In this Privacy Policy, "us", "we" or "our" means Krost Business Furniture Centre Pty Ltd (ACN 003 783 882), Krost Furniture Pty Ltd (ACN 125 605 290), or any other associated companies trading under a variation of the name "Krost Business Furniture".
By providing Personal Information to us, you consent to our collection, use and disclosure of your Personal Information in accordance with this Privacy Policy. We may update this policy from time to time by publishing changes on our website. We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024.
Definitions
What Personal Information Do We Collect?
We may collect Personal Information about you when you use the Site, register on the Site or interact with us in any way.
Information you provide to us
This includes information provided:
- During registration on the Site
- During correspondence, enquiries, support calls, or customer surveys
- Uploaded onto the Site in any way
- Through our marketing activities
The Personal Information we may collect includes your name, email address, phone number, postal code, age, gender, product purchase history, geographic location, login credentials for third-party websites, and any other information that enables you to be personally identified.
Information we automatically collect
We automatically collect certain technical data from the device and/or browser you use to access the Site, including your IP address, browser characteristics, activity statistics, and information about how you arrived at the Site.
Information we obtain from others
We may also collect Personal Information from third-party sources such as other Users, suppliers, social media platforms or other third-party integrations.
Why Do We Collect, Use and Disclose Personal Information?
We may collect, hold, use and disclose your Personal Information to:
- Enable you to access and use our Site or purchase Products
- Operate, protect, improve and optimise our Site, business and user experience, including analytics and research
- Send service, support, administrative messages, reminders, technical notices, updates, and security alerts
- Send marketing and promotional messages from us or our business partners
- Administer rewards, surveys, contests or other promotional activities
- Comply with legal obligations, resolve disputes, and enforce agreements with third parties
We may disclose your Personal Information to trusted third parties to develop anonymised consumer insights so that we can better understand your preferences and personalise your experience.
We do not sell, distribute or lease your Personal Information to third parties for commercial purposes, except to provide services you have requested, where you have given permission, or where required by law.
Who we may disclose your information to
- Our employees and related bodies corporate
- Third-party suppliers and service providers (including delivery partners)
- Professional advisers, dealers and agents
- Payment systems operators
- Existing or potential business partners and agents
- Sponsors or promoters of competitions we conduct
- Anyone to whom our assets or business are transferred
- Third parties specifically authorised by you
- Government agencies, regulatory bodies and law enforcement as required or permitted by law
Direct Marketing
We and/or our carefully selected business partners may send you direct marketing communications and information about our Products. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the Spam Act and the Privacy Act.
You may opt out of receiving marketing materials at any time by:
- Using the unsubscribe link included in any marketing email
- Sending an SMS opt-out reply as directed in any SMS message
- Contacting us directly using the details in section 15
Overseas Disclosure
Some of the third parties to whom we disclose Personal Information may be located outside Australia, including in the United States, the European Union or other countries where we use cloud-based services or technology platforms.
Where we disclose your Personal Information to overseas recipients, we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles.
Overseas countries may not have privacy laws that provide the same level of protection as Australian law. By providing your Personal Information to us, you consent to its disclosure to overseas recipients in these circumstances.
Cookies & Tracking Technologies
We may collect information about your use of our website, such as which pages you visit, the time and date of your visit and the IP address assigned to your device. We use cookies and similar tracking technologies to help track website usage and remember your preferences.
Types of cookies we use
- Essential cookies — necessary for the website to function and cannot be switched off
- Functional cookies — allow us to remember your preferences and personalise your experience
- Analytics cookies — help us understand how visitors interact with our website (e.g. Google Analytics)
- Marketing cookies — used to track visitors across websites to enable relevant advertising
By continuing to use our Site, you acknowledge and agree to our use of cookies and tracking technologies as described in this Policy. If you do not wish to accept cookies, you can manage or disable them at any time through your browser settings, though please note this may affect your ability to use certain features of the Site.
Any Personal Information collected via cookies is handled in the same way as all other Personal Information under this Policy.
Artificial Intelligence & Automated Processing
We may use automated tools, including artificial intelligence (AI) technologies, to improve your experience on our Site. This may include:
- Personalised product recommendations based on your browsing and purchase history
- AI-assisted customer support tools or chatbots
- Analytics processing to understand how our Site is used
No fully automated decisions that have a significant effect on you will be made without appropriate human oversight. If you have questions about how automated tools may affect you, please contact us.
Security
We hold your Personal Information in electronic and/or hard copy form. We take reasonable steps to protect your Personal Information from misuse, interference, loss, and unauthorised access, modification or disclosure, using physical, administrative, personnel and technical measures.
No method of data transmission or storage is completely secure, and we cannot guarantee absolute security. If you suspect any unauthorised access to your Personal Information, please contact us immediately.
Data Breach Notification
We are subject to the Notifiable Data Breaches (NDB) scheme under the Privacy Act. In the event of a data breach that is likely to result in serious harm, we will:
- Promptly assess and contain the breach
- Notify affected individuals as soon as practicable
- Notify the Office of the Australian Information Commissioner (OAIC) as required by law
We maintain an internal data breach response plan and conduct regular reviews of our data security practices. If you believe your Personal Information has been compromised, please contact us immediately.
Retention of Personal Information
We retain your Personal Information for as long as you are a registered User, and for such additional periods as required or permitted by law. As a general guide:
- Customer transaction records — up to 7 years for tax and legal compliance
- Marketing preferences — up to 3 years from your last interaction
- Account and profile data — duration of account, plus up to 2 years after closure
You may close your account by contacting us. Even after deletion, Personal Information may persist on backup or archival media for legal, tax or regulatory reasons.
Exclusions
Third-party links
Our Site may contain links to websites operated by third parties. Unless expressly stated otherwise, we are not responsible for the privacy practices of those linked websites. We encourage you to read their privacy policies before using those websites.
Information provided to others
This Privacy Policy does not apply to Personal Information you provide to another User or visitor through the Site, or information posted by you to any public areas of the Site.
Accessing or Correcting Your Information
You can access the Personal Information we hold about you by contacting us. We may need to verify your identity and, in some cases, may not be able to provide access to all information — we will explain why if this is the case.
If you believe any Personal Information we hold is inaccurate, please contact us and we will take reasonable steps to correct it. We will respond to all requests in accordance with applicable laws and within the timeframes required by the Privacy Act.
Children's Privacy
Our Site and Products are not directed at children under the age of 15. We do not knowingly collect Personal Information from children under 15 without parental or guardian consent. If we become aware that we have inadvertently done so, we will promptly delete that information.
If you are a parent or guardian and believe your child has provided Personal Information to us without consent, please contact us immediately.
Making a Complaint
If you believe we have breached the Privacy Act or any other applicable privacy law, or wish to make a complaint about how we have handled your Personal Information, please contact us with your name, contact details and a clear description of your complaint.
We will acknowledge your complaint promptly and respond within 30 days. If you are not satisfied with our response, you may escalate to the Office of the Australian Information Commissioner (OAIC):
Contact Us
For further information about our Privacy Policy, to access or correct your Personal Information, or to make a complaint, please get in touch:
We aim to respond to all privacy enquiries within 30 days.