How we handle your information.

• Contact details — name, email, phone, suburb, postcode.
• Project details — room scope, indicative budget, timeline, the message you send via the contact form, and any drawings or images you share.
• Site usage — minimal, cookieless analytics (page views, referrer, device class). We do not use third-party advertising trackers, Google Analytics, or cross-site identifiers.
• Project records — once you engage us, this includes drawings, site measurements, photos of the property, and invoicing records.

Only to respond to your enquiry, prepare a quote, deliver the project you've engaged us for, meet our legal obligations (tax, warranty, NSW Home Building Act record-keeping), and improve our service. We do not use your information for marketing or sell it to third parties.

Enquiry information is stored in HubSpot CRM (data residency: Frankfurt or Singapore region — Australian data sovereignty available on request). Project records and invoicing live in Xero (Australian-hosted) and monday.com (Sydney region). Drawings and project photographs are stored in Google Workspace (Australian region for our tenant).

All providers are bound by data processing agreements and meet at minimum SOC 2 Type II or ISO 27001. None of these providers are authorised to use your data for their own purposes.

We share information with: our subcontracted installers and tradespeople when work is on your property (limited to what they need for the job), our accountant for tax compliance, our lawyer if a contractual question arises, and statutory authorities where required by Australian law.

With your explicit, written consent we may share finished-project photographs with publications or for use on this website. You retain the right to refuse, and to revoke consent at any time.

Enquiry records that don't convert to a project: 24 months, then deleted. Project records: 10 years from completion (mirrors the structural warranty term and NSW record-keeping requirements). Financial records: 7 years(ATO requirement).

Under the APPs you have the right to: access the personal information we hold about you, ask us to correct it, ask us to delete it (subject to legal retention obligations), withdraw consent, and complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we've mishandled your data.

Email info@luxinterior.com.au (subject line: “Privacy request”) to exercise any of these rights. We respond within 14 days.

All information in transit to this site is encrypted with TLS 1.3. Access to our CRM, accounting, and project systems is restricted by role, requires two-factor authentication, and is logged. We do not store payment card details — invoices are paid directly via bank transfer or Stripe-hosted payment pages.

If we materially change this notice, we'll update the “last updated” date above and, where you have an active project with us, notify you by email at least 14 days before the change takes effect.