Legal review required
This entire page requires review against the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles. The operator must also confirm whether the business is an APP entity, which turns on annual turnover and on the kinds of information handled. Do not publish this page in its current state.
Who this policy applies to
Grid xPower Energy (ABN 84 685 417 369) operates this website. This policy covers personal information collected through it.
What this website actually collects
Stated factually, so the finished policy can be written from it rather than from a template.
Information you give us directly
Two forms on this site collect personal information.
- The quick quote form collects your name, email address, mobile number, suburb and the products you are interested in.
- The consultation form additionally collects your postcode, property type, whether you own or rent, your electricity bill range, your preferred contact method and any message you write.
Both forms also record which page you submitted from. Neither form collects payment details, identity documents or any sensitive information as that term is defined in the Privacy Act.
Where it is stored
Submissions are stored in a Supabase database. The website can write new enquiries to that database but cannot read anything back out of it. Access to stored enquiries requires separate authentication.
Legal review required
Confirm and disclose the hosting region of the Supabase project. If enquiry data is stored outside Australia, APP 8 applies to cross-border disclosure and the countries involved must be named in this policy.
Analytics and cookies
No analytics, advertising or tracking scripts are installed on this website at the time of writing, and it sets no cookies of its own.
Legal review required
If Google Analytics, Google Tag Manager, a Meta pixel or any similar tool is added later, this section must be rewritten and a compliant consent mechanism added before that tool goes live. See the pre-launch checklist in the README.
How we use your information
Enquiry details are used to respond to your enquiry, arrange a site assessment and prepare a quote.
Legal review required
Confirm every additional use before listing it, in particular any marketing use. Marketing messages are separately regulated by the Spam Act 2003 (Cth), which requires consent, sender identification and a working unsubscribe facility.
Disclosure to others
Legal review required
List every third party that receives enquiry data. Likely recipients include the hosting provider, the database provider, any finance provider a lead is referred to, and any subcontracted installer. Each must be identified by category, and named where required.
Retention and security
Legal review required
State the retention period for enquiry records and the process for destroying or de-identifying them once they are no longer needed, as APP 11.2 requires. Describe the access controls actually in place.
Accessing and correcting your information
Under APP 12 and APP 13 you may request access to the personal information held about you and ask for it to be corrected.
Legal review required
Insert the process, the response timeframe and the contact point for these requests.
Data breaches
Legal review required
Confirm whether the Notifiable Data Breaches scheme applies to this business and, if it does, document the assessment and notification process.
Complaints
Complaints about the handling of your personal information can be made to us, and then to the Office of the Australian Information Commissioner if you are not satisfied with our response.
Legal review required
Insert the internal complaints process and the timeframe for a response.
Contact
Privacy enquiries: privacy@gridxpower.energy, 08 838 9999, Welshpool WA 6106, Australia.
Changes to this policy
Legal review required
State the version number and the date this policy last changed, and how a change will be communicated. Replace this block with the version line itself once there is one.