Privacy Policy

This policy applies to personal information collected by SunVex Steel through our website, our sales and engineering enquiries, our factory tours, our contracts with customers and suppliers, and our employment and recruitment processes.

By interacting with us or using our website, you consent to the collection and handling of your personal information as described in this policy.

The personal information we collect depends on the nature of your interaction with us. It may include:

• Name, job title, employer, email address, phone number and postal address.
• Project details, technical specifications and commercial information you provide in enquiries or quotes.
• Records of correspondence and meetings between you and SunVex Steel.
• Website analytics data such as IP address, device and browser type, pages visited and referring URLs (see “Cookies” below).
• For suppliers and contractors: ABN, banking details, insurance certificates and compliance documentation.
• For job applicants: CV, qualifications, work history, references and right-to-work information.

We do not generally collect sensitive information (as defined in the Privacy Act). Where we need to (for example, health or safety information for a site visit), we will only collect it with your consent and where reasonably necessary.

We collect personal information directly from you wherever possible — for example, when you submit a contact form, request a quote, attend a factory tour, sign a contract, or apply for a role. We may also collect information from third parties such as referees, recruiters, publicly available sources, credit reporting bodies (for commercial credit checks) or your nominated representatives.

We use personal information to:

• Respond to enquiries, prepare quotes and deliver projects.
• Manage customer, supplier and contractor relationships, including invoicing and payments.
• Coordinate site visits, factory tours and logistics.
• Improve our website, products and services, including analytics and product development.
• Send operational updates and, where you have opted in, marketing communications about SunVex Steel.
• Comply with our legal, regulatory, safety and contractual obligations.
• Assess and manage employment applications.

We may disclose your personal information to:

• Our related entities within the SunWay Steel group in Australia and overseas.
• Service providers who support our business — including hosting, cloud infrastructure, analytics, email, CRM, logistics, engineering and professional advisers — under confidentiality obligations.
• Government, regulatory or law-enforcement bodies where required or authorised by law.
• Any party to whom disclosure is required or permitted under the Privacy Act or another Australian law.

We do not sell personal information.

Some of our service providers and group companies are located outside Australia, including in the People's Republic of China, Singapore, the United States and the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles that information in a manner consistent with the Australian Privacy Principles.

We may send you marketing communications where you have consented or where we are otherwise permitted under the Spam Act 2003 (Cth) and the Privacy Act. Every marketing email includes a functional unsubscribe link. You can also opt out at any time by contacting us using the details below.

Our website uses cookies and similar technologies to operate the site, remember your preferences and understand how visitors interact with our content. You can disable cookies in your browser settings, but some parts of the site may not function correctly if you do.

We hold personal information in secure cloud-based systems and, where necessary, in physical files at our premises. We use reasonable technical and organisational safeguards — including access controls, encryption in transit, role-based permissions and staff training — to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

We retain personal information only for as long as required for the purposes for which it was collected, or as required by law (for example, tax, corporate and workplace records).

If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

You have the right to request access to the personal information we hold about you and to request that it be corrected if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact our Privacy Officer using the details below. We will respond within a reasonable period and, in most cases, will not charge a fee for access.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact our Privacy Officer. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version will always be available on this page, with the “Last updated” date at the top.

For any privacy-related questions, requests or complaints, please contact our Privacy Officer: