Privacy Policy - Hub Interiors Australia Pty Ltd

Last updated: 6 August 2026

Effective Date: 6 August 2026

Document Version: 1.0

In this policy, “HUB Interiors”, “we”, “our” or “us” means Hub Interiors Australia Pty Ltd (ACN 618 285 313) and, where relevant, its related entities. “You” means any individual whose personal information we handle, including clients, prospective clients, consultants, contractors, suppliers, job applicants, website users and visitors to our premises or project sites.

This policy explains how we manage personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent they apply to us. Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

1. Personal information we collect and hold

The kinds of personal information we may collect and hold depend on how you interact with us and may include:

• identity and contact information, including your name, postal address, email address, telephone number, job title, employer and professional details
• business and project information, including company or trading name, ABN or ACN, business structure, project briefs, plans, correspondence, meeting notes and records of your dealings with us
• commercial and financial information, including quotations, contracts, invoices, payment details, banking details and accounts contact information
• contractor, subcontractor and supplier information, including licences, qualifications, insurances, trade references, identification documents and compliance records
• site, safety and security information, including site inductions, access records, incident information, emergency contact details, CCTV footage and photographs taken at our premises or project sites
• marketing and media information, including feedback, testimonials, photographs, video and project attribution where consent has been obtained or use is otherwise permitted by law
• recruitment information, including employment history, qualifications, references and other information supplied in an application or interview
• website and technical information, including IP address, device and browser details, pages viewed, referral source, approximate location and information collected through cookies, analytics tools and online forms.

We generally collect sensitive information only where it is reasonably necessary for our functions or activities and with your consent, unless collection is required or authorised by law. This may include health or safety information relevant to site access, an incident or an emergency.

2. How we collect personal information

We may collect personal information:

• directly from you through our website, project or supplier onboarding, contracts, forms, email, telephone calls, meetings, events, site visits and other correspondence
• from your employer, representative, client, consultant, contractor, referee or another person involved in a project or business relationship
• from service providers and business partners who assist us with technology, payments, security, recruitment, marketing or project delivery
• from publicly available sources and professional or industry platforms, where collection is lawful and reasonably necessary
• automatically when you use our website or digital platforms, including through cookies, server logs and analytics technologies.

If we receive unsolicited personal information, we will determine whether we could lawfully have collected it. If not, we will take reasonable steps to destroy or de-identify it, unless we are required or authorised by law to retain it. At or before the time we collect personal information, or as soon as practicable afterwards, we will take reasonable steps to notify you of the matters required by law, including why the information is being collected and the usual consequences if it is not provided.

3. Why we collect, hold, use and disclose personal information

We may collect, hold, use and disclose personal information to:

• respond to enquiries, prepare proposals and deliver our architecture, interior design, construction, fitout, project management and related services
• plan, administer and document projects, including coordinating clients, consultants, contractors, suppliers and site activities
• assess and onboard clients, contractors, subcontractors, consultants and suppliers, and manage contractual, commercial and payment arrangements
• verify licences, qualifications, insurances, identity and compliance with legal, safety, security and site requirements
• manage our business, records, insurance, risk, quality assurance, audits, professional advice and dispute resolution
• recruit and assess candidates and manage expressions of interest in employment or contracting opportunities
• communicate news, project updates, invitations and other marketing material where permitted by law
• operate, secure, analyse and improve our website, systems, services and client experience
• prevent, detect and respond to suspected fraud, cyber incidents, misconduct, safety incidents or unlawful activity
• comply with laws, regulatory requirements, court or tribunal orders and lawful requests from authorities.

We may also use or disclose information for a related secondary purpose where you would reasonably expect us to do so, where you have consented, or where another exception under the Privacy Act applies.

4. Anonymity, pseudonyms and consequences of not providing information

You may deal with us anonymously or using a pseudonym for general enquiries where it is lawful and practicable. We will usually need to know your identity to provide a proposal or service, enter into a contract, process a payment, verify credentials, manage site access or comply with legal and safety obligations. If you do not provide requested information, we may be unable to respond fully, provide services, engage you, grant site access or complete a transaction.

5. Who we disclose personal information to

We may disclose personal information to:

• our directors, employees, related entities, contractors and authorised representatives
• clients, project owners, building managers, consultants, subcontractors, suppliers and other project participants where reasonably necessary for a project or engagement
• technology, cloud hosting, communications, document management, analytics, marketing, payment, security and other service providers
• insurers, brokers, banks, auditors, lawyers, accountants and other professional advisers
• government agencies, regulators, emergency services, courts, tribunals, law enforcement bodies or other persons where required or authorised by law
• another party in connection with a proposed or actual restructure, sale, transfer or financing of all or part of our business, subject to appropriate confidentiality and privacy safeguards
• other persons with your consent or at your direction.

5.1 Data processors and service providers

We disclose personal information to the following categories of service providers, who process it on our behalf and are required to protect it and use it only for the purposes we authorise:

We do not: sell personal information to third parties; rent or lease contact lists; share personal information with unaffiliated marketing companies or data brokers; or share client information with competitors. We will not publish an individual’s testimonial, image or identifiable project contribution for promotional purposes without consent or another lawful basis.

6. Website, cookies and third-party links

Our website may use cookies and similar technologies to operate the site, remember preferences, understand how visitors use the site, measure performance and support communications or marketing.

The cookies we use generally fall into the following categories: essential cookies, which are required for the website to function and cannot be switched off (for example, security and session management); performance and analytics cookies, which help us understand how visitors use our website so we can improve it; and marketing cookies, which may be used to personalise content or measure the effectiveness of our marketing, where enabled.

You can adjust your browser settings to block or delete cookies, although some website functions may not operate as intended. Information collected through analytics may be combined with other information where permitted by law. Website and server logs may record information such as your IP or server address, the date and time of your visit, pages accessed, documents downloaded, the referring website and browser or device type for analytics, security and website administration.

Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices of those third parties, and you should review their privacy policies before providing personal information.

7. Direct marketing

Where permitted by law, we may use your contact details to send newsletters, project updates, event invitations or information about our services. Each electronic marketing message will identify HUB Interiors and include a functional unsubscribe option. You may opt out at any time by using that option or contacting us. We will action electronic unsubscribe requests within the period required by law and will not use the information for direct marketing after the opt-out takes effect, except where otherwise permitted or required by law.

8. Overseas disclosure and storage

Some of our technology, cloud, communications, analytics and other service providers may store, process or access personal information outside Australia. The countries involved can vary depending on the provider, its subcontractors and hosting arrangements, and it may not always be practicable for us to identify every country in advance. You may contact us for current information about likely overseas locations relevant to your information.

Before disclosing personal information overseas, we will take reasonable steps required by the Privacy Act to ensure the overseas recipient handles the information consistently with the APPs, unless an exception applies. Overseas recipients may be subject to different privacy laws, and in some circumstances we may remain accountable for their handling of the information.

9. Security, retention and destruction

We may hold personal information electronically and in paper records. We take reasonable technical, physical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, password and multi-factor protections, secure systems, backups, staff and contractor obligations, physical security and review of service providers. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Where we collect a government-related identifier, such as a driver's licence number, we will not adopt it as our own identifier and will use or disclose it only where permitted by law.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, for another permitted purpose, or to meet legal, contractual, insurance, tax, safety and recordkeeping requirements. When personal information is no longer required, we take reasonable steps to destroy it or de-identify it, unless we are required or authorised by law to retain it.

9.1 Data retention periods

As a general guide, we retain personal information for the following periods. These are a guide only and may be shorter or longer where reasonably necessary or required by law:

10. Data breaches

If we suspect a data breach, we will take reasonable steps to contain and assess it and to reduce potential harm. Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

11. Access to and correction of personal information

We take reasonable steps to ensure that personal information we use or disclose is accurate, up to date, complete and relevant. You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact us using the details below and provide enough information for us to identify the relevant records. We may need to verify your identity before processing the request.

We will respond within a reasonable period, generally within 30 days. There is no fee to make a request. We may charge reasonable costs for providing access where permitted by law and will advise you beforehand. If we refuse access or correction, we will provide written reasons where required and explain the available complaint options.

12. Privacy complaints and enquiries

To make a privacy complaint or enquiry, contact us using the details below. Please describe the issue and include any relevant dates, people or documents. We will acknowledge the complaint, investigate it fairly and aim to provide a written response within 30 days. If more time is required, we will explain why and provide an expected timeframe.

If you are not satisfied with our response, you may lodge a complaint with the OAIC. Information about making a complaint is available at www.oaic.gov.au.

13. Automated tools and decisions

We may use software tools to support administrative, security, document management and analytical functions. If we arrange for a computer program to use personal information to make, or do a thing substantially and directly related to making, a decision that could reasonably be expected to significantly affect an individual’s rights or interests, we will update this policy to describe the kinds of personal information used and the kinds of decisions involved, as required by law.

If our website includes an automated chat or virtual assistant tool, any questions, messages or information you submit to it may be collected and processed to provide a response, improve the accuracy of the tool, and support our services, and may be handled by a third-party technology provider on our behalf. Responses generated by an automated assistant are informational only, do not constitute advice, a quotation or a binding offer, and do not form part of any contract with us unless separately confirmed in writing. You should avoid submitting sensitive personal information (such as financial account details or health information) through an automated assistant.

14. Children’s privacy

Our website is intended for general business audiences and is not directed to children. Our services are contracted with property owners, businesses, building managers or their authorised representatives, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without appropriate consent, we will take reasonable steps to delete that information, unless retention is required or authorised by law.

15. Changes to this policy

We may update this policy to reflect changes to our practices, systems, services or legal obligations. The current version will be published on our website and will state the date it was last updated. Material changes will be communicated where appropriate.

Contact Hub Interiors Australia Pty Ltd

Mail: Level 1, 220 St Georges Terrace, Perth WA 6000

Email: info@hubinteriors.com.au

Phone: (08) 9329 6880