Privacy Policy

This Privacy Policy explains how Smoosh Workstations PTY LTD (ABN 84 277 424 975), referred to as Smoosh Workstations, we, us or our, collects, uses, holds and discloses your personal information. It applies to our website at smooshworkstations.com.au and to our customer portal, where you can request quotes and manage orders and invoices.

Smoosh Workstations is an Australian owned and operated business. We handle personal information consistently with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). If you visit us from outside Australia, the additional sections near the end of this policy may also give you rights under your local laws.

By using our website or providing your personal information to us, you agree to the handling of your information as described in this policy. If you do not agree, please do not use the website or submit your information to us.

The personal information we collect

We only collect personal information that we need to provide our products and services to you. The kinds of information we collect include:

• Enquiry details. When you use our contact form or email us, we collect your name and email address, and optionally your mobile number, location, enquiry type, budget, the applications you use, and the contents of your message.
• Account details. If you create an account in our customer portal, our authentication provider collects your name, email address and the credentials you use to sign in (for example a password or a single sign-on identity), along with basic session information.
• Quote, order and billing details. To prepare quotes and fulfil orders we collect information such as your delivery and billing address, the products you are interested in, order history, and invoice and payment records.
• Technical and usage information. When you visit the website our hosting and analytics systems automatically collect information such as your IP address, browser type, device information, the pages you view and how you arrived at our site.
• Marketing preferences. If you opt in to marketing, we record your consent and your communication preferences.

We do not seek to collect sensitive information (such as health, racial, political or biometric information) and ask that you do not send it to us. If you choose to include sensitive information in a message, you consent to us handling it for the purpose of responding to you.

How we collect your information

We collect personal information in the following ways:

• Directly from you, when you complete the contact form, create an account, request a quote, place an order, or otherwise communicate with us.
• Automatically, through standard server logs, cookies and analytics when you use the website.
• From third parties, such as our authentication provider when you sign in using a single sign-on service, where you have authorised that provider to share the information.

Why we collect, hold, use and disclose your information

We collect, hold, use and disclose personal information for the following purposes:

• To respond to your enquiries and prepare quotes.
• To create and manage your account, and to process and fulfil orders, invoices and payments.
• To provide customer support, and to handle warranty and service requests.
• To operate, secure and improve our website, including protecting our contact form from abuse (for example, briefly using your IP address to limit repeated submissions).
• To understand how our website is used, through analytics, so we can improve it.
• To send you marketing communications where you have consented, and to manage your preferences.
• To meet our legal, accounting and tax obligations.

Cookies, analytics and tracking

Our website uses a small amount of local browser storage to remember your display preferences, such as light or dark mode. This stays on your device and is not used to track you.

We use analytics services to understand how visitors use our website so we can improve it. These services may use cookies or similar identifiers and may collect information such as your IP address, the pages you view and your interactions with the site. We do not use advertising networks and we do not allow third parties to track you across other websites for advertising.

You can control or block cookies through your browser settings. If you are located in a region that requires consent before non-essential analytics run (such as the EU, EEA or UK), we will ask for your consent before loading those analytics.

Direct marketing

We will only send you marketing communications, such as product news or offers, where you have agreed to receive them. Every marketing message includes an easy way to unsubscribe, and we action unsubscribe requests promptly, consistent with the Spam Act 2003 (Cth).

You can opt out of marketing at any time by using the unsubscribe link in any message, or by emailing us at accounts@smooshworkstations.com.au. Opting out of marketing does not stop us from sending you messages we need to send about your enquiry, order or account.

Who we share your information with

We do not sell, rent or trade your personal information. We share it only where it is necessary for the purposes described above, with:

• Service providers who help us run our business, including our website hosting, database and storage, authentication, email delivery, and analytics providers.
• Suppliers and delivery partners, where needed to build and deliver your order.
• Professional advisers, such as our accountants or lawyers, where reasonably required.
• Government agencies, regulators or law enforcement, where we are required or authorised by law.

We require our service providers to protect your personal information and to use it only for the purposes for which we engage them.

Overseas disclosure

Some of our service providers are located outside Australia. The providers we use for website hosting, database and storage, authentication, email delivery, and analytics are based in the United States, and your personal information may be stored or processed there. This means we are likely to disclose your personal information to recipients located in the United States.

Before disclosing personal information overseas, we take steps that are reasonable in the circumstances to ensure that overseas recipients handle it consistently with the Australian Privacy Principles, including by relying on the data-processing terms offered by those providers. By providing your information to us, you acknowledge that it may be disclosed to recipients in the United States.

How we store and protect your information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include using reputable hosting and software providers, encrypting information in transit, and limiting access to those who need it.

We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires. As a general guide, we keep enquiry correspondence for as long as needed to deal with your enquiry and for a reasonable period afterwards, account information for as long as your account is active, and financial records such as invoices for at least 5 years to meet our tax and accounting obligations. We keep marketing records until you unsubscribe. When we no longer need information, we take reasonable steps to delete or de-identify it.

Accessing and correcting your information

You can ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. To make a request, email us at accounts@smooshworkstations.com.au.

There is no charge for making a request. We will respond within a reasonable period, usually within 30 days. In some cases the law allows us to refuse access or correction; if that happens, we will tell you why in writing and explain how you can complain.

Making a complaint

If you have a concern about how we have handled your personal information, please contact us first at accounts@smooshworkstations.com.au so we can try to resolve it. We will acknowledge your complaint and aim to respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC). You can contact the OAIC at oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.

Visitors in the EU, EEA and United Kingdom

If you are located in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) or the UK GDPR may apply to our handling of your personal information. To the extent it applies, Smoosh Workstations is the controller of your personal information, and you can contact us at accounts@smooshworkstations.com.au.

We rely on the following legal bases to process your information: performance of a contract (to respond to your enquiries and provide quotes, orders and accounts); your consent (for marketing and for non-essential analytics cookies); our legitimate interests (to secure and improve our website); and compliance with a legal obligation (for example, keeping tax records). Where we rely on consent, you can withdraw it at any time.

Where we transfer your personal information to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent protections offered by our service providers.

Subject to the conditions in the GDPR, you have the right to:

• Access the personal information we hold about you.
• Have inaccurate or incomplete information corrected.
• Have your information erased in certain circumstances.
• Restrict or object to our processing, including objecting to direct marketing.
• Receive your information in a portable format and have it transferred where technically feasible.
• Withdraw your consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with your local data protection authority, which in the United Kingdom is the Information Commissioner's Office (ICO).

California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), may give you certain rights. To the extent it applies to us, this section describes how we handle your information and the rights available to you.

In the past 12 months we have collected the following categories of personal information: identifiers (such as your name, email address, phone number, IP address and account identifiers); commercial information (such as quotes, orders and billing records); internet or network activity (such as how you interact with our website); and approximate location derived from your IP address. We collect this information for the business purposes described in this policy.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We also do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit its use. Subject to the conditions in the CCPA, you have the right to:

• Know and access the categories and specific pieces of personal information we have collected about you.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of your personal information (note that we do not sell or share it).
• Not receive discriminatory treatment for exercising your rights.

To exercise these rights, email us at accounts@smooshworkstations.com.au. We will take reasonable steps to verify your identity before responding, and an authorised agent may make a request on your behalf with your permission.

Children's privacy

Our website and services are intended for businesses and adults, and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version is shown by the last updated date at the top of this page. Where the changes are significant, we will take reasonable steps to let you know.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Smoosh Workstations PTY LTD (ABN 84 277 424 975)
• Email: accounts@smooshworkstations.com.au