic payments may be processed by third-party payment providers, including Square or another provider displayed at checkout or on an invoice. Payment-card details are entered into the payment provider’s systems and are subject to that provider’s privacy and security practices.

Central Skylights does not intend to store complete credit-card or debit-card numbers on its website. We may retain transaction references, payment status, invoice information and limited payment details required for accounting, refunds, dispute management and customer support.

Information collected when you use our website

Our website may use cookies, pixels, local storage and similar technologies to operate website features, remember preferences, maintain shopping or account sessions, measure website performance, understand how visitors use the site and protect forms from spam or abuse.

Website information may include your IP address, browser, device, approximate location, referral source, pages viewed, links selected, time on page and interactions with forms or website features.

You can usually manage cookies through your browser or device settings. Blocking some cookies may prevent shopping, login, form, appointment or other website features from working correctly.

Promotions and service communications

We may send service-related messages about an enquiry, quote, appointment, order, installation or account. These communications are necessary to manage your request or project.

We may also send marketing messages where permitted by law and where we have an appropriate basis to do so. You can opt out of marketing emails or messages by using the unsubscribe option provided or by contacting us. Opting out of marketing will not stop necessary service communications.

How we protect and retain information

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, passwords, secure systems, software updates, backups, staff procedures and restricted access to customer records.

No website, email service, cloud platform or electronic storage system can be guaranteed to be completely secure. Please contact us promptly if you believe information sent to or held by us may have been accessed improperly.

We retain personal information for as long as reasonably required for the purposes described in this policy, including quoting, service history, accounting, taxation, product support, dispute resolution, legal obligations and legitimate business records. When information is no longer required, we may securely delete, destroy or de-identify it.

Cloud services and overseas recipients

Some technology, website, communication, payment, analytics or cloud-service providers may store or process information outside Australia. Depending on the provider and service, these locations may include the United States and other countries in which the provider or its subcontractors operate.

Where Australian privacy law applies, we take reasonable steps appropriate to the circumstances when selecting and using service providers that handle personal information. Overseas privacy protections may differ from those in Australia.

Your personal information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Contact us using the details at the end of this policy. We may need to verify your identity before responding. In some circumstances, access may be limited or refused where permitted by law. If that occurs, we will explain the reason where required.

How to raise a privacy concern

Please send privacy complaints to us in writing using the contact details below. Include enough information for us to understand the concern, identify the relevant interaction or record and contact you about the outcome.

We will acknowledge and investigate the complaint and aim to respond within a reasonable period. If you are not satisfied with our response and the Privacy Act applies, you may be able to contact the Office of the Australian Information Commissioner.

Responding to security incidents

If we become aware of a suspected loss, unauthorised access or disclosure of personal information, we will assess and respond to the incident. Where the Notifiable Data Breaches scheme applies and the legal notification threshold is met, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

Updates to this privacy policy

We may update this policy when our services, technology, providers, legal obligations or information-handling practices change. The latest version will be published on this page with the revised “last updated” date.

We encourage customers to review this policy periodically, particularly before submitting new personal information.