PRIVACY POLICY

CUSTOM SMART HOMES PTY LTD (ACN 645 608 313)

Version 1.0 - June 2026

1. About this policy. Custom Smart Homes Pty Ltd (ACN 645 608 313) ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, hold, use and disclose personal information, and how you can access or correct it or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and credit-related information in accordance with Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code. This policy should be read together with our Terms and Conditions, available at www.customsmarthomes.com.au/terms.

2. What we collect. Depending on our dealings with you, we may collect:

(a) identity and contact details - name, company, ABN, address, phone, email;

(b) project information - site addresses, building plans, specifications, drawings, and details of your home or premises relevant to designing and installing your system;

(c) payment and account information - billing details, payment history, and bank or card details processed through our payment providers (we do not retain full card numbers);

(d) credit information - where you apply for commercial credit or trade terms, information for assessing creditworthiness as described in section 7;

(e) system and support information - system configurations, network details, and the site-specific credentials we set for your installation and may retain to provide commissioning, warranty and support services; and

(f) enquiry and website information - information you submit through our website contact forms, and limited analytics data collected by our website platform.

3. How we collect it. We collect personal information directly from you (in person, by phone, email or our website), and in the course of providing our services. Where you engage us through a builder, electrician, architect or designer, we may collect your information from them for the purposes of the project. We only collect sensitive information with your consent, and we collect information by lawful and fair means.

4. Why we use it. We collect, hold and use personal information to: prepare and provide quotes, designs and proposals; perform and manage our services; provide commissioning, warranty, support and maintenance (including remote support you have authorised); invoice and collect payment; assess credit applications and manage accounts; communicate with you and with your builder, trades and consultants about your project; comply with our legal obligations; and, unless you have opted out, showcase completed work in accordance with our Terms and Conditions. We do not sell personal information.

5. System credentials, surveillance and smart home data. Because of the nature of our services, we may hold the credentials to your system for commissioning, support and warranty purposes. We access your system only for those purposes and in accordance with your authorisation under our Terms and Conditions. Footage, recordings, access logs and other data generated by your installed system (for example CCTV, intercom and alarm data) are stored on your equipment or your own third-party accounts: that data is owned and controlled by you, we are not its custodian, and we do not access it except where necessary for support you have requested. Third-party platforms connected to your system (such as manufacturer cloud services and apps) handle your information under their own privacy policies, which we encourage you to review.

6. Who we disclose it to. We may disclose personal information to: our employees and contractors engaged on your project; equipment manufacturers, distributors and suppliers (for ordering, registration and warranty claims); your builder, architect, electrician or other trades and consultants where relevant to the project; our professional advisers, insurers, IT and payment service providers; credit reporting bodies and debt collection providers as described in section 7; and government or regulatory bodies where required by law. Some of our service providers and the manufacturer platforms connected to your system may store information overseas (including in the United States and the European Union); we take reasonable steps to ensure such information is handled consistently with Australian privacy law.

7. Credit reporting. Where you apply for commercial credit or trade terms, or where amounts are overdue, we may: obtain a credit report about you from a credit reporting body; disclose your identity details, account details and details of payment defaults to a credit reporting body; and exchange information with other credit providers. Credit reporting bodies may include the information we give them in reports provided to other credit providers to assess your creditworthiness. You have the right to: access the credit information we hold about you; request correction of inaccurate information; request that a credit reporting body not use your information for direct marketing pre-screening; and request a ban period if you reasonably believe you have been, or are likely to be, a victim of fraud. If you fail to pay amounts owing, we may disclose the default to a credit reporting body where permitted by law after giving any required notices.

8. Storage and security. We hold personal information in electronic systems (including cloud-based business platforms) and take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure - including access controls, unique staff logins, and revocation of access when personnel leave. System credentials we retain for support are stored securely and access to them is restricted. We retain personal information only for as long as needed for the purposes described in this policy or as required by law, and then take reasonable steps to destroy or de-identify it. You may also request destruction of your personal information at any time, and we will action the request where we are not required or entitled to retain the information (for example, for warranty, tax, insurance or legal purposes).

9. Data breaches. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

10. Access, correction, marketing opt-out and complaints. You may request access to, or correction of, the personal information (including credit information) we hold about you by contacting us using the details below. You may also opt out of receiving direct marketing communications from us at any time by contacting us or using the unsubscribe option in any marketing message; we will action opt-out requests promptly and at no charge. We will respond within a reasonable time and will not charge for making a request. If you believe we have breached your privacy, please contact us with the details; we will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the OAIC at www.oaic.gov.au or 1300 363 992.

11. Website and cookies. Our website is hosted on a third-party platform that may use cookies and similar technologies for site functionality and basic analytics. You can manage cookies through your browser settings. Website analytics data is not used to personally identify you. Emails and electronic quotes or proposals we send may use standard tracking features (such as open and link-click notifications) provided by our email and quoting platforms, which help us follow up enquiries and proposals.

12. Changes to this policy. We may update this policy from time to time. Updates are published on our website as a new numbered and dated version; the current version applies from its publication date.

13. Contact us.

Custom Smart Homes Pty Ltd

Phone: 1300 622 370

Email: info@smarthomes.sydney

Post: Level 6, 275 Alfred St, North Sydney, NSW, 2060