Your privacy is important to us. It is Curtain and Blind Co's policy to respect your privacy regarding any information we may collect from you across our website, https://curtainandblindco.com.au/, and other sites we own and operate.

1. Information we collect

Log data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

Device data

We may also collect data about the device you’re using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal information

We may ask for personal information, such as your:

• Name
• Email
• Social media profiles
• Date of birth
• Phone/mobile number
• Home/Mailing address
• Work address
• Website address
• Payment information
  

AI Room Visualiser

Our website offers an AI Room Visualiser that lets you preview our products in a photo of your own room. When you use this tool:

• The photo you upload is sent to a third-party AI image provider (Google, via its Gemini API) to generate your preview. We may also keep your uploaded room photo, together with the previews this tool generates, to help us monitor, troubleshoot and improve the tool. These images are stored securely in private storage.
• Before you subscribe, those images are associated with an anonymous identifier rather than your name, email or contact details. We also keep technical details of the request, such as your browser and device and the city or region your connection appears to come from, but not your IP address. At this stage we do not use any of this to identify you, unless you place an order from a preview (see below).
• If you subscribe to keep previewing. The Visualiser gives you a set number of free previews. Unless you are signed in to your account, we then ask you to subscribe to our marketing emails in order to carry on using the tool. When you subscribe, we store your room photos and previews securely against your email for 12 months, then delete them. Previews you generated earlier on the same device or browser are linked to your email as well.
• What subscribing creates. Your email address is collected by our email provider, Klaviyo, which creates a marketing profile for you and adds you to our mailing list. Klaviyo's connection to our store may also create a customer record for you in Shopify. You can unsubscribe at any time using the link in any email we send you.
• The preview images the tool generates may be retained by us, along with details of the request (such as the style, colour and track you selected, the AI model used and how long it took), so we can monitor, troubleshoot and improve the tool.
• If you go on to order. When you click through from a preview to a product and then place an order, we record which preview you came from against that order. That means the order, and so your name and contact details, can be linked back to the preview and the room photo it came from. We use this only to understand whether the tool helps people choose, and it applies whether or not you have subscribed.
• How we use it. We use your photos and previews only to operate and improve the Visualiser, and to understand whether it helps people choose. They are not sold and are not used in advertising. If you have subscribed, we use your email address to send you the marketing emails you signed up for.
• Third-party processing. Image generation is carried out by Google, so your use of the tool is also subject to Google's applicable privacy terms. We send only the photo needed to create your preview. Your email address is handled by Klaviyo and is not sent to Google.
• Your choices. Using the Visualiser is optional. If you would like a generated preview removed, or have any questions about how this tool handles your images, please contact us using the details in this Privacy Policy.

Previews are a conceptual guide only and the finished product may differ.

Trax, our chat assistant

Our website has a chat assistant called Trax that can answer questions about our products, fabrics, measuring and installation. When you use it:

• What you send. We collect the messages you type, along with any images you choose to attach, and information about the page you were on when you asked. You do not need to give us your name or contact details to use it, and we ask you not to include payment details in chat.
• How your answer is generated. Your messages, your attachments and the page context are sent to Anthropic, which operates the Claude model that writes the replies. To find the right information to answer with, the text of your question is also sent to OpenAI, which converts it into a numeric form we can search our help content with. Neither provider is given your name or contact details by us.
• What we keep. Conversations, including any images you attach, are stored securely for 90 days and then deleted automatically. We keep them so we can review whether the assistant answered correctly and improve it.
• How we use it. We use conversations to check the quality of the answers and to improve our help content. They are not sold, and they are not used to advertise to you.
• If our team gets involved. Some conversations are reviewed by our staff, and a conversation may be recorded against your customer record so we can help you properly if you contact us again.
• Your choices. Using the chat assistant is optional. If you would like a conversation deleted before the 90 days is up, contact us using the details in this policy.

Answers from the chat assistant are a guide. For anything that affects an order, such as a measurement, please check our measuring guides or contact us.

2. Legal bases for processing

We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.

These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:

• it’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
• it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests;
• you give us consent to do so for a specific purpose (for example, you might consent to us sending you our newsletter); or
• we need to process your data to comply with a legal obligation.

Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).

We don’t keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.

3. Collection and use of information

We may collect, hold, use and disclose information for the following purposes and personal information will not be further processed in a manner that is incompatible with these purposes:

• to enable you to customize or personalize your experience of our website;
• to attribute any content (eg. posts and comments) you submit that we publish on our website;
• to process any transactional or ongoing payments;
• to deliver products and/or services to you;
• to enable you to access and use our website, associated applications and associated social media platforms;
• to contact and communicate with you;
• for internal record keeping and administrative purposes;
• for analytics, market research and business development, including to operate and improve our website, associated applications and associated social media platforms;
• to run competitions and/or offer additional benefits to you;
• for advertising and marketing, including to send you promotional information about our products and services and information about third parties that we consider may be of interest to you;
• to comply with our legal obligations and resolve any disputes that we may have; and
• to consider your employment application.

4. Disclosure of personal information to third parties

Our online store and checkout run on Shopify, which holds your order, account and contact details and processes your payment.

A small number of other services receive information that goes beyond ordinary website analytics, either because they handle something you created yourself or because they receive your contact details. We name those here. Where a service is described as receiving information directly from our systems, that means we send it from our own servers rather than from your browser.

Who	What they receive	Why
Google (Gemini API)	Room photos you upload to the AI Room Visualiser	Generating your preview image
Anthropic	Messages you send to our chat assistant, and anything you attach to them	Generating the chat assistant’s replies
OpenAI	The text of questions you ask our chat assistant	Finding the right information to answer your question with
Google (Analytics and Ads)	Pages you view, items you view and buy, and a securely scrambled version of your email address when you place an order. Some of this is sent directly from our systems	Measuring how our website and our advertising perform
Klaviyo	Your email address, pages you view and items you buy	Sending you the marketing emails you signed up for
Hotjar	A recording of how you move through and interact with pages on our site	Understanding where our website is confusing or broken

We also disclose personal information to other categories of service provider:

• Advertising platforms. These receive information about pages you view and items you view and buy, including information sent directly from our systems rather than from your browser, and may use it for their own advertising and measurement purposes as well as ours.
• Review and messaging services, which receive your name, contact details and anything you submit, so we can collect product reviews and send you order and delivery updates.
• Shipping and delivery providers, which receive your name, delivery address and contact details.
• Our manufacturing and accounting systems, which receive your order details and billing information.
• Tools we use internally for order management, reporting and automation, which receive only what is needed for that task.

We may also disclose personal information to our employees, contractors and related entities; to sponsors or promoters of any competition we run; to credit reporting agencies, courts, tribunals and regulatory authorities in the event you fail to pay for goods or services we have provided to you; and to courts, tribunals, regulatory authorities and law enforcement officers as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.

Some of the systems that hold your information are our own

Our CRM and helpdesk, and our manufacturing system, run on our own servers at our premises rather than with an outside provider. When you email us for help, your message and our reply are stored there.

5. International transfers of personal information

The personal information we collect is stored and processed in Australia, or where we or our partners, affiliates and third-party providers maintain facilities. By providing us with your personal information, you consent to the disclosure to these overseas third parties.

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means.

Where we transfer personal information from a non-EEA country to another country, you acknowledge that third parties in other jurisdictions may not be subject to similar data protection laws to the ones in our jurisdiction. There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in our jurisdiction and this might mean that you will not be able to seek redress under our jurisdiction’s privacy laws.

6. Your rights and controlling your personal information

Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy. If you are under 16 years of age, you must have, and warrant to the extent permitted by law to us, that you have your parent or legal guardian’s permission to access and use the website and they (your parents or guardian) have consented to you providing us with your personal information. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.

Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.

Notification of data breaches: We will comply laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Unsubscribe: To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.

7. Cookies

We use cookies and similar technologies to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified, and helps us and the services described in section 4 measure how our website and our advertising are performing.

You can control or delete cookies through your browser settings. Please note that some of the information described in section 4 is sent from our own servers rather than from your browser, so changing your browser settings will not always prevent it.

8. Business transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.

9. Limits of our policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

10. Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your personal information, we will ask you to re-consent to the amended privacy policy.

Curtain and Blind Co Data Controller
Elliott Woolf
elliott@curtainandblindco.com.au

Curtain and Blind Co Data Protection Officer
Elliott Woolf
elliott@curtainandblindco.com.au

This policy is effective as of 11 August 2026.