Privacy Policy
Kotzur APP Privacy Policy
How Kotzur collects, uses, stores and protects your personal information
Kotzur Pty Ltd
Version 2.0 | Effective 6 November 2026
This policy explains how Kotzur Pty Ltd (ACN 079 134 802) ("Kotzur", "we", "us" or "our") collects, uses, stores, discloses and protects personal information.
Kotzur is bound by the Australian Privacy Principles (APPs) in Schedule 1 of the Privacy Act 1988 (Cth) (the Privacy Act). A copy of the APPs is available from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Scope of this policy
This policy applies to personal information collected by Kotzur Pty Ltd, including through, but not limited to, our website www.kotzur.com and our online store, in connection with our products, manufacturing, installation and related services. It applies to customers, suppliers, job applicants, contractors, site visitors and anyone else who deals with us.
Some of our products and services have their own privacy notice, which applies to information collected through them.
This policy does not apply to employee records where the employee records exemption in the Privacy Act applies. Our website and services are not directed at children.
What personal information we collect
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether it is recorded in a material form or not.
The kinds of personal information we collect include:
▪ names, addresses, email addresses and phone numbers;
▪ business details, such as your employer, job title and ABN;
▪ details of your enquiries, quotes, orders, deliveries, installations and warranty claims;
▪ billing, payment and account details;
▪ information you provide when you apply for a trade credit account (see Trade credit applications below);
▪ information you provide when you apply for a job with us, such as your resume, qualifications and referee details;
▪ site visitor sign-in records;
▪ images captured by CCTV at our sites;
▪ information collected when you use our website and online store (see Cookies and website analytics below).
How we collect personal information
Where reasonable and practicable, we collect personal information directly from you, including in person, by phone, by email, through our website, contact forms and online store, and at field days and trade events.
We may also collect personal information from third parties, such as your employer or business, referees, our installation contractors and publicly available sources. If we do, we will take reasonable steps to make sure you are aware of it.
When we collect personal information, we take reasonable steps to tell you why we are collecting it and how we will use it.
If we receive personal information that we did not ask for, we will decide within a reasonable period whether we could have collected it lawfully. If not, we will destroy or de-identify it where it is lawful and reasonable to do so.
Why we collect and use personal information
We collect, hold, use and disclose personal information for purposes that relate to your dealings with us, including:
▪ responding to enquiries and contact form submissions;
▪ preparing quotes and processing orders;
▪ manufacturing, delivering and installing our products;
▪ providing warranty, maintenance and after-sales support;
▪ assessing applications for trade credit;
▪ managing customer and supplier accounts, invoicing and payments;
▪ sending you information about our products, services and events (see Direct marketing below);
▪ assessing job applications;
▪ managing safety and security at our sites;
▪ handling complaints;
▪ complying with our legal obligations, including work health and safety and taxation laws; and
▪ improving our products, services and website.
We may also use or disclose personal information for a related purpose that you would reasonably expect, or where otherwise permitted by the Privacy Act.
Dealing with us anonymously
Where it is lawful and practicable, you may deal with us anonymously or by using a pseudonym, for example when making a general enquiry. However, we will usually need your name and contact details to provide quotes, products or services to you.
Trade credit applications
If you apply for a trade credit account with us, we may collect personal information about you, and about any directors, partners or guarantors named in the application, such as contact details, business details and trade references. We use this information only to assess your trade credit application and, if it is approved, to manage your account.
Sensitive information
Sensitive information is a type of personal information that includes information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices, or criminal record. It also includes health information, genetic information, biometric information used for automated verification or identification, and biometric templates.
We only collect sensitive information with your consent and where it is reasonably necessary for our activities, or where the collection is required or authorised by law. We only use or disclose sensitive information for the purpose for which it was collected, for a directly related purpose that you would reasonably expect, with your consent, or where required or authorised by law.
Disclosure of personal information
We may disclose personal information to:
▪ our service providers, such as our website and online store platform, IT, cloud hosting and email providers, payment and accounting providers, freight and logistics providers, and installation contractors;
▪ our related bodies corporate;
▪ our professional advisers, auditors and insurers;
▪ customers, suppliers or partners involved in a project or order you are part of;
▪ anyone else you have consented to us sharing it with; and
▪ government agencies, regulators and others where required or authorised by law.
We take reasonable steps to make sure our service providers protect personal information and use it only to provide services to us.
We do not sell your personal information. If we sell or restructure all or part of our business, personal information may be transferred to the new owner.
Disclosure overseas
We mainly store personal information in Australia however some of our service providers store or process personal information overseas predominantly in the United States and Canada.
We may also disclose personal information to customers, suppliers or freight providers overseas when you deal with us about an international project or order.
Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs.
Direct marketing
We may use your contact details to send you information about our products, services, promotions and events. We only send marketing emails or SMS messages with your consent, which may be inferred from an existing business relationship.
Our marketing messages include a way to unsubscribe, and we act on unsubscribe requests within 5 working days. You can also opt out at any time by contacting us. Opting out is free. You can also ask us where we obtained your personal information.
Cookies and website analytics
We and our service providers use cookies and similar technologies on our website, including our contact forms and online store, to make the website work, process enquiries and orders, and show us how visitors use the website.
These tools may collect your IP address, device and browser details, and the pages you visit. Some of this information may be stored or processed overseas. Payments through our online store are processed by a third-party payment provider, and we do not store full card details.
You can block or delete cookies in your browser settings, although some parts of the website may not work as intended. Our website may link to third-party websites. We are not responsible for the content or privacy practices of those websites.
Security of personal information
We hold personal information electronically, including in cloud-based systems provided by our service providers, and in paper files at our premises. We take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include technical and organisational measures such as access controls, password protection, staff training and restricted access to our premises.
If a data breach occurs that is likely to result in serious harm to the individuals involved, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches scheme in the Privacy Act.
We retain personal information only for as long as it is needed for the purpose for which it was obtained, or to meet our legal, regulatory or contractual obligations. When it is no longer needed for those purposes, we take reasonable steps to destroy or permanently de-identify it.
Automated decision-making
We do not use computer programs to make decisions about you, or to do things substantially and directly related to making decisions about you, that could reasonably be expected to significantly affect your rights or interests. Before we start doing so, we will update this policy to describe the kinds of decisions made and the kinds of personal information used.
Access and correction
You can ask to access or correct the personal information we hold about you by contacting us by email, phone or post. We may need to verify your identity before acting on your request. We will respond within 30 days.
We do not charge for making a request or for correcting your personal information. We may charge a reasonable fee to cover the cost of giving you access.
We may refuse access or correction in some circumstances permitted by the Privacy Act. If we do, we will tell you why in writing and how you can complain.
Keeping your personal information up to date
We take reasonable steps to make sure the personal information we hold is accurate, complete and up to date. If you think the information we hold about you is inaccurate or out of date, please let us know as soon as practicable so we can update our records.
Privacy governance
Further information about our privacy governance framework and supporting policies may be made available to customers, business partners or other stakeholders on reasonable request, subject to confidentiality, security and commercial considerations.
Changes to this policy
We may update this policy from time to time. The current version is available on our website at www.kotzur.com. You can ask for a free copy in another form, such as a printed copy, by contacting us. This version is effective from 6 November 2026.
Questions and complaints
If you have a question or complaint about this policy or how we have handled your personal information, including a possible breach of the APPs, please contact our Privacy Officer:
Privacy Officer
Kotzur Pty Ltd
60 Commercial Street, Walla Walla NSW 2659, Australia
info@kotzur.com.au
02 6029 4700
We will acknowledge your complaint within 5 business days, look into it, and respond in writing within 30 days. If you are not satisfied with our response, you can complain to the OAIC at www.oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.