Privacy & Terms

POSSUM ROOFING SOLUTIONS 

PRIVACY POLICY 

Schutz Industries Australia Pty Ltd T/A Possum Roofing Solutions 

Version: 1.0     |     Effective Date: 9 June 2026     |     Review Date: Annually 

Website: https://possumroofingsolutions.com.au     |     Email: [email protected] 

 

Schutz Industries Australia Pty Ltd trading as Possum Roofing Solutions (ABN 91 654 775 916) (‘we’, ‘us’, ‘our’, or ‘the Company’) is committed to protecting the privacy of all individuals whose personal information we collect, hold, use, and disclose in the course of operating our business. 

This Privacy Policy explains how we manage personal information in accordance with the Privacy Act 1988 (Cth) (‘the Act’), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth), and the Australian Privacy Principles (‘APPs’) contained in Schedule 1 of the Act. It applies to all personal information collected by us through our website, our business operations, employment processes, and any other means. 

By engaging with us, using our website, submitting an enquiry, applying for employment, or entering into a contract with us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. 

Note on small business exemption: Although Possum Roofing Solutions may qualify for the small business exemption under the Privacy Act 1988 (Cth), which generally applies to businesses with an annual turnover of $3 million or less, we voluntarily comply with the Act and the Australian Privacy Principles as a matter of good business practice and in recognition of our clients’ and employees’ right to privacy. This Policy reflects that voluntary commitment. 

We may update this Privacy Policy from time to time. The current version will always be available on our website. We encourage you to review it periodically. 

 

1.  Definitions 

In this Privacy Policy, unless the context requires otherwise: 

  • ‘Act’ means the Privacy Act 1988 (Cth), as amended from time to time. 
  • ‘APPs’ means the Australian Privacy Principles set out in Schedule 1 of the Act. 
  • ‘Personal information’ has the meaning given to it in the Act and, in general terms, means any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether recorded in a material form or not. This may include your name, address, telephone number, email address, date of birth, financial information, and any other details that identify or could identify you. 
  • ‘Sensitive information’ has the meaning given to it in the Act and includes information about an individual’s health, racial or ethnic origin, criminal record, and other categories prescribed under the Act. We treat sensitive information with a higher degree of care. 
  • ‘We’, ‘us’ and ‘our’ refers to Schutz Industries Australia Pty Ltd T/A Possum Roofing Solutions. 
  • ‘Website’ means https://possumroofingsolutions.com.au and any associated pages or platforms operated by us. 

 

2.  What Personal Information Do We Collect and Hold? 

The types of personal information we collect depend on the nature of your interaction with us. We collect only the personal information that is necessary for one or more of our functions or activities. This may include: 

  • Identification details: full name, date of birth, and photographic identification where required. 
  • Contact details: residential or business address, telephone number(s), and email address. 
  • Financial information: bank account details, payment card information (processed through secure third-party payment gateways), billing address, and invoicing details for the purposes of processing payments and managing accounts. 
  • Property details: the address, description, and photographs of premises in connection with which you have requested services or quotations from us. 
  • Insurance and licensing information: where relevant to the services requested or in connection with a subcontracting or employment arrangement. 
  • Employment and pre-employment information: résumé, employment history, qualifications, licences, references, right to work documentation, and details of next of kin where provided. 
  • Website usage data: IP address, browser type and version, pages visited, time and date of visits, time spent on pages, and referral sources, collected automatically via cookies and analytics tools. 
  • Communications: records of correspondence, enquiries, and feedback submitted to us via our website, email, telephone, or in person. 
  • Job site and compliance information: where we collect personal information in the course of complying with our obligations under the Work Health and Safety Act 2011 (Qld) or any other applicable legislation, including incident reports, site sign-in records, and safety induction records. 

We will generally collect personal information directly from you. Where it is unreasonable or impracticable to collect information directly from you, we may collect it from a third party such as a referral source, a regulatory body, or a publicly available source. 

 

3.  How Do We Collect Your Personal Information? 

We collect personal information through a variety of means, including: 

  • Directly from you: when you contact us by phone, email, or via our website contact or quotation forms; when you visit our premises; when you enter into a contract with us for roofing or related services; or when you apply for employment with us. 
  • Through our website: when you browse our website, submit a form, leave a comment, or otherwise interact with our online platforms. We may collect data automatically through cookies, web beacons, and similar tracking technologies (see Section 7 below). 
  • From third parties: we may receive your personal information from referees, contractors, subcontractors, insurers, licensing bodies, other tradespeople, or publicly available directories and registers, where this is necessary for our business operations. 
  • Through our digital platforms: we use SafetyCulture and other operational software platforms to manage safety compliance, job records, and employee training. Personal information may be collected through these platforms in the course of day-to-day operations. 
  • Through CCTV or site recordings: where our staff or equipment operate on a site where CCTV or recording systems are in use, personal information may be incidentally captured in accordance with applicable laws. 

 

4.  For What Purposes Do We Collect, Hold, Use and Disclose Your Personal Information? 

We collect, hold, use, and disclose your personal information for the following purposes: 

  • To provide roofing, plumbing, fire sprinkler, and related contracting services to you, and to respond to your enquiries and quotation requests. 
  • To communicate with you about the services we are providing, including scheduling, progress updates, and invoicing. 
  • To process payments and manage our financial records. 
  • To assess your application for employment or engagement as a subcontractor, including conducting reference and background checks where permitted by law. 
  • To comply with our obligations under applicable legislation, including the Work Health and Safety Act 2011 (Qld), the Fair Work Act 2009 (Cth), the Building Industry Fairness (Security of Payment) Act 2017 (Qld), and all other applicable laws and regulations. 
  • To maintain and update our records and ensure the accuracy of the information we hold. 
  • To manage and resolve any dispute, complaint, or claim arising in connection with our services. 
  • To send you information about our products and services that we consider may be of interest to you, in accordance with applicable marketing laws including the Spam Act 2003 (Cth) (you may opt out at any time — see Section 9 below). 
  • To improve our website, services, and operations through analytics and feedback. 
  • To protect the security and integrity of our business, personnel, clients, and property. 
  • For any other purpose that is disclosed to you at the time of collection, or to which you subsequently consent. 

Your personal information will not be used or disclosed for a purpose other than the primary purpose for which it was collected, unless an exception under the APPs applies (for example, where disclosure is required by law, or where you have provided your consent). 

 

5.  To Whom May We Disclose Your Personal Information? 

We may disclose your personal information to the following categories of recipients, to the extent necessary for the purposes described in Section 4 above: 

  • Our employees, officers, and contractors, who require access to your information in order to perform their duties in connection with delivering services to you. 
  • Professional advisers, including accountants, lawyers, insurers, and financial advisers, who provide services to us. 
  • Third-party service providers who assist us with our operations, including information technology providers, cloud storage providers, accounting and payroll software providers, and digital platform providers such as SafetyCulture and Xero. 
  • Government bodies, regulators, licensing authorities, and law enforcement agencies, where we are required or permitted by law to do so. This includes but is not limited to the Queensland Building and Construction Commission (QBCC), the Fair Work Commission, WorkSafe Queensland, and the Australian Taxation Office (ATO). 
  • Other contractors, subcontractors, or suppliers involved in the delivery of services to you. 
  • Any person or entity to whom you authorise us to disclose your personal information. 

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. 

Where we disclose your personal information to third-party service providers, we take reasonable steps to ensure that those providers are bound by confidentiality obligations and data protection requirements consistent with this Privacy Policy and applicable law. 

 

6.  Disclosure of Personal Information Outside Australia 

Some of our third-party service providers may be located overseas or may store data on servers located outside Australia, including in the United States of America. For example, cloud-based software platforms and email services used by us may process or store data internationally. 

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information, in accordance with APP 8. Where an overseas recipient is unable to comply with the APPs, we will seek your consent before making such disclosure, or we will rely on another applicable exception under the Act. 

By providing your personal information to us and accepting this Privacy Policy, you consent to your personal information being transferred to and processed in countries outside Australia where our service providers are located, subject to the safeguards described above. 

 

7.  Cookies and Website Tracking Technologies 

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and assist with spam detection and security. 

A ‘cookie’ is a small text file placed on your device when you visit a website. Cookies allow a website to recognise your device and remember information about your visit. We use the following types of cookies: 

  • Strictly necessary cookies: required for the website to function and cannot be switched off. These include session cookies that expire when you close your browser. 
  • Functional cookies: allow the website to remember your preferences (such as your name and email address if you submit a form) to provide a more personalised experience. These cookies persist for up to one year. 
  • Analytics cookies: help us understand how visitors use our website by collecting information about pages visited, time spent, and traffic sources. This information is aggregated and does not personally identify you. 
  • Login and preference cookies: where our website includes a login function, cookies are used to maintain your login session for up to two days (or two weeks if you select ‘Remember Me’) and to save your display preferences for up to one year. 

We may also log IP addresses for the purposes of analysing trends, administering the website, tracking user movements in aggregate, and gathering broad demographic information. IP addresses are not linked to personally identifiable information except where required for security purposes. 

You may configure your browser to refuse all or some cookies, or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website. For further information about cookies, including how to manage them, visit www.allaboutcookies.org. 

Our website may use third-party analytics services (such as Google Analytics) which set their own cookies. These third parties have their own privacy policies governing the use of such information. 

 

8.  Embedded Content and Third-Party Links 

Pages on our website may contain embedded content from third-party platforms (such as videos, maps, or social media feeds). Embedded content from other websites behaves as though you had visited those websites directly. Those third-party platforms may collect data about you, use cookies, embed additional tracking, and monitor your interaction with the embedded content, including if you are logged into an account on that platform. 

Our website may also contain links to websites operated by third parties. We are not responsible for the content or privacy practices of those websites. We encourage you to review the privacy policies of any third-party website you visit. 

 

9.  Direct Marketing 

We may from time to time send you direct marketing communications about our products, services, promotions, and news that we believe may be of interest to you. These communications may be sent by email, SMS, or post, in accordance with the Spam Act 2003 (Cth) and other applicable marketing laws. 

Where we send electronic marketing communications, we will include a clear and functional unsubscribe mechanism. You may opt out of receiving marketing communications from us at any time by: 

  • Using the unsubscribe link or mechanism included in any electronic marketing communication we send to you; 
  • Contacting us directly using the contact details set out in Section 16 of this Policy and requesting removal from our marketing list. 

We will action your opt-out request as soon as practicable and within the timeframes required by applicable law. Please note that even if you opt out of marketing communications, we may still need to send you transactional or administrative communications relating to services you have requested or a contract between us. 

We do not provide your personal information to third parties for the purposes of their own direct marketing. 

 

10.  Security of Your Personal Information 

We take the security of your personal information seriously and implement a range of physical, electronic, and procedural safeguards to protect it from misuse, loss, unauthorised access, modification, or disclosure. These measures include: 

  • Storage of electronic records on password-protected systems and cloud platforms with access controls restricted to authorised personnel. 
  • Use of industry-standard 256-bit encryption for sensitive data transmitted via our website or stored on secure servers. 
  • Physical security measures for any hard copy records, including secure storage and restricted access. 
  • Staff training and awareness regarding data protection and confidentiality obligations. 
  • Contractual obligations on third-party service providers requiring them to maintain appropriate data security measures. 

However, no method of transmission over the internet or electronic storage is completely secure. While we take all reasonable steps to protect your personal information, we cannot guarantee absolute security of data transmitted to us online. Any transmission of personal information to us via the internet is at your own risk. 

We will take reasonable steps to destroy or de-identify personal information when it is no longer required for any lawful purpose and when there is no legal obligation to retain it. 

 

11.  How Long Do We Retain Your Personal Information? 

We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. Our retention periods are guided by the following: 

  • Client and project records: retained for a minimum of seven (7) years following completion of the relevant project or services, in accordance with applicable contractual limitation periods and the requirements of the QBCC and other regulatory bodies. 
  • Employee and contractor records: retained for a minimum of seven (7) years following the conclusion of employment or engagement, in accordance with the Fair Work Act 2009 (Cth) and applicable taxation laws. 
  • Financial records: retained for a minimum of five (5) years in accordance with the requirements of the Australian Taxation Office and applicable accounting standards. 
  • Safety and incident records: retained in accordance with the requirements of the Work Health and Safety Act 2011 (Qld) and applicable regulations. 
  • Website and marketing data: retained for as long as is reasonably necessary for the purposes for which it was collected, and de-identified where possible once no longer required. 

Where personal information is no longer required and there is no legal obligation to retain it, we will take reasonable steps to destroy or permanently de-identify it in a secure manner. 

 

12.  Access to and Correction of Your Personal Information 

Under the APPs, you have the right to request access to personal information we hold about you, and to request that we correct information that is inaccurate, incomplete, out of date, irrelevant, or misleading. 

To make an access or correction request, please contact our Privacy Officer using the details set out in Section 16 of this Policy, providing sufficient detail to enable us to identify and retrieve the relevant information. We will endeavour to respond to your request within 30 days. 

We will not charge you for making an access or correction request. However, where a request requires significant effort or resources to process, we may charge a reasonable fee for providing access, in which case we will advise you in advance. 

There may be circumstances where we are unable to grant access to the information you request. For example, we may need to refuse access where: 

  • Granting access would pose a serious threat to the life, health, or safety of any individual, or to public health or safety; 
  • Granting access would have an unreasonable impact on the privacy of another individual; 
  • The request is frivolous or vexatious; 
  • The information is the subject of legal professional privilege; 
  • Granting access would prejudice legal proceedings, enforcement activities, or other legitimate activities of a public body; or 
  • We are otherwise required or authorised by law to refuse access. 

Where we refuse a request for access or correction, we will provide you with written reasons for the refusal (unless it would be unreasonable to do so) and details of the mechanisms available to you to make a complaint. 

 

13.  What Happens If We Cannot Collect Your Personal Information? 

If you choose not to provide us with the personal information we request, or if the information provided is incomplete or inaccurate, we may not be able to: 

  • Provide you with the services you have requested, or provide those services to the same standard; 
  • Process your enquiry, quotation request, or application; 
  • Process an application for employment or engagement; or 
  • Meet our legal or regulatory obligations. 

We will inform you at the time of collection if the provision of particular information is mandatory or voluntary, and the consequences of not providing it. 

 

14.  Notifiable Data Breaches 

We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). In the event of an eligible data breach — being an unauthorised access to, disclosure of, or loss of personal information that is likely to result in serious harm to one or more individuals — we will: 

  • Take immediate steps to contain the breach and assess the risk of harm; 
  • Notify affected individuals as soon as practicable where it is reasonable to do so and there is a risk of serious harm; and 
  • Notify the Office of the Australian Information Commissioner (OAIC) in accordance with the requirements of the NDB scheme. 

We maintain an internal data breach response plan and conduct periodic reviews of our data security practices to minimise the risk of a breach occurring. 

 

15.  How to Make a Privacy Complaint 

If you believe that we have interfered with your privacy or breached the APPs, you are entitled to make a complaint. We take all privacy complaints seriously and will endeavour to resolve any complaint in a timely and fair manner. 

To make a complaint, please contact our Privacy Officer using the contact details set out in Section 16 of this Policy, providing a written description of the nature of your complaint and any supporting information. We will: 

  • Acknowledge receipt of your complaint within a reasonable time; 
  • Investigate the matter thoroughly and confidentially; 
  • Keep you informed of the progress of our investigation; and 
  • Provide you with a written response, including the outcome of our investigation and any action we have taken or propose to take, within 30 days of receipt of your complaint (or such extended period as may be agreed with you). 

If you are not satisfied with our response, or if we fail to respond within a reasonable time, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992. 

 

16.  Contacting Us – Privacy Officer 

All privacy enquiries, access and correction requests, and complaints should be directed to our Privacy Officer: 

 

Possum Roofing Solutions (Schutz Industries Australia Pty Ltd) 

Attn: Privacy Officer 

Website: https://possumroofingsolutions.com.au 

Email: [email protected] 

Phone: 0435 247 885 

We will treat all requests and complaints confidentially and handle them with care and respect. 

 

17.  Changes to This Privacy Policy 

We may update or amend this Privacy Policy from time to time to reflect changes in our business operations, legal obligations, or industry practices. The updated Policy will be published on our website with the date of the most recent revision noted at the top of the document. 

We encourage you to review this Privacy Policy periodically. Your continued engagement with us, use of our website, or provision of personal information to us following any update to this Policy constitutes your acceptance of the updated terms. 

If we make material changes to this Policy that significantly affect how we handle your personal information, we will take reasonable steps to notify you directly (for example, by email where we hold your contact details).