Varloch Group Pty Ltd (ABN to be confirmed by owner; trading as Varloch Group; NSW Builder Licence 373007C; in this Policy, “Varloch”, “we”, “us”, “our”) is committed to protecting the personal information of visitors to varloch.com.au and people who engage with us about residential construction services. This Policy describes how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What personal information we collect

We collect personal information that you provide directly to us, or that we generate when you interact with our website. This typically includes:

Contact information — name, email address, phone number, and the suburb or address of the project you’re asking us about, when you submit our contact form, request a Block Report, book a site visit via Cal.com, or otherwise reach out.
Project information — anything you tell us about a proposed or in-progress project, including site addresses, architect / consultant contacts, budgets, timelines, drawings, and related documents.
Analytics and device information — pages visited, referring URL, IP address, browser type, device, and approximate location, collected through analytics services (Google Analytics 4, Vercel Analytics, Vercel Speed Insights), advertising services (Google Ads, Meta Pixel), and our error monitoring service (Sentry).
How you found us — when you first arrive, our website notes the page you landed on, the referring site, and any campaign tags or ad-click identifiers in the link (for example from a Google or Meta ad). This is kept in your browser's local storage and is only sent to us if you submit an enquiry, so we know which advertising and content actually helps people find us. Attribution expires after 90 days. We retain page paths rather than query strings or calculator inputs. Calculator share links include the inputs you choose to share; anyone with that link can read them.
Cookies — small text files set by our website and by the analytics / advertising services listed above.

How we use your personal information

We use personal information to:

respond to enquiries about residential building services;
quote, contract, deliver, and administer construction projects;
send transactional emails (e.g. your Block Report, booking confirmations);
operate and improve the website, including diagnosing errors and measuring performance;
measure the effectiveness of marketing campaigns we run on Google Ads and Meta (Facebook / Instagram);
comply with legal and regulatory obligations.

How we disclose your personal information

We disclose personal information to third parties only where necessary for the purposes above. Our principal disclosures are:

Resend — email delivery. Enquiry and booking forms are emailed to our sales team, who may record your enquiry in our internal customer relationship and project management system (Tenley) to track and respond.
Sophiie — provides our chat and telephone assistant, processes conversations and booking details, and connects appointments to our Microsoft Outlook calendar. Information you give the assistant is handled by that service as well as our team.
Cal.com — booking platform used to schedule site visits and consultations. Cal.com sends calendar invitations on our behalf.
Resend also delivers transactional email such as the Block Report PDF you request.
Vercel — hosting, analytics, and speed insights infrastructure for the website.
Sentry — error monitoring and crash analytics for the website.
Google (Analytics, Ads, Tag Manager) and Meta (Facebook Pixel) — marketing analytics and advertising measurement. These services may set cookies on your device.
Upstash — stores enquiry receipts and pending email delivery records for seven days, and short-lived report caches and abuse limits. Our public Block Report does not use a Supabase database.
Consultants we engage on your behalf — including architects, engineers, certifiers, heritage advisors, and trades — where necessary to assess feasibility or deliver a project.
Government and regulatory bodies — including councils, NSW Fair Trading, icare HBCF, and the NSW Heritage Council, where required to fulfill our role as your builder.
Where required by law — including in response to court orders, statutory notices, or law enforcement requests.

We do not sell personal information. We do not disclose personal information to third parties for their independent marketing purposes.

Marketing communications

We may use the contact information you provide to send marketing communications about Varloch services that we believe may interest you. You can opt out of marketing communications at any time by replying to any such email with the word “unsubscribe” or by emailing us at [email protected]. Transactional emails (e.g. a Block Report you requested) are not marketing and will continue to be sent.

Overseas transfers

Some of the third-party services listed above (notably Vercel, Sentry, Google, Meta, Resend, Upstash, Sophiie and Cal.com) store and process personal information on servers located outside Australia, including in the United States and the European Union. By submitting personal information through this site, you consent to such transfers. We take reasonable steps to ensure these recipients handle personal information consistently with the APPs.

How long we keep your information

Website enquiry delivery records expire after seven days; our sales mailbox and project systems have their own business retention periods. We keep personal information for as long as we need it to respond to enquiries, deliver projects, and meet our legal obligations (including statutory record-keeping under the Home Building Act 1989 (NSW) and tax law). We delete or de-identify personal information when we no longer have a lawful reason to keep it.

Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including transport encryption (HTTPS), restricted access to internal systems, and use of reputable processors. No method of transmission over the internet is perfectly secure, and we cannot guarantee absolute security.

Access, correction, complaints

Under the APPs, you have a right to access the personal information we hold about you, and to ask us to correct it if it’s wrong. To make a request, contact us at the address below. We will respond within a reasonable time (typically within 30 days).

If you believe we have breached the APPs or this Policy, please contact us first so we can try to resolve the matter directly. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Cookies and online tracking

Our website uses cookies and similar technologies for analytics and advertising. You can disable cookies in your browser settings, or opt out of personalised advertising through your Google Ads Settings and Meta ad preferences. Disabling cookies may affect your experience on the site, but core functionality (forms, bookings, Block Report) will still work.

Children

Our services are not directed to people under 18. We do not knowingly collect personal information from children.

Changes to this Policy

We may update this Policy from time to time. The current version and effective date are shown at the top of this page. Material changes will be flagged on this page for at least 30 days.

How to contact us

For privacy questions, access requests, or complaints, contact us at:

Varloch Group
Email: [email protected]
Web: varloch.com.au/contact

Privacy Policy.