Privacy Policy

Crest Painting & Decorating (ABN 96 849 032 407) of 83A Callison Way, Koondoola WA 6064 is responsible for the personal information described here. We handle it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We collect only what we need to quote and carry out work:

• Contact details — name, email address, phone number.
• Property details — the address to be painted, suburb, postcode, property type, and what you tell us about its condition.
• Photographs you upload of the areas to be painted.
• Job and quote history — the estimates, quotes, bookings and work records associated with you.
• Account details if you register — email address and a password, which is hashed and never visible to us.
• Technical data — anonymous page view counts, and the IP address of anyone submitting a form, retained briefly to block abuse.

We do not collect sensitive information as defined in the Privacy Act, and ask that you do not send it to us.

If you use the photo estimate, the images you upload are sent to Anthropic, an AI provider located outside Australia, which analyses them to identify surfaces, approximate areas and the preparation required. Anthropic does not train its models on data submitted through its business API. The analysis is returned to us and priced against our own rate card.

This means your property photographs leave Australia. If you are not comfortable with that, do not use the photo estimate — book an on-site measure instead and no images will be uploaded.

Photographs are stored so we can quote accurately and defend the scope later. We do not publish any image of your property as a project photograph without asking you first, separately and in writing.

To prepare estimates and quotes; to book and carry out work; to invoice and take payment; to honour the workmanship warranty; to answer your enquiries; and to meet our record-keeping obligations. We use contact details for marketing only where you have opted in, and every marketing email carries an unsubscribe link.

We do not sell personal information. We share it only with service providers who help us run the business:

• Supabase — database and authentication hosting.
• Cloudflare R2 — storage for uploaded images.
• Anthropic — automated analysis of photo estimates and drafting assistance, as described above.
• Resend — sending transactional email such as quotes and booking confirmations.
• Railway — application hosting.

Where your information is stored. Some of these providers hold or process data outside Australia:

• Your account, enquiry, quote and booking records are stored on servers in Japan (Supabase, Tokyo region).
• Photographs you upload for a photo estimate are analysed by a provider in the United States (Anthropic).
• Email we send you is delivered through a provider in the United States (Resend).

We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles, and we remain accountable for what they do with it. We may also disclose information where the law requires it.

We set a cookie to keep you signed in, and one to remember whether you prefer the light or dark theme. We do not use advertising or cross-site tracking cookies. Blocking cookies will prevent you from signing in but will not stop you browsing the site.

Quote, job and warranty records are kept for the life of the workmanship warranty and for as long as tax and business records must be retained. Enquiries that do not become jobs, and the photographs attached to them, are deleted once they are no longer needed. You can ask us to delete your information sooner and we will unless we are required to keep it.

Data is held in access-controlled systems with row-level security, so a signed-in customer can reach their own records and nothing else. Staff access is limited by role. Passwords are hashed. No system is perfectly secure, and we cannot guarantee the security of information transmitted to us over the internet.

You may ask for a copy of the personal information we hold about you, ask us to correct it, or complain about how we have handled it. Email crest.quotes@gmail.com. We will respond within 30 days. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy. The date at the top shows when it last changed. Related documents: terms of service and disclaimer.