Hay Interiors (“we”, “us”, “our”) is committed to safeguarding your personal information. This policy reflects our obligations under the Privacy Act 1988 (Cth) and the significant reforms enacted through the Privacy and Other Legislation Amendment Act 2024.
We handle “personal information” — anything that identifies or reasonably relates to an individual, such as metadata or behavioural data — as expanded by recent reforms.
We collect only what’s necessary to quote for, make, deliver and install your curtains, blinds and related products. Consent must be voluntary, informed, current, specific, unambiguous and withdrawable. We ensure clear and prominent notice when collecting data from overseas, for automated decision-making, or for high-risk activities.
Where automated systems inform meaningful decisions, we disclose their use clearly in this policy and obtain specific consent after explaining their impact.
We implement both technical and organisational safeguards, such as secure storage, documented governance and staff training, to protect personal information. Privacy considerations are embedded into all our systems and processes.
We maintain a Data Breach Response Plan. For notifiable data breaches, we promptly notify both the affected individuals and the OAIC in line with the mandatory NDB scheme.
The Privacy Act now includes a statutory cause of action for serious invasions of privacy — including intrusion, misuse, or unauthorised disclosure of private information. Regulators can issue penalty notices and impose substantial fines for breaches.
A Children’s Online Privacy Code is expected to be registered by the OAIC by 10 December 2026, establishing default high-privacy settings for minors and stronger consent. We do not knowingly collect children’s information and will make relevant updates once it takes effect.
When using overseas suppliers or service providers — including imported products such as shutters — we remain responsible for safeguarding data, even if processed offshore, through appropriate contractual controls.
Individuals may request access to, correction of, or deletion of their personal information. We will comply with extended rights as they come into effect.
High-risk data initiatives — including new automated systems — are preceded by Privacy Impact Assessments to identify and mitigate risks.
We have assigned a Privacy Officer responsible for oversight. You can contact us with any questions, complaints or requests regarding your personal information, and we aim to foster a privacy-focused culture throughout our business.
This policy may change from time to time and is available on our website. If you have any queries or complaints about this Privacy Policy, please contact us at 5/150 Stirling Highway, Nedlands WA 6009 or email admin@hayinteriors.com.au.
