Privacy Policy — B&C Painting

B&C Painting ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you visit bncpaintingmildura.com.au or engage our painting services, how we use it, who we share it with, and your rights under Australian privacy law.

1. About us

B&C Painting is a painting trade based in Mildura, Victoria, Australia. ABN 39 654 512 357. We provide interior and exterior painting, repaints, roof restorations, pressure washing, floor coatings, shed coatings and commercial work to residential and commercial clients in Mildura and surrounds.

2. Information we collect

2.1 Information you provide directly

Quote / contact form: name, email address, phone number, suburb / property location, service(s) you are interested in, and any details you include about your project.
On-site consultations: property address, scope-of-work details, photographs of the area to be quoted (with your permission).
Invoices & payment records: name, billing address, payment reference (we do not store full card numbers on our systems — payments are handled via direct deposit or in person).

2.2 Information collected automatically

Server logs: our hosting provider (Netlify) records standard request data including IP address, user agent, timestamp and requested URL for security and reliability.
Analytics: we use a privacy-friendly analytics tool (Cloudflare Web Analytics) to count anonymous page views. It does not use cookies and does not track you across sites.

3. How we use your information

We use your information to:

Respond to quote enquiries and book site visits
Prepare and send written quotes
Carry out the agreed painting work
Issue invoices and receipts
Communicate with you about your job (status updates, scheduling, follow-up)
Comply with our legal and tax obligations
Display photographs of completed work in our portfolio (only with your prior consent — we will ask before publishing any identifiable image of your property)

We do not sell your personal information. We do not share it for marketing purposes with third parties.

4. Third-party services we use

Netlify (USA) — hosting of bncpaintingmildura.com.au. See Netlify's privacy policy.
Cloudflare (USA) — DNS, security and (optionally) email routing for our domain. See Cloudflare's privacy policy.
Microsoft / Outlook (USA) — our primary email account used to receive enquiries and correspond with clients.

Some of these providers process data outside Australia (primarily in the United States). We rely on their contractual commitments and their compliance with applicable data protection laws.

5. How we store and protect your information

Your data is held with the providers listed above and in our own working systems (encrypted devices, password-protected email). We use industry-standard technical and organisational measures, and access is limited to the people who need it to do the work for you.

6. How long we keep your information

Quote enquiries that don't proceed: retained for up to 24 months, then deleted.
Active job records: retained for the duration of the engagement.
Past client records, signed quotes, invoices, tax records: retained for at least seven (7) years to comply with Australian Taxation Office record-keeping requirements.

7. Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Correct any information that is inaccurate, out of date or incomplete
Request deletion of information that we no longer need (subject to our legal obligation to retain certain records)
Withdraw consent for any non-essential processing at any time (e.g. portfolio photos)
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information

To exercise any of these rights, email bncpainting@outlook.com. We will respond within thirty (30) days.

8. Data breach notification

If we become aware of an eligible data breach affecting your personal information, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

9. Cookies and tracking

This website does not run third-party advertising trackers. The privacy-friendly analytics tool we use (Cloudflare Web Analytics) does not use cookies and does not track visitors across sites.

10. Children

Our services are intended for adult property owners and businesses. We do not knowingly collect personal information from children under the age of 16. If you believe we have inadvertently collected such information, please email us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to active clients in writing.