Paperock Pty Ltd
Privacy Policy
This policy applies to Just Screw It, Just Scape It and Just Paint It.
1. About this policy
Paperock Pty Ltd (ABN 85 134 654 158) operates the service brands Just Screw It, Just Scape It and Just Paint It. In this policy, “Paperock”, “we”, “us” and “our” refer to Paperock Pty Ltd and these brands, as the context requires.
This policy explains how we collect, hold, use, disclose and protect personal information in connection with our building, renovation, maintenance, landscaping, gardening, painting and related services. It also applies to enquiries, estimates, projects, employment and contractor relationships, marketing, websites, online forms and social media activities associated with the three brands.
We are committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable Australian laws. Where we are not legally required to comply with a particular obligation, we aim to follow the same principles as a matter of good practice.
This policy is a notice about our information-handling practices. It does not treat a visit to a website as blanket consent to every use of personal information. Where consent is required by law or is appropriate for a particular activity, we will seek it separately.
2. Who this policy covers
This policy applies to personal information about individuals who interact with us, including:
- customers and prospective customers
- property owners, occupiers, tenants and authorised representatives
- people requesting an estimate, quotation, inspection or service
- suppliers and prospective suppliers
- employees, prospective employees and volunteers
- subcontractors, tradespeople, consultants and other independent service providers
- business contacts and professional advisers
- website visitors, social media users and marketing subscribers
- people who make an enquiry, provide feedback or lodge a complaint
- other individuals whose information is provided to us in connection with a project or service.
The employee records exemption in the Privacy Act may apply to some records directly related to a current or former employment relationship. We nevertheless treat employee information as confidential and restrict access to authorised personnel.
3. What personal information means
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in a material form or not.
Some information that appears anonymous on its own may become personal information when combined with other information. For example, an online identifier, property address, photograph or detailed job description may identify a person when considered with other records.
4. Information we collect
The kinds of personal information we collect depend on your relationship with us and the service requested. They may include the following.
4.1 Contact and identity information
- name and preferred form of address
- telephone number and email address
- street address, suburb, postcode and state
- postal or billing address
- details of an authorised representative or other contact person.
4.2 Enquiry, estimate and project information
- the service or work you are interested in
- descriptions of the proposed job, defect, maintenance issue or project
- property details, access arrangements and site conditions
- preferred timing, budget information and relevant project constraints
- measurements, plans, drawings, specifications and approvals
- notes from telephone calls, emails, meetings and site inspections
- estimates, quotations, contracts, variations, invoices and payment records
- complaints, feedback, warranty enquiries and service history
- information about how you heard about us or which advertisement led to your enquiry.
4.3 Photographs, video and uploaded material
- photographs and video of a property, room, structure, garden, work site or completed project
- documents uploaded through a form or sent by email
- metadata associated with uploaded files, which may include the date, device details or location information
- images of people or personal belongings that appear incidentally in project photographs.
4.4 Website and technical information
- internet protocol address
- browser, device, operating system and approximate location information
- pages viewed, links selected, referring pages and time spent on the site
- cookie identifiers, advertising identifiers and session information
- Google Ads click identifiers and similar campaign parameters
- form interactions, telephone call conversion information and other website events
- information about consent and cookie preferences.
4.5 Employment, contractor and supplier information
- employment history, qualifications, licences, accreditations and references
- right-to-work, visa and identity information where relevant
- taxation, superannuation, banking and payroll details where required
- emergency contact details
- insurance, workers compensation and work health and safety information
- Australian Business Number, business name, company and contact details
- trade licences, police checks or other screening information where lawful and relevant
- performance, conduct, training, availability and work allocation information.
4.6 Payment information
We may collect payment and transaction information where needed to process an account, deposit, invoice or refund. Card payments may be processed by a third-party payment provider. We do not intend to retain complete payment card details unless this is necessary and permitted under applicable payment-security requirements.
4.7 Government-related identifiers
We do not use government-related identifiers, such as a driver licence, passport, Medicare number or tax file number, as our own identifier unless permitted or required by law. We only collect and use these identifiers where reasonably necessary for a lawful business purpose, such as employment, licensing, identity verification or taxation.
5. Sensitive information
Sensitive information includes health information, biometric information used for automated verification, criminal record information and information about matters such as racial or ethnic origin, political opinions, religious beliefs, professional or trade association membership and trade union membership.
We do not generally need sensitive information from customers. We may collect sensitive information where it is reasonably necessary for a lawful function or activity and you consent, or where collection is otherwise required or authorised by law. Examples may include accessibility requirements, medical information relevant to workplace safety, injury information, police checks or information required to manage an insurance or legal matter.
Please do not include sensitive information in a job description, photograph or upload unless it is genuinely relevant and you are authorised to provide it.
6. How we collect information
We generally collect personal information directly from you when you:
- complete an online enquiry, estimate or contact form
- upload photographs, documents or plans
- telephone, email, message or meet with us
- request or accept an estimate or quotation
- enter into a contract or engage us to perform work
- make a payment or request a refund
- provide feedback, a testimonial or a complaint
- subscribe to marketing or interact with a campaign
- apply for employment or to provide services to us
- interact with our websites or social media pages.
We may also collect personal information from:
- a family member, tenant, property manager, strata manager, architect, designer or other authorised representative
- employees, subcontractors, consultants and independent tradespeople working on a project
- referees, recruiters, insurers, professional advisers and regulatory bodies
- publicly available sources, directories and social media
- our related business records, customer relationship systems and service providers
- analytics, advertising, call-tracking and website technologies.
6.1 Information provided about another person
If you provide us with personal information about another person, you must be authorised to do so and, where appropriate, make that person aware of this policy. This is particularly important when photographs include another person, when a tenant or property owner is not the person making the enquiry, or when an emergency contact or referee is nominated.
6.2 Unsolicited information
If we receive personal information that we did not request, we will determine whether we could have lawfully collected it. If not, and it is lawful and reasonable to do so, we will destroy or de-identify it.
7. Websites, cookies, analytics and advertising
7.1 Cookies and similar technologies
Our websites may use cookies, pixels, tags, local storage and similar technologies. These technologies may be placed by us or by third parties and may remain on your device for a session or for a longer period.
We may use the following categories of technology:
- Strictly necessary technologies: to operate forms, security features, load balancing, accessibility functions and essential website services.
- Functional technologies: to remember preferences and improve website functionality.
- Analytics technologies: to understand how visitors use the websites, identify errors and improve content and performance.
- Advertising and conversion technologies: to measure advertising performance, attribute enquiries to campaigns, limit repeated advertising and, where enabled, support remarketing or audience measurement.
You can usually control cookies through your browser. Where we provide a cookie preference tool, you can use it to manage non-essential cookies and change your choices. Blocking cookies may affect website functionality and may prevent us from accurately measuring enquiries.
7.2 Google Analytics, Google Ads and Google Tag Manager
We may use Google Analytics, Google Ads, Google Tag Manager and related Google services to operate tags, understand website use, measure advertising performance and identify whether an advertisement led to an enquiry, call or other conversion.
Depending on our configuration and your settings, Google may receive information such as your internet protocol address, device and browser information, page addresses, referring website, interactions with the site, approximate location, cookie or advertising identifiers, consent status, advertising click identifiers and conversion events.
Google may combine or process this information in accordance with its own privacy terms and the settings applicable to its services. You can review Google’s explanation of how it uses information from sites that use its services at:
How Google uses information from sites or apps that use its services
7.3 Enhanced conversions and customer data sent to Google
Where enhanced conversions or similar first-party conversion measurement is enabled, information that a customer enters into a form, such as an email address, telephone number, name or address, may be normalised and securely hashed before being transmitted to Google. Google may use the hashed information to match a conversion with a signed-in Google account and improve advertising measurement.
We may also upload conversion information from our customer or quoting systems to Google Ads, such as whether an enquiry became a qualified lead or customer, together with hashed customer identifiers. We use this for measurement, reporting and advertising optimisation, not to sell customer information.
Hashing is a security and matching technique. It does not mean that the underlying customer information was never personal information. We therefore treat the collection and transfer as a personal information handling activity.
We do not intentionally use the content of job descriptions, uploaded photographs, plans or documents for Google customer matching. We take reasonable steps to configure tracking so that unnecessary form content and sensitive information are not transmitted through analytics or advertising tags.
7.4 Remarketing and personalised advertising
We may use advertising technologies to show relevant advertisements to people who have previously visited our websites or interacted with our advertising. Where required, this is subject to the visitor’s cookie or advertising choices. You can manage advertising personalisation through your browser, our cookie controls where available, and the settings offered by Google and other advertising providers.
7.5 Call tracking and enquiry attribution
We may use call-tracking numbers, form tracking and campaign parameters to determine which website page, advertisement or marketing source generated an enquiry. This may involve recording the date, time, duration, source and outcome of a call. We will notify callers if a telephone call is recorded for quality, training or evidentiary purposes.
8. Photographs, documents and file uploads
Customers may provide photographs, videos, drawings, plans and other files to help us assess or complete work. These files can reveal more information than expected, including people, personal belongings, vehicle registrations, security features, correspondence, financial information and embedded location metadata.
When providing files to us, please:
- only provide material reasonably relevant to the enquiry or project
- remove or obscure identity documents, financial information and other unnecessary personal information
- avoid including people who have not agreed to their image being provided
- tell us if a file contains sensitive or confidential information that requires special handling.
We may use project images for estimating, planning, project management, quality assurance, dispute resolution, insurance, record keeping and, with permission where required, portfolio or marketing purposes. We will not intentionally publish identifiable customer or property information for marketing without appropriate authority.
9. How we use personal information
We may use personal information for purposes connected with our functions and activities, including to:
- respond to an enquiry and determine whether we can assist
- arrange a telephone call, site visit, estimate, quotation or consultation
- assess, plan, schedule, manage and complete a project or service
- allocate work to employees, subcontractors, tradespeople and independent service providers
- communicate about access, scheduling, changes, delays, approvals and completion
- purchase materials and coordinate suppliers
- manage contracts, variations, invoices, payments, warranties and accounts
- conduct quality assurance and improve our services
- respond to feedback, complaints, insurance claims and disputes
- maintain project, customer and legal records
- operate, secure, analyse and improve our websites and systems
- measure marketing and advertising performance
- send marketing where permitted and manage opt-out requests
- recruit and manage employees, contractors and suppliers
- comply with licensing, taxation, insurance, work health and safety, legal and regulatory obligations
- protect our rights, property, systems, customers and personnel
- conduct internal reporting, business planning, audits and due diligence.
We may use de-identified or aggregated information for reporting, service improvement, research and business planning where there is no reasonable likelihood that an individual can be re-identified.
10. How we disclose personal information
We may disclose personal information where reasonably necessary for the purposes described in this policy, including to:
- our employees and authorised personnel
- subcontractors, consultants, tradespeople and other independent service providers
- suppliers and product manufacturers
- architects, designers, engineers, certifiers, surveyors and other project professionals
- property managers, strata managers, owners, tenants or authorised representatives involved in the project
- website hosts, form providers, customer relationship systems, quoting platforms and cloud-storage providers
- email, telephone, call-tracking and communications providers
- Google and other analytics, advertising and marketing service providers
- payment processors, banks, insurers and finance providers
- accountants, auditors, lawyers and other professional advisers
- government authorities, regulators, courts, tribunals and law-enforcement bodies where required or authorised
- a purchaser, investor, financier or adviser in connection with a proposed sale, restructure or transfer of all or part of the business, subject to appropriate confidentiality arrangements.
We do not rent or sell personal information. We require service providers to handle information for authorised purposes and take reasonable steps to protect it, although some providers may also handle information under their own privacy policies and legal obligations.
11. Employees, subcontractors and independent service providers
Our services may be carried out by employees, subcontractors, specialist tradespeople, consultants or independent service providers. We may provide them with the contact, property, project and access information reasonably required to quote, inspect, schedule or perform the work.
Some independent service providers operate their own businesses and may collect additional information directly from you. Their own privacy notices may apply to information they independently collect or control. We remain responsible for our own handling of personal information and take reasonable steps to disclose only what is needed for the relevant service.
Where a requested service falls within another Paperock brand, we may share the enquiry between Just Screw It, Just Scape It and Just Paint It so the appropriate team can respond. The three brands are covered by this policy.
12. Direct marketing
We may send information about our services, offers, maintenance reminders, projects or related content where you have consented, where we collected your details in circumstances where you would reasonably expect this use, or where otherwise permitted by law.
Marketing communications may be sent by email, SMS, telephone, post or through online advertising. We will comply with applicable requirements, including the Spam Act 2003 (Cth) and Do Not Call Register Act 2006 (Cth).
You can opt out at any time by using the unsubscribe facility in a message, replying with an opt-out request, adjusting your cookie or advertising preferences, or contacting us. We may still send service, safety, account and project communications that are not marketing.
13. Overseas processing and disclosure
Some service providers that host, support or process information for us are located outside Australia or use infrastructure and support teams in other countries. As a result, personal information may be stored in or accessible from overseas.
The countries involved will depend on the provider and may change. They are likely to include the United States of America and other countries in which Google, website, cloud, communications, form-processing and software providers operate.
Before disclosing personal information overseas, where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances to ensure the recipient handles the information consistently with applicable Australian privacy requirements, unless an exception applies. These steps may include reviewing contractual terms, privacy and security documentation, data-processing arrangements and access controls.
14. Storage, security and data breaches
14.1 How information is stored
Personal information may be held in electronic systems, email accounts, customer and quoting systems, cloud storage, mobile devices, telephone records, project-management systems, accounting records and paper files. Information may be stored for us by contracted service providers.
14.2 Security measures
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Depending on the circumstances, these measures may include:
- role-based access and limiting access to people who need the information
- password controls and multi-factor authentication where available
- device, network, malware and firewall protections
- secure website connections and reputable hosting providers
- backups, software updates and vulnerability management
- staff instructions, confidentiality obligations and privacy training
- contractual and due-diligence checks for service providers
- secure disposal or de-identification when information is no longer required
- incident-response and data-breach procedures.
No internet transmission or storage system is completely secure. Please take care when sending information electronically and contact us before transmitting highly sensitive material.
14.3 Data breaches
We maintain procedures for responding to suspected loss, unauthorised access or disclosure of personal information. Where the Notifiable Data Breaches scheme applies, we will assess a suspected eligible data breach and notify affected individuals and the Office of the Australian Information Commissioner when required by law.
15. Retention and deletion
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, a related lawful purpose, or to comply with legal, taxation, insurance, licensing, building, employment, accounting and dispute-resolution requirements.
Retention periods vary according to the type of record. Project and transaction records may need to be retained for a number of years after the work is completed. Marketing contact information may be retained until you opt out or it is no longer needed. Unsuccessful employment applications and enquiries may be retained for a limited period where reasonably necessary for administration, future opportunities or legal protection.
When personal information is no longer required and no legal obligation requires us to retain it, we take reasonable steps to securely destroy or de-identify it. Backup copies may remain for a limited period until they are overwritten or securely removed in accordance with system processes.
16. Anonymity and pseudonyms
You may deal with us anonymously or using a pseudonym where this is lawful and practicable, such as when making a general enquiry. We will usually need your real name and contact details to attend a property, provide an estimate, enter into a contract, process payment, provide regulated services or manage safety, insurance and warranty requirements.
17. Access and correction
You may request access to personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact us using the details at the end of this policy.
We may need to verify your identity before providing access or making a correction. We will respond within a reasonable period, generally within 30 days. We do not charge for making a request, although we may charge a reasonable administrative cost for providing access where permitted by law.
In some circumstances, the law permits or requires us to refuse access or correction. If we refuse, we will generally provide written reasons and information about how you may complain, unless it would be unreasonable or unlawful to do so.
18. Privacy complaints
If you believe we have not handled your personal information appropriately, please contact us and provide enough detail for us to investigate. We will acknowledge a privacy complaint as soon as reasonably practicable, generally within five business days, and aim to provide an outcome within 30 days. More complex matters may take longer, in which case we will keep you informed.
We may ask for further information, review relevant records, speak with personnel or providers involved and take corrective action where appropriate. Possible outcomes include correcting information, changing a process, restricting or deleting information, providing an explanation, or improving staff guidance and system controls.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. Information about making a privacy complaint is available at oaic.gov.au/privacy/privacy-complaints.
19. Third-party websites and social media
Our websites and communications may contain links to third-party websites, applications, maps, videos, payment services and social media platforms. Those third parties are responsible for their own privacy practices. We encourage you to review their privacy policies before providing information.
Information posted publicly on a social media platform may be visible, copied or shared by other users. Removing content from our page may not remove copies held or shared elsewhere. We may moderate or remove content from pages we control where it is inappropriate, unlawful or inconsistent with the platform’s rules.
20. Changes to this policy
We may update this policy when our services, technologies, legal obligations or information-handling practices change. The current version will be published on our websites and will show the date of the latest update. We encourage you to review it periodically.
Where a change materially affects how we handle information already collected, we will take reasonable steps to provide additional notice or obtain consent where required.
21. Contact details
| Privacy contact | Privacy Officer, Paperock Pty Ltd |
|---|---|
| Brands | Just Screw It, Just Scape It and Just Paint It |
| info@justscrewit.com.au | |
| Telephone | (02) 9564 5454 |
| Address | 21 Hill Street, Leichhardt NSW 2040 |
| ABN | 85 134 654 158 |
Last updated: 31 July 2026