Privacy Policy.

We may collect personal information that is reasonably necessary for our business activities, including:

• your full name, email address and phone number
• your property or site address
• photographs, videos, or other images of your property or site
• details of the work or services you require
• communication records, including emails, messages, call notes, and enquiry details
• payment, invoicing, and transaction-related information where relevant
• any other information you voluntarily provide to us

We generally do not collect sensitive information. If sensitive information is ever required for a particular job or legal purpose, we will only collect it where reasonably necessary and, where required, with your consent.

We collect personal information directly from you when you:

• submit an enquiry through our website
• call, text, or email us
• contact us through social media platforms
• provide information during a site inspection, quote, booking, or job
• send us photographs, documents, or other materials relevant to the work
• pay invoices or otherwise deal with us in the course of business

We also collect limited technical information automatically through our website, as described in section 4.3.

We may use personal information to:

• respond to enquiries and provide quotes
• arrange site visits, inspections, bookings, and service delivery
• communicate with you about jobs, scheduling, variations, and invoices
• assess site conditions and determine the services required
• maintain internal business records
• issue invoices, receive payments, and manage accounts
• comply with legal, regulatory, tax, insurance, and safety obligations
• protect our lawful interests and manage disputes
• improve our website, services, and customer experience

We do not sell or rent personal information. We only disclose it to the extent reasonably necessary, to:

• employees or contractors who assist us in operating the business
• subcontractors or operators attending a site or performing work connected to your job
• professional advisers such as accountants, lawyers, or insurers
• the service providers listed below, and bookkeeping, payment or backup providers we use
• government bodies, regulators, law enforcement agencies, or other third parties where required or authorised by law

We use reputable third-party providers to help run the business. Current providers include:

• HubSpot, customer relationship management (CRM) and contact records (United States)
• Google Workspace / Gmail, email and document storage (United States)
• Google Analytics and Google Search Console, website analytics and search performance (United States)
• Google Ads and Google Ads Enhanced Conversions, advertising performance and conversion measurement (United States), see section 4.3
• Google Maps, mapping and service-area display (United States)
• Lovable Cloud and Mailgun, website hosting, database, and transactional email delivery (United States / European Union)
• Meta (Facebook, Instagram), social media interactions (United States)

This list may change from time to time as our tools change.

Some of these providers store or process personal information outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they handle personal information in a manner consistent with the Australian Privacy Principles. By providing your information to us, you consent to it being disclosed to and stored by these providers in those countries.

Our website is built and published using Lovable Cloud. If you submit our contact or quote form, the information you provide may include your name, contact details, property details, job description, and any photographs you upload.

Form submissions are sent to our business email inbox and recorded in our customer system so that we can respond to enquiries, provide quotes, and manage customer communications.

We do not currently use a chatbot, live chat, or AI assistant on our website.

Uploaded photographs may contain personal information, including property location details or identifiable features of your site. By sending them, you acknowledge that we may use them for quoting, planning, delivering services, record-keeping, and related business purposes.

Photos you upload through our forms are stored in a private storage area on our website's backend. They are not published, not indexed by search engines, and cannot be browsed by other visitors. Only Ironbark can generate a viewing link, and those links are sent to our own business inbox and attached to your enquiry record in our customer system. We keep uploaded photos only as long as we need them for quoting, delivering the work, and our record-keeping obligations, and you can ask us to delete them at any time.

Our website uses cookies and similar technologies to improve functionality and understand website traffic. These may collect your browser type, device information, IP address, pages visited, time spent on pages, and referring website addresses.

We use Google Analytics to understand website traffic and improve our website and services.

We also use Google Ads conversion tracking and Enhanced Conversions. When you submit a contact or quote form, the information you provide (such as email, phone, name and property address) is hashed using SHA-256 in your browser before it is sent to Google. This lets us measure which advertising leads to enquiries without sharing readable personal information.

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

If you contact us through Facebook, Instagram, or another social media or review platform, your information may also be handled under that platform's own privacy policy and terms.

Our website contains links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their privacy policies before providing them with personal information.

We may send emails and SMS messages for operational purposes, including to confirm appointments, provide site visit updates, notify you of scheduling changes, or follow up on active quotes and jobs. By providing your contact details and contacting us, you consent to receiving these messages. They are not marketing. You can reply STOP to an SMS or contact us directly to opt out.

We only contact you about the enquiry or job you sent us. We do not add you to a mailing list without your express consent, such as ticking the optional news box on our forms, and we do not send unsolicited marketing SMS.

You can opt out of marketing at any time by replying and asking us to stop, or by contacting us directly. We will action opt-out requests within a reasonable time.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include:

• password protection on devices and accounts
• multi-factor authentication where available
• limiting access to authorised persons only
• use of reputable cloud, website, and email providers
• secure backups
• keeping software and devices reasonably up to date
• secure disposal or de-identification of information no longer required

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, and for related legal, tax, insurance, accounting, warranty, dispute-resolution, and record-keeping purposes.

As a general guide, we retain enquiry, quotation, job, invoice, and related records for up to 7 years after the last interaction, to meet Australian Taxation Office, insurance, and consumer-law obligations. Some records may be retained for longer where required by law.

When personal information is no longer required, we will take reasonable steps to destroy it or ensure it is de-identified.

If we become aware of an eligible data breach and are required by law to notify affected individuals and the relevant regulator, we will do so as soon as practicable.

You may request access to the personal information we hold about you, and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading, or to delete it where we are not required to keep it.

We may need to verify your identity first. In some circumstances permitted by law, we may refuse access or correction, in which case we will provide written reasons where required. We aim to respond within 30 days.

If you believe we have handled your personal information improperly, contact us with enough detail for us to understand and investigate. We will:

• acknowledge receipt of your complaint within a reasonable time
• ask you for further information if needed
• investigate the complaint and consider the outcome
• respond to you in writing, generally within 30 days, and let you know if we need more time

If you are not satisfied with our response, you may contact the OAIC:

• Website: www.oaic.gov.au
• Phone: 1300 363 992

Our services are not directed to children. We do not knowingly collect personal information from children unless it is provided by a parent, guardian, or other authorised person in connection with a service enquiry or job. If you believe we have collected information from a child inappropriately, please contact us.

We may update this Privacy Policy to reflect changes in our business practices, service providers, website tools, or legal obligations. The updated version will be published here with a revised "Last updated" date.