This policy explains how Knox One Pty Ltd handles personal information for its Australian business, Shopify website at knoxone.com.au, trade accounts, orders and after-sales services. It covers our brands, including Verdecor and Knox System. It does not make website use a blanket consent to every collection or disclosure.
1. Information collected
1.1 Depending on the interaction, we collect name, business name, role, email, telephone and address; order and delivery details; account and transaction records; and enquiry, complaint, return and warranty information, including relevant photographs.
1.2 Trade credit applications may require relevant applicant, director, principal, guarantor and reference details, including identity and financial information reasonably necessary for assessment or account management. Sensitive information is collected only where necessary and lawful, with consent where required.
1.3 Our Shopify website records technical and usage information such as IP address, device and browser details, pages visited, timestamps, shopping-session activity and interactions. Cookies support storefront functions, security and platform performance information. Payment details are handled by the payment service used for your transaction. Do not email passwords, full card details or card security codes.
2. Collection sources and choices
2.1 Usually we collect directly through forms, email, phone, website interactions, orders and service requests. We may receive relevant details from your authorised representative, dealer, installer, carrier, payment provider or nominated trade reference.
2.2 Where lawful and necessary for credit management, public registers or approved sources may verify details. Consumer credit information is obtained or disclosed only where legally permitted and after separate required notices and authority. Website use does not authorise that check.
2.3 General enquiries may be anonymous or under a pseudonym where practicable. Without necessary details we may be unable to deliver, assess credit or resolve a claim.
3. Use of personal information
3.1 Purposes include enquiries, quotations, fulfilment, payment and delivery, account administration, authorised credit assessment, returns and warranties, and necessary business and legal records.
3.2 Relevant information also supports site and account security, fraud investigation, service improvement, performance analysis, dispute resolution and lawful obligations.
3.3 We send promotional communications only where lawful, including with consent where required. Use an available unsubscribe link or contact us to opt out. Opting out does not stop necessary order, account, safety or service messages. We do not treat a general enquiry alone as consent to unrelated marketing.
4. Disclosure
4.1 We use Shopify to host and operate the online store. Relevant information may also be disclosed as reasonably necessary to payment providers, carriers, warehouse and business-record service providers. An authorised dealer, installer or manufacturer may receive information needed to assess your particular service or warranty request.
4.2 Other recipients may include professional advisers, insurers, lawful recovery providers, regulators or courts where authorised or required, and proposed business-transfer parties under appropriate confidentiality and privacy safeguards.
4.3 We seek appropriate contractual and security safeguards and limit our disclosures to their purpose. We do not sell personal information to unrelated advertisers. Shopify may also handle information for its own services, depending on store features and services you choose, such as Shop or Shop Pay. See Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers. Credit reporting follows separate applicable legal requirements.
5. Cookies, analytics and linked services
5.1 Shopify cookies and similar technologies support shopping sessions, checkout, security and platform reporting. At this version date, we have not added Google Analytics, Meta advertising pixels or a separate email-marketing platform such as Klaviyo. This does not mean Shopify itself processes no usage information. If we introduce additional tracking or marketing tools, we will update relevant disclosures and obtain consent where required.
5.2 Manage cookies through your browser and any privacy controls presented by the store or Shopify service. Blocking essential cookies may affect checkout or account functions. Shopify privacy choices are available at https://privacy.shopify.com/. Email promotional preferences are managed separately.
5.3 External services have their own privacy terms; review them before submitting information. We remain responsible for our disclosures as required by applicable law.
6. Overseas handling
6.1 Our business primarily serves Australia, but Shopify and its service providers may process, store or access information overseas. The overseas recipient countries currently identified in Shopify provider information include Canada, Singapore, the United States, Ireland, the Netherlands, the United Kingdom, France, Germany, Italy, Lithuania, Poland, Spain, Sweden, India, Japan and New Zealand. The recipient and location depend on the service used; this is not a statement that each transaction is sent to every listed country.
6.2 Before an overseas disclosure, we take reasonable steps required by applicable law concerning recipient handling and safeguards. We do not promise Australian-only hosting. Shopify publishes its current provider information at https://help.shopify.com/en/manual/privacy-and-security/privacy/subprocessors. Contact our Privacy Officer for information relevant to your interaction; we update our disclosures when relevant arrangements change.
7. Security and retention
7.1 Reasonable technical and organisational measures, including access restrictions and secure handling, are used according to information type. No internet system is completely secure. Breaches are assessed and notifications made as required by law.
7.2 Retention lasts as reasonably needed for the purpose, legal records, warranty administration or disputes. When no longer needed, information is securely destroyed or de-identified, subject to legal retention duties.
8. Access, correction and requests
8.1 Ask our Privacy Officer for access or correction. Proportionate identity verification may be needed. We respond in a reasonable time; a refusal receives its lawful reason and complaint options.
8.2 Making an access request is free. Any lawful reasonable charge for providing access is disclosed in advance. Correction requests are free.
8.3 You may ask about deletion, withdrawing consent or limiting use. Requests are assessed under applicable law with explanation of legal or practical limits. Overseas statutory rights apply only where their relevant law actually applies.
9. Privacy complaints
9.1 Send concerns and supporting details in writing to our Privacy Officer. Acknowledgement is targeted within 5 business days and substantive response within 30 calendar days. More time is explained with an expected date.
9.2 If dissatisfied or unresolved, contact the Office of the Australian Information Commissioner (oaic.gov.au; 1300 363 992) where it has jurisdiction, or another relevant authority. Other complaint rights remain available.
10. Children and updates
10.1 Trade services are intended for adults. We do not knowingly seek children's information for accounts or marketing. Received child-related information is assessed for necessity and lawful retention, with appropriate action.
10.2 Actual practice or legal changes may prompt updates, with a version and date. An update does not retrospectively create consent or authorise an incompatible new use of existing information.
11. Privacy contact
Knox One Pty Ltd | ABN 87 149 600 671
13-15 Endeavour Way, Braeside, VIC 3195, Australia
Telephone: (03) 9543 6666
Attention: Privacy Officer
Email: info@knoxone.com.au