This is a template, not legal advice. It is a starting point written in plain English. Privacy law differs by country and changes over time — have it reviewed by a qualified lawyer in your jurisdiction before you publish it or rely on it.
1. Who we are
GARZA is a trading name of [Legal entity name] (ABN/NZBN: [number]), registered at [registered address]. We sell made-to-measure curtains, tracks and blinds to customers in Australia and New Zealand.
In this policy, “we”, “us” and “our” mean that entity. “You” means the person using this website. We are the organisation responsible for the personal information described below.
2. The short version
| What you do | Where it is processed | Do we receive or store it? |
|---|---|---|
| Upload a room photo for the fabric try-on | In your browser only (local canvas) | No. The image is never uploaded. |
| Enter window sizes and options in the quote calculator | In your browser only | No. Nothing is sent to us. |
| Email or message us | Your email provider and ours | Yes — so we can reply and prepare a quote. |
| Browse the website | Our hosting provider | Standard technical logs, kept short-term. |
| Accept analytics or advertising cookies | — | We do not use them. |
3. Room photos and the fabric try-on
The fabric try-on lets you choose a photo of your own room and see a fabric texture mapped onto the area you mark. The photo is processed entirely in your browser and is never uploaded to a server. We do not receive it, cannot see it, and do not store a copy.
Technically, this is what happens:
- Your browser reads the file locally using the FileReader API and draws it to a canvas inside the page.
- The fabric preview is generated by local JavaScript on that canvas. No network request carries the image.
- When you close or refresh the page, the image is discarded from memory.
- If you choose Download preview, the exported PNG is saved to your own device by your browser. You decide whether to share it.
The “AI lighting render” mode shown on the try-on page is not connected and cannot process a photo. If we introduce a server-side image feature, it would require sending a photo to a processing provider. Before that happens we will update this policy and ask for your explicit consent on the page — an upload would never be hidden or switched on by default.
4. Quote calculator inputs
Window dimensions, product type, fabric price, destination country, quantity and trade term are used only to calculate an estimate in your browser. They are not submitted to us, saved in a database, or attached to your visit. Refreshing the page clears them.
If you want a human-checked quote, you need to send us the details by email or through the contact form once it is connected. We will then hold that information as described in section 5.
5. Information you give us directly
When you contact us we may collect:
- your name, email address, phone number and business name;
- the project details you choose to send (sizes, quantities, destination, photos);
- correspondence with us and records of quotes or orders; and
- billing and delivery details needed to fulfil an order.
We use this information to answer enquiries, prepare quotes, supply goods, arrange delivery, keep business records and meet legal obligations. We do not sell it, and we do not use it for unrelated marketing without your consent.
7. Server logs and hosting
Like most websites, our hosting provider records standard technical information when a page is requested: IP address, requested URL, date and time, browser type and referring page. This is used for security, troubleshooting and aggregate traffic measurement. We do not combine it with your identity or use it to track you across other sites.
The site is designed to be served as static files, so there is no application database of visitors.
8. Third-party links and services
This site may link to third-party sites such as social media pages, map listings or marketplaces. Those sites are operated by other companies and have their own privacy policies. We do not control them and are not responsible for how they handle your information. Please read their policies before providing personal details.
We rely on service providers for hosting, email and, if you order, freight and payment. They receive only the information needed to perform that service.
9. Overseas processing
We are based in China and sell into Australia and New Zealand. Our hosting and email providers may store or process information in other countries. Where personal information is transferred overseas, we take reasonable steps to ensure it receives comparable protection, and we remain accountable for it under the privacy law that applies to us.
10. How long we keep information
- Enquiries and quotes: up to 24 months after the last contact, so we can pick up an old project.
- Orders and invoices: as long as tax and company law requires (generally 7 years in Australia).
- Server logs: a short retention period set by the hosting provider.
- Room photos: never held by us, so there is nothing to delete.
11. Security
The site is served over HTTPS. Access to enquiry and order records is limited to people who need it to do their job. No system is perfectly secure; if a data breach occurs that is likely to cause serious harm, we will notify affected people and the relevant regulator as required by law.
12. Your rights
Depending on where you live, you may have the right to ask for access to the personal information we hold about you, to have it corrected, or to ask us to delete it. You can also ask how we handle it and complain if you are unhappy with our response.
- Australia: the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply. Complaints can be made to the Office of the Australian Information Commissioner (OAIC).
- New Zealand: the Privacy Act 2020 applies. Complaints can be made to the Office of the Privacy Commissioner (OPC).
To exercise a right, contact us using the details in section 15. We will respond within a reasonable period and may need to verify your identity first.
13. Children
Our website and services are intended for adults and businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with information, contact us and we will delete it.
14. Changes to this policy
We may update this policy when our services or the law change. The “last updated” date at the top of the page will change, and material changes will be highlighted on the site. The version in force is the one published here.
15. Contact
Privacy questions and requests:
Email: hello@garza.example (placeholder — replace before publishing)
Post: [registered address]
Company: [Legal entity name], ABN/NZBN [number]
We aim to acknowledge privacy requests within 5 business days. If you are not satisfied with our response, you can contact the OAIC (Australia) or the OPC (New Zealand).