Privacy Policy

This Privacy Policy explains how FUJI HITECH ELEVATOR PTY LTD
and its Australian operations (together referred to as “FUJI-HITECH”, “we”,
“us” or “our”) collect, hold, use and disclose personal information through
https://fujihitech.au, our forms,
communications, products and services.

We aim to manage personal information consistently with the
Privacy Act 1988 (Cth) and the Australian Privacy Principles where
they apply to us, as well as other applicable privacy requirements.

Depending on how you interact with us, we may collect:

We do not ordinarily seek sensitive information. Please do not send health,
identity, financial or other sensitive information unless it is genuinely
required and you are authorised to provide it. If sensitive information is
necessary, we will handle it in accordance with applicable law.

How we collect information

We generally collect information directly from you when you submit a contact or
quotation form, upload a file, request a catalogue, create an account, place an
order, post a comment, call or email us, or engage us for a project. We may also
receive information from your employer, project owner, builder, architect,
consultant, contractor, authorised representative, referral partner or publicly
available source where appropriate.

We may collect, hold, use or disclose personal information to:

• respond to enquiries and provide product or technical information;
• assess project requirements and prepare quotations or proposals;
• provide design consultation, installation, modernisation, maintenance and repair services;
• process catalogue requests, accounts, orders, payments, deliveries and warranties;
• communicate about projects, appointments, service updates and customer support;
• operate, secure, troubleshoot and improve our website, forms and services;
• detect spam, misuse, fraud, cyber threats and other security risks;
• maintain business, insurance, tax, quality, safety and compliance records;
• send relevant business updates or marketing where permitted, with an opt-out option; and
• comply with law, court orders and lawful requests, or establish and defend legal rights.

If we need to use information for a materially different purpose, we will take
appropriate steps, which may include explaining the new purpose and seeking
consent where required.

Comments and Gravatar

If comments are enabled and you leave a comment, we collect the information shown
in the comment form, together with your IP address and browser user-agent string to
assist with spam detection. An anonymised value created from your email address
(a hash) may be sent to the Gravatar service to check whether you use it. The

Automattic privacy policy

explains Gravatar’s handling practices. After approval, your profile image may be
publicly visible with your comment.

Media and image metadata

If you upload images, remove embedded location information such as EXIF GPS data.
Website visitors may be able to download public images and extract metadata contained in them.

Quotation and project attachments

Files submitted through Contact Form 7 or another quotation channel may contain
personal, site or commercially sensitive information. Only upload information that
is relevant to your enquiry and that you have authority to share. Do not include
government identifiers, payment-card details, passwords or unnecessary personal data.

Cookies are small files stored on your device. We and our service providers may use
cookies or similar technologies to operate the website, remember preferences, secure
forms, understand website performance and support embedded content. The cookies
actually used depend on the website features enabled at the time of your visit.

You can manage cookies through your browser and, where available, our consent tool.
Blocking essential cookies may prevent forms, accounts, checkout or other website
features from operating correctly. Browser “Do Not Track” signals are not handled
consistently across the industry; we apply the controls described in this policy and
any consent interface displayed on the website.

Pages may include maps, videos, images, social content, product tools or articles
provided by other websites. Embedded content generally behaves as though you visited
the third-party website directly. Those providers may collect technical data, use
cookies, apply additional tracking and monitor your interaction, particularly if you
are logged in to their service.

Depending on the features enabled, our providers may include:

• website hosting, WordPress, content-delivery, backup and security providers;
• Contact Form 7, email delivery, cloud storage and spam-detection services;
• Google Maps and website analytics services, where embedded or enabled;
• WooCommerce, payment, order and delivery providers, where shop functions are used;
• Gravatar/Automattic, where public comments and profile images are enabled; and
• professional, project, technical and customer-support providers engaged by us.

Third-party services have their own terms and privacy policies. We encourage you to
review them before using the relevant feature. If a payment gateway is used, payment
credentials are generally processed by that gateway; we do not intend to store your
complete payment-card number on our website.

We do not sell personal information. Where reasonably necessary for the purposes in
this policy, we may disclose information to:

• authorised FUJI-HITECH personnel and related operations supporting your enquiry or project;
• installers, engineers, consultants, manufacturers, logistics providers and project partners;
• website, hosting, cloud, email, communications, CRM, security and IT providers;
• payment, accounting, insurance, audit, legal and other professional advisers;
• a purchaser or adviser in connection with a genuine business restructure or transaction; and
• regulators, courts, law-enforcement bodies or other parties where required or authorised by law.

If you request a password reset, your IP address may be included in the reset email
as part of the website’s security process.

Overseas access and disclosure

Because FUJI-HITECH has operations and business support in Australia and Vietnam,
authorised personnel in Australia and Vietnam may access relevant
information when needed to respond to enquiries, prepare quotations or support a
project. Some technology providers may process or store information outside Australia,
including in the United States and other locations in which they or
their subcontractors operate. Provider locations may change. You may contact us for
current information relevant to a particular service.

Where applicable, we take reasonable steps in relation to overseas handling and use
contractual, access-control or provider due-diligence measures appropriate to the circumstances.

Security

We use administrative, technical and physical safeguards appropriate to the nature
of the information and our operations. These may include access controls, secure
hosting and transmission, backups, software maintenance, malware and spam controls,
staff or contractor confidentiality obligations and controlled access to project files.
No internet transmission or storage system is completely secure, so absolute security
cannot be guaranteed.

Data breaches

If we become aware of a suspected data breach, we will assess and respond to it. Where
the Notifiable Data Breaches scheme applies and an eligible data breach is likely to
cause serious harm, we will notify affected individuals and the Office of the Australian
Information Commissioner as required.

How long we retain information

We retain personal information only for as long as reasonably needed for the purpose
for which it was collected, to provide products and services, maintain safety, warranty
and project records, resolve disputes, enforce agreements and meet legal, tax, insurance
and record-keeping requirements. Retention periods vary by record type.

• enquiry and quotation records are kept while active and for a reasonable follow-up period;
• project, contract, service and transaction records may be retained for legal, warranty and business needs;
• approved comments and metadata may remain while the comment is published or needed for moderation;
• account data may remain while an account is active and for any required period afterwards;
• security logs and backups are retained for limited operational cycles determined by our systems and providers.

When information is no longer required, we take reasonable steps to delete, destroy
or de-identify it, subject to backups and lawful retention obligations.

Subject to applicable law and relevant exceptions, you may:

• ask whether we hold personal information about you;
• request access to the personal information we hold;
• ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading;
• request deletion where we are not required or permitted to retain the information;
• withdraw consent where our handling depends on consent;
• unsubscribe from marketing at any time; and
• raise a question or make a privacy complaint.

To protect your information, we may need to verify your identity and clarify the scope
of your request. We will respond within a reasonable period and explain if access,
correction or deletion cannot be provided in full. We will not delete information that
we are legally required or reasonably entitled to keep.

Children

Our website and services are directed to businesses, property owners and adult project
participants, not children. We do not knowingly seek personal information directly from
children. A parent or guardian who believes a child has provided information may contact us.

External links

Our website may link to websites we do not control. We are not responsible for their
privacy practices, content or security. Please review the privacy policy of each external site.

For access, correction, deletion, a privacy concern or a copy of this policy in another
accessible form, contact us using the details below. Please use the subject line
“Privacy Enquiry” and describe your request clearly.

How we handle complaints

Please describe what happened, the information involved, any relevant dates or
reference numbers, and the outcome you seek. We may contact you for further details,
investigate the matter and provide our response. If the Privacy Act applies and you
are not satisfied after giving us a reasonable opportunity to respond, you may contact
the

Office of the Australian Information Commissioner (OAIC)
.

Changes to this policy

We may update this Privacy Policy when our services, systems, providers or legal
obligations change. The current version will be published on this page with a revised
“Last updated” date. Material changes may also be communicated by another appropriate method.