Privacy Policy

Last updated: 15/07/26

1. About this policy

This Privacy Policy explains how ATOM Modular Pty Ltd (ABN 59 663 752 565) (“ATOM Modular”, “we”, “us” or “our”) collects, holds, uses and discloses personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy applies when you use atommodular.com.au and any related ATOM Modular websites or online forms, contact us, request information or a quote, purchase or enquire about our products or services, or otherwise deal with us.

This policy describes our general personal-information handling practices. Where appropriate, we may also provide a more specific privacy notice when collecting information from you.

2. Personal information we collect

The kinds of personal information we collect and hold depend on how you interact with us and may include:

your name, company or business name and job title;
your email address, telephone number, postal address, postcode and state;
the content of enquiries, quote requests and other communications;
information about your proposed project, site, products, layouts, specifications, delivery requirements and timeframes;
files you provide, including drawings, plans, sketches, photographs and other project documents;
information associated with orders, contracts, invoices, payments, deliveries and warranty or service requests;
records of communications with us, including emails, messages, call details and call notes;
call recordings, where calls are recorded and you have been notified;
information supplied by a referral source or another person acting on your behalf; and
information needed to manage a supplier, contractor or other business relationship.

When you use our website, we and our service providers may collect technical and usage information. This may include:

your IP address;
device, browser and operating-system information;
pages viewed, links selected and time spent on the website;
referring websites or campaign sources;
cookie and device identifiers;
approximate location derived from your IP address; and
advertising and campaign identifiers, such as Google Click Identifiers and UTM campaign parameters.

Technical information may constitute personal information where it identifies you or can reasonably be linked with other information that identifies you.

3. Sensitive information

We do not generally seek sensitive information. If sensitive information is reasonably necessary for our functions or activities, we will collect it with your consent or where otherwise permitted or required by law. If we receive sensitive information we did not request, including during a call or in an uploaded document, we will assess whether we may lawfully retain it and will destroy or de-identify it where required.

Please avoid providing sensitive information or unnecessary personal information in project documents or file uploads.

4. How we collect personal information

We may collect personal information:

directly from you when you complete a form, request a quote, order a product, download information, email or telephone us, attend one of our locations, or otherwise communicate with us;
automatically through cookies, website analytics, advertising technologies and similar tools;
from another person acting on your behalf;
through customer, supplier, contractor or professional referrals;
from analytics, advertising, communications and customer-relationship-management providers; and
from publicly available sources where it is lawful and appropriate to do so.

If we receive unsolicited personal information, we will determine whether we could lawfully have collected it. Where we could not have collected it and are not legally required to retain it, we will take reasonable steps to destroy or de-identify it.

Where reasonable and practicable, you may deal with us anonymously or using a pseudonym. However, we will generally need accurate identifying and contact information to respond to an enquiry, prepare a quote, process an order, deliver a building or provide project and after-sales services.

5. Why we collect, hold, use and disclose personal information

We may collect, hold, use and disclose personal information to:

respond to enquiries and requests for information;
prepare, discuss and provide quotes and proposals;
design, manufacture, supply, transport, install and service our products;
process orders, contracts, invoices and payments;
communicate about projects, deliveries, installation, support and warranty matters;
manage customer, supplier, contractor and other business relationships;
maintain records in our customer relationship management and business systems;
administer and improve our website, products, services and business operations;
understand website use, advertising performance and enquiry sources;
protect our website, systems, premises, staff, customers and business against fraud, misuse and security threats;
send permitted marketing communications;
manage complaints and legal claims; and
comply with legal, regulatory, accounting, insurance and contractual obligations.

We may also use de-identified or aggregated information for reporting, analysis, planning and service improvement where the information no longer identifies an individual.

If you do not provide requested personal information, we may be unable to respond to your enquiry, prepare an accurate quote, process an order or provide the relevant products or services.

6. When we disclose personal information

We may disclose personal information to:

website, hosting, cloud-storage, customer-relationship-management, information-technology, cybersecurity, email, communications and telephony providers;
analytics and advertising providers;
accounting and financial-service providers;
manufacturers, suppliers, transport providers, installers, tradespeople and other contractors involved in delivering a project;
consultants and professional advisers, including lawyers, accountants, insurers and auditors;
our authorised representatives acting on our behalf, where relevant to your dealings with us;
government agencies, regulators, courts, tribunals and law-enforcement bodies where required or authorised by law;
a prospective purchaser or adviser in connection with a proposed merger, acquisition, restructuring or sale of all or part of our business, subject to appropriate confidentiality arrangements; and
other parties with your consent or where otherwise permitted or required by law.

We do not sell personal information to third parties for their independent use.

7. Overseas disclosure and storage

Some of our technology and service providers operate outside Australia or use personnel, infrastructure or subprocessors located outside Australia. As a result, personal information may be stored in, accessed from or disclosed to recipients located outside Australia.

The countries in which overseas recipients are likely to be located include the United States, including in connection with our website hosting, analytics, advertising, customer-relationship-management and telephony services.

The relevant countries may vary according to the service provider and the nature of the service being provided, and some providers use subprocessors or support teams in additional countries. Our telephony provider stores call transcriptions and account data in the United States, and stores call recordings in a data-centre region assigned to our account, which may be located in Australia or another country. Our website is developed and supported by a provider whose personnel may access the website and the information submitted through it from outside Australia.

Before disclosing personal information to an overseas recipient, we take reasonable steps as required by the Privacy Act 1988 (Cth) to ensure that the recipient handles the information consistently with the Australian Privacy Principles, unless an applicable exception applies.

8. Cookies, analytics and advertising

Our website uses cookies and similar technologies. Cookies are small data files stored on a device or associated with a browser. They may be used to:

enable website and form functionality;
remember selections and preferences;
maintain website security;
measure website traffic and performance;
identify errors and improve website content; and
attribute enquiries and conversions to advertising campaigns.

The technologies used on our website may include Google Analytics, Google Ads and HubSpot. These providers may collect information including your IP address, browser and device information, pages visited, cookie identifiers, advertising identifiers and information about interactions with advertisements and website forms.

We currently use these tools for website analytics, conversion measurement and advertising-performance reporting. We may introduce remarketing or similar advertising features in future, which would allow third-party vendors, including Google, to show our advertisements to you on other websites based on your previous visits to our site. Before enabling any such feature, we will review and, where necessary, update our notices, cookie controls and this Privacy Policy.

You can control cookies using your browser settings and any cookie-management controls made available on our website. Blocking or deleting cookies may affect some website functions. You can also opt out of personalised Google advertising through Google’s Ads Settings, and opt out of third-party vendors’ use of cookies through the Network Advertising Initiative opt-out page, as well as through the advertising controls made available by your browser, device or relevant advertising provider.

9. Direct marketing

We send commercial electronic messages, such as marketing emails, only where we have your express or inferred consent, as permitted by the Spam Act 2003 (Cth). We carry out other direct marketing only where permitted by the Privacy Act 1988 (Cth), including Australian Privacy Principle 7, the Do Not Call Register Act 2006 (Cth) and other applicable laws.

Electronic marketing communications will identify ATOM Modular, include current contact details and provide a clear and functional way to unsubscribe.

You may opt out at any time by:

selecting the unsubscribe option in an electronic communication;
replying with an unsubscribe request where that option is provided; or
contacting us using the details in section 14.

We will honour an unsubscribe request from electronic marketing within five working days and will not charge you for making the request.

Opting out of marketing will not prevent us from sending non-marketing communications that are necessary to respond to an enquiry, administer an order, deliver a project, issue an invoice or meet our legal obligations.

You may also ask us to identify the source from which we obtained personal information used for direct marketing, unless it would be unreasonable or impracticable for us to provide that information.

10. How we hold and protect personal information

We may hold personal information electronically and, in some circumstances, in physical records. Electronic information may be held in our business systems and in systems operated by service providers on our behalf.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps may include:

restricting access according to staff roles and business requirements;
authentication and access controls;
maintaining and updating systems and security measures;
using established technology and service providers;
staff procedures and confidentiality obligations;
secure disposal or de-identification processes; and
processes for responding to suspected privacy and data-security incidents.

No transmission or storage system can be guaranteed to be completely secure. You should take care when sending personal information electronically and avoid including unnecessary sensitive or confidential information.

Where a data breach occurs, we will assess and respond to it in accordance with our legal obligations, including the Notifiable Data Breaches scheme where applicable.

11. Retention and destruction

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, taxation, insurance, contractual, project, warranty and recordkeeping requirements. Retention periods may vary according to the type of information and the nature of our relationship with you.

When personal information is no longer required and we are not legally required to retain it, we take reasonable steps to destroy it securely or de-identify it.

12. Accessing and correcting personal information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact our Privacy Officer using the details in section 14. We may need to verify your identity before providing access or making a correction.

There is no charge for making an access or correction request, and we will not charge for correcting personal information. In some circumstances, we may charge a reasonable amount for the costs of providing access. We will explain any proposed charge before providing access.

We will respond within a reasonable period.

There are circumstances in which the Privacy Act 1988 (Cth) allows or requires us to refuse access or correction. If we refuse a request, we will generally give you a written notice explaining the reasons, except where it would be unreasonable or unlawful to do so, and explain how you can complain about the decision.

13. Privacy complaints

If you believe we have mishandled your personal information or breached the Australian Privacy Principles, please contact our Privacy Officer using the details in section 14. Please provide:

your name and contact details;
a description of your concern;
relevant dates, documents or communications; and
the outcome you are seeking.

We will acknowledge the complaint and investigate it. We aim to provide a response within 30 days, although complex matters may require additional time. If more time is required, we will advise you where practicable.

If we do not respond within 30 days, or you are not satisfied with our response, you may lodge a written complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC’s preferred method is its online privacy complaint form at www.oaic.gov.au. You can also download the OAIC’s complaint form from that website and post it to GPO Box 5288, Sydney NSW 2001.

The OAIC Enquiries Line (1300 363 992) can provide information and assistance, but privacy complaints must be lodged in writing.

14. Contact us

For privacy questions, access or correction requests, marketing opt-outs or complaints, contact:

Privacy Officer
ATOM Modular Pty Ltd
Email: marketing@atommodular.com.au
Telephone: (03) 9961 0914
Post: 78 Barry Road, New Gisborne VIC 3438, Australia

15. Changes to this policy

We may update this Privacy Policy when our information-handling practices, technology, service providers or legal obligations change. The current version will be published on our website and identified by the “Last updated” date. Where appropriate, we may provide additional notice of a material change.