Privacy Policy & Notice

Exner Holdings Pty Ltd, trading as OzGrind Polished Concrete (ACN 153 083 964) · Last updated July 2026

This is the privacy notice of Exner Holdings Pty Ltd trading as OzGrind Polished Concrete. In this document, "we", "our", or "us" refers to Exner Holdings Pty Ltd, ACN 153 083 964. Our website is www.ozgrindpolishedconcrete.com.au.

Our business address is: 10/29 Links Avenue North, Eagle Farm, QLD 4009, Australia.

This policy explains how we collect, use, store, and protect personal information, including information that can identify you or information you provide indirectly. It also outlines your rights under Australian privacy law. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not, and whether or not it is recorded in a material form.

1. Dealing with us anonymously

Where it is lawful and practicable to do so, you may deal with us anonymously or by using a pseudonym, for example, when making a general enquiry. However, we may be unable to provide a quote, deliver our services, or respond fully to your request if you do not provide the information we reasonably need.

2. Collection of Personal Information

We collect personal and business information either through our website or through other communications (for example, phone calls, emails, quote requests, and dealings with clients and suppliers). Where reasonable and practicable, we collect personal information directly from you. Sometimes we may collect it from a third party or a publicly available source, for example, a referrer or an affiliate.

The personal information we may collect includes:

  • Names, addresses, email addresses and telephone numbers
  • Property addresses and details about proposed or current projects
  • Plans, measurements, specifications, photographs, videos and other project records
  • Communications, job notes, complaints and warranty information
  • Quotations, contracts, invoices, transaction and payment records
  • Recordings and transcripts of telephone calls
  • Technical information generated when you use our website, such as your IP address, browser or device information, pages visited and enquiry source
  • Business-related information where you deal with us on behalf of a builder, supplier, company or other organisation

How this information is used

We collect, hold, use and disclose personal information as reasonably necessary to:

  • Respond to enquiries and prepare quotations
  • Schedule, manage and complete projects
  • Communicate with clients and other project participants
  • Process payments and maintain accounting and business records
  • Manage customer service, complaints, warranties and disputes
  • Maintain safety, quality assurance and project records
  • Improve our services and website
  • Undertake marketing where permitted by law
  • Comply with our legal, taxation, insurance and regulatory obligations

Collection notices: When we collect personal information directly from you (for example, through a contact or quote form), we will take reasonable steps to make you aware, at or before the time of collection, of why we are collecting it, who we may disclose it to, and how this policy applies.

3. Website and Technical Information

When you use our website, we may collect information such as your IP address, browser and device information, pages visited, time spent on the website, referring website and enquiry source. We may use this information to operate and secure our website, understand how it is used, improve our services and measure the effectiveness of our advertising.

4. Cookies and Tracking Technologies

We and our service providers may use cookies and similar technologies to operate and secure our website, understand website usage, measure enquiries and advertising performance, and show relevant advertising.

These technologies may collect information about your IP address, device, browser, website activity and advertising identifiers. This information may constitute personal information where it identifies you or can reasonably be linked to you.

You may disable cookies through your browser settings, although some website functionality may be affected.

5. Financial and Payment Information

Some payments, including showroom booking payments, may be made through a secure payment link provided by our job-management and payment provider (for example, ServiceM8's payment feature, powered by Stripe). Payment information is processed by that provider in accordance with its own privacy and security practices.

OzGrind does not ordinarily store complete credit or debit card details on its own systems, although we retain transaction and payment records for accounting, administration and legal purposes.

6. Disclosure to Third Parties

We may disclose personal information to third parties where reasonably necessary to operate our business and provide our services. These parties may include:

  • Employees, contractors and tradespeople
  • Builders, architects, designers, property managers and other project participants
  • Job-management, payment, accounting, website, email, cloud-storage and IT providers
  • Marketing, website analytics, advertising and call-management providers
  • Insurers, accountants, lawyers and other professional advisers
  • Debt-recovery providers
  • Government authorities, regulators and law-enforcement bodies where required or authorised by law

We do not sell personal information. We only use or disclose it for the purposes described in this policy, for a related purpose that would reasonably be expected, with consent, or where required or authorised by law.

7. Overseas Disclosure

Some of the personal information we collect may be stored, processed or accessed offshore (that is, outside Australia). In particular, our advertising and analytics providers, such as Google, process information in the United States, and other providers we use, including cloud hosting, email, IT and job-management providers, may store or process information in the United States or in other countries.

Where it is not practicable to specify every country in which a recipient may be located, we take reasonable steps to ensure that overseas recipients handle your personal information in a way consistent with the Australian Privacy Principles.

8. Direct Marketing

We will only use your personal information for direct marketing where you have consented, or where you would reasonably expect us to use it for that purpose and we are otherwise permitted to do so by law.

Every marketing communication we send will include a simple way to opt out (for example, an unsubscribe link). You can also opt out of marketing at any time by contacting us using the details in Section 18. We handle electronic marketing in accordance with the Spam Act 2003 (Cth).

9. Call Recording and AI-Assisted Services

We may record and transcribe telephone calls for customer service, training, quality assurance and record-keeping purposes.

We use an AI-assisted receptionist to answer and route enquiries and collect information such as a caller's name, contact details, project address and project requirements. This information may be provided to our staff and stored in our business and job-management systems so that we can respond to the enquiry, prepare a quotation and provide our services.

We may also use AI-assisted tools for administrative and customer-service purposes. We do not currently use automated decision-making, including artificial intelligence, to make decisions that significantly affect a person's rights or interests. If this changes, we will update this policy as required by law.

10. Data Security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include both technical and organisational measures, such as:

  • Restricting access to authorised personnel only
  • Using secure servers and encryption
  • Maintaining internal policies, access controls and staff awareness
  • Responding to and containing suspected security incidents
  • Securely destroying or de-identifying information when it is no longer required

No method of transmission or storage is completely secure, and while we work to protect your information we cannot guarantee absolute security.

11. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy and to meet applicable taxation, employment, contractual, insurance, building-industry and other legal requirements.

Retention periods vary depending on the nature of the information. Some project, contract, warranty and dispute records may need to be retained for longer than general business records. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

12. Data Breaches / Notifiable Data Breaches (NDB)

If a data breach occurs that is likely to result in serious harm, we will:

  • Investigate and contain the breach
  • Assess the breach promptly
  • Notify affected individuals where required
  • Report to the Office of the Australian Information Commissioner (OAIC) if legally required

Employees and contractors must report any suspected breaches immediately.

13. Access, Correction, and Deletion

You may request access to personal information we hold about you, ask us to correct it, or request that it be deleted or de-identified where we are not legally entitled or required to retain it.

  • Access or review personal information we hold about you
  • Request corrections to ensure it is accurate, up to date and complete
  • Request deletion or de-identification of personal information where it is no longer required for legal or legitimate business purposes

To do so, contact us at enquiries@ozgrind.com.au. We will verify your identity before granting access or making corrections, and we will respond within a reasonable period. If we decline a request for access or correction, we will explain why and how you can complain.

14. Children

We do not market products or services to children, and our website is not directed at children. We do not knowingly collect personal information from children. Users under 18 may only use the website with parental or guardian consent. We are monitoring the introduction of the Children's Online Privacy Code and will update our practices as required.

15. Government Disclosures and Legal Compliance

We may disclose information to law enforcement or regulators if required by law or under proper authorisation (e.g., search warrant, court order).

16. Complaints Procedure

  • 16.1 If you have a complaint regarding how we collect or handle your information, please contact us first so we can attempt to resolve it.
  • 16.2 If the matter is unresolved, please submit a formal complaint in writing, including details of the issue and your desired outcome.
  • 16.3 We will acknowledge receipt, provide a timeframe for our response, and endeavour to resolve the matter promptly.
  • 16.4 If you are not satisfied with our response, you may refer your complaint to the OAIC.

We aim to acknowledge privacy complaints promptly and to provide a substantive response within 30 days.

OAIC contact: enquiries@oaic.gov.au, website: www.oaic.gov.au

17. Changes to this Policy

This policy may be updated periodically to remain current. Significant changes will be posted on this page. We encourage you to review it regularly.

18. How to Contact Us

Email: enquiries@ozgrind.com.au Phone: 1300 OZGRIND (1300 694 746) Business/postal address: 10/29 Links Avenue North, Eagle Farm, QLD 4009, Australia Attn: Privacy Officer

Call UsGet a Quote