Bella Carpentry
This Privacy Policy explains how The Trustee for Ursino Family Trust (ABN 28 995 562 727), trading as Bella Carpentry (“Bella Carpentry”, “we”, “us” or “our”) collects, uses, stores and discloses personal information. It applies to our website bellacarpentry.com.au, to enquiries and job applications, and to our dealings with customers.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have a question about anything in this policy, contact us using the details at the end.
Our quote and contact forms ask for:
When you submit a form, our website also records the page you sent it from. That page address can include campaign details, such as where you found us (for example a Google search, or an ad click on Google, Facebook or Instagram).
If you call, text, email or message us on social media, we collect whatever you choose to tell us, such as your contact details, project details and photos of the job site. Messages sent through Facebook or Instagram are also held by Meta under its own privacy policy.
If we quote or carry out work for you, we keep records of the job:
Our Careers form asks for:
Only upload identity documents if you are happy for us to hold them. We can sight them in person at interview instead.
Our website, and the analytics and advertising tools described in sections 5 and 6, automatically collect information about your visit:
We may receive information about you from:
We use personal information to:
We will not sell your personal information. We will not use it for unrelated purposes without your consent unless the law allows or requires it.
Like most small businesses, we rely on third-party service providers to run our website, email and marketing. The table below lists each place your information may go, and why.
| Service | What it receives | Why | Where data is held |
|---|---|---|---|
| Our website host (SiteGround, running WordPress and Elementor) | All form submissions, including files uploaded through the Careers form, plus standard server logs (IP address, browser, pages requested) | To run the website and process forms | SiteGround’s data centres (Australia or overseas) |
| Google Workspace (our business email) | A copy of every form submission, and any emails you send us | So we can read and answer your enquiry or application | Google data centres in Australia and overseas, including the United States |
| Searchology (our marketing and website agency) and its lead-reporting system | Your enquiry message, the page you submitted it from and campaign details. It does not store your name, email or phone number. | To report which pages and channels produce enquiries, and to improve our website and marketing | Database in Sydney (Supabase). Application servers may be in the United States (Vercel). |
| Our customer relationship management (CRM) system | Name, email, phone, suburb, service requested, your message and the page you enquired from, plus notes on the status of your enquiry or job | To keep track of enquiries and send follow-up emails | Sydney, Australia (Vercel and Supabase) |
| Brevo (email delivery) | Your name and email address, the content of emails we send you, and delivery, open, click, bounce and unsubscribe information | To deliver emails we send you from our CRM | European Union |
| Anthropic (Claude AI) | The text of your enquiry message, the page it came from and, when Searchology reviews leads, the website-visit information described in section 5 | To sort enquiries by type of service and prepare summary reports for us (see section 7) | United States |
| Google Analytics and Google Tag Manager | Website usage information and cookies | Website statistics | United States and other countries |
| Google Ads (search, Maps, YouTube and partner sites), when we run campaigns | Ad click identifiers, cookies and website actions such as form submissions, phone-number and email clicks. If we upload a customer list, hashed (scrambled) email addresses and phone numbers (see section 6). | To measure which ads produce enquiries, show ads to past website visitors, and stop showing ads to existing customers | United States and other countries |
| Meta (Facebook and Instagram ads and messages), when we run campaigns | Ad click identifiers, cookies and website actions such as form submissions. If we upload a customer list, hashed email addresses and phone numbers. Any messages you send us on Facebook or Instagram. | The same advertising purposes as Google Ads, and to receive and reply to your messages | United States, Ireland and other countries |
| Google Fonts and Google Maps | Your IP address and browser information when a page loads fonts or a map | To display the website’s fonts and our service-area map | United States and other countries |
| Microsoft Clarity | Website usage information, cookies and session recordings (what you type into forms is masked) | To see how visitors use the site, fix problems, and link website visits to the enquiries they produce (see section 5) | United States and other countries |
| Trustindex (reviews widget) | Your IP address and browser information when the widget loads | To display our Google reviews on the website | European Union |
| Accountants, insurers, suppliers, subcontractors, certifiers and councils | Only what is needed for the job, such as your name, site address and job details | To carry out work, obtain approvals and insurance, and meet legal obligations | Australia |
We may also disclose personal information:
Our service providers may only use your information to provide their services to us. We choose providers that keep their systems secure.
When you make an enquiry, we may send you a small number of emails about it. These include:
These emails come from our own business email address, and your replies come straight to us. They stop as soon as we are in touch about your job.
Every email includes an unsubscribe link. If you unsubscribe, we add your address to a do-not-email list and will not send you any further automated emails. We comply with the Spam Act 2003 (Cth).
Our email provider may record whether an email was delivered, opened or clicked. We use this to check that emails arrive and to stop sending to addresses that bounce or complain.
Our website uses cookies and similar technologies. Cookies are small files stored by your browser. They help the website work and tell us how it is used. We use:
When you submit an enquiry, our marketing agency may match it to the Clarity record of that visit. The match is made by comparing the time of the enquiry with the time of the visit. It shows how you found us (for example the search, ad or referring website), the pages you viewed and the buttons you clicked before enquiring. The result, including a link to the session replay, is stored next to your enquiry message in the lead-reporting system described in section 3. We use it only to understand which pages and marketing produce enquiries.
You can block or delete cookies in your browser settings, use private browsing, or install the Google Analytics opt-out add-on. The website will still work if you do. Microsoft explains how Clarity handles data in the Microsoft Privacy Statement.
We advertise our services online, mainly through Google (search, Maps and YouTube) and Meta (Facebook and Instagram). When we run campaigns, we may use the tools below. We add and remove them through Google Tag Manager, and we update the list in section 3 when we do.
When you click one of our ads, Google or Meta adds a click identifier to the website address (for example gclid or fbclid). If that visit leads to an enquiry, or a click on our phone number or email address, our website may tell the ad platform. This lets us see which ads and keywords produce enquiries, so we do not waste money on ones that don’t. If an enquiry later becomes a job, we may also report that back to the platform as a conversion.
Google and Meta may use cookies, or similar technology, to recognise that your browser has visited our website. That lets us show you our ads later on their platforms and partner websites. We may also ask them to show our ads to people with similar interests to our visitors. We see only the size and performance of these audiences. We are not told who is in them.
We may upload the email addresses or phone numbers of people who have enquired with us or are customers to Google Ads or Meta. We do this to:
Before the details are sent, they are hashed, which means they are turned into a scrambled code. The platforms use the code only to match it against their own account holders, under their advertising terms. If you ask us not to include you, we will exclude your details from future uploads.
Google and Meta also collect information under their own privacy policies, which explain how they use it.
Our marketing agency uses AI tools from Anthropic to help manage enquiries. These tools:
AI is not used to decide whether we quote for your job, what we charge, or whether we offer anyone employment. Those decisions are made by people. Anthropic processes this information on our agency’s behalf under commercial terms which, at the date of this policy, do not allow it to be used to train Anthropic’s AI models.
Some of the providers listed in section 3 store or process information outside Australia, mainly in the United States and the European Union. Before disclosing information overseas, we take reasonable steps to make sure the recipient protects it in a way that is consistent with the Australian Privacy Principles. We mainly do this by using reputable providers with appropriate security and privacy commitments. By submitting information to us, you acknowledge that it may be handled this way.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include:
No online system is completely secure, so we cannot guarantee the security of information sent over the internet.
If a data breach is likely to cause serious harm, we will act promptly to contain it, and notify you and the Office of the Australian Information Commissioner where the law requires.
You can ask for:
Contact us using the details below. We will respond within 30 days. There is no charge for making a request.
In some cases the law allows or requires us to refuse or limit access, or to keep records. For example, we must keep job and tax records for set periods. If we refuse a request, we will tell you why.
You can browse our website and ask general questions without identifying yourself. To quote for or carry out work, we need your name, contact details and site address.
Our services and website are intended for adults. We do not knowingly collect personal information from anyone under 18, except as part of a job application where the applicant is of working age.
Our website links to other sites and services, such as Facebook, Instagram and Google, and our ads appear on them. We are not responsible for their privacy practices, so please read their privacy policies.
If you have a concern about how we have handled your personal information, please contact us first. We will investigate and respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
We may update this policy when our practices or service providers change, or when the law changes. The current version will always be on this page, with the “Last updated” date at the top.
Privacy Officer, Bella Carpentry
The Trustee for Ursino Family Trust (ABN 28 995 562 727)
76 Edmund Ave, Unley SA 5061
Email: shannon@bellacarpentry.com.au
Phone: 0412 540 269
