Legal
Privacy policy
Last updated 20 October 2026.
The short version
- We are CAOBA PTY LTD (ACN 630 386 079), a commercial fit-out and installation business in Sydney.
- We collect the details you send us, the work contact details of people at businesses we think need our services, and how people use this website.
- We use them to answer enquiries, quote and deliver projects, run our business, and tell businesses about our services.
- We do not sell personal information.
- Every marketing email we send has an unsubscribe link, and we stop within 5 working days.
- Some of the services we use store data outside Australia, mainly in the United States.
- You can ask to see, correct or delete what we hold about you by emailing info@caoba.com.au.
Who we are and what this policy covers
CAOBA PTY LTD (ACN 630 386 079) trades as Caoba. In this policy, “we” and “us” mean CAOBA PTY LTD. We are based in Sydney, NSW.
This policy covers personal information we handle through this website (caoba.com.au), our emails, our pages on LinkedIn and other social networks, our advertising, and our work with clients, suppliers and the businesses we contact. It explains how we follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).
Caoba French Polish has its own website and its own privacy policy.
What we collect
What we collect depends on how you deal with us.
- If you send an enquiry or become a client: your name, company, job title, email, phone number, the site address or suburb, and the details of the project. You can also send photos or drawings. When we deliver a project we also keep site contacts, access instructions, quotes, invoices and payment records.
- If you work at a business we contact: your name, job title, company, work email, work phone number, the location of your office, your LinkedIn profile address, and information your company publishes about its projects.
- If you are a supplier or subcontractor: the contact details of the people we deal with, and the details we need to pay you, such as your ABN and bank account for invoices.
- If you apply for a job: your contact details, your résumé, your experience and anything else you choose to send.
- If you visit this website: the pages you view, the site that sent you, your approximate location (city level), your device and browser, and whether you sent the quote form. We collect this with cookies, described below.
- If you contact us on social media: your name, your public profile, and the messages and comments you send.
We do not ask for sensitive information, such as health information, racial or ethnic origin, religious or political beliefs, or criminal records. Please do not send it to us. If we receive personal information we did not ask for and do not need, we delete it.
How we collect it
- From you: when you use the quote form, email us, call us, meet us, message us on social media, or send a lead form on Facebook, Instagram or LinkedIn.
- From public and business sources: company websites, LinkedIn, business directories, industry association member lists and government supplier lists.
- From business data providers: we buy work contact details (name, job title, company and work email) from providers that compile them for business-to-business marketing. We check that the email addresses work before we use them.
- From people you work with: for example, when a builder or project manager gives us the contact details of a site contact on a project.
- Automatically: through cookies and similar technology on this website.
If we record a video meeting, we tell you at the start, and we may use a transcription service to turn the recording into text.
What we use it for
- To answer your enquiry, prepare quotes and plan your project.
- To deliver the work: scheduling installers and vehicles, coordinating access with site contacts, storing your goods, and handing over.
- To invoice, take payments and keep business records.
- To tell businesses about our services by email and on LinkedIn (see Marketing emails).
- To see how this website is used and whether our advertising works, so we can improve both.
- To consider job applications.
- To meet our legal obligations, such as tax and company record-keeping, and to deal with disputes and warranty claims.
We only use your information for another purpose if you would reasonably expect it, if you agree, or if the law requires or allows it.
Dealing with us without giving your name
You can read this website without telling us who you are. To answer an enquiry, quote or do a job we need at least a name and a way to contact you, so we cannot do those anonymously.
Marketing emails
We send emails about our services to people at businesses that we think need them, such as fit-out contractors, furniture suppliers, builders and facilities managers. We send them to work addresses, about the recipient’s work, and only where the Spam Act 2003 allows: when you have agreed, or when your work address is published or was given to us for business contact and our message is relevant to your role.
- Every marketing email says who it is from, how to contact us, and has a way to unsubscribe.
- When you unsubscribe or ask us to stop, we stop within 5 working days. We keep your email address on a do-not-contact list so that we do not email you again.
- You can ask us where we got your details, and we will tell you.
- We do not sell, rent or trade your personal information.
Software, AI and automated decisions
We use software, including artificial intelligence services, to help us do our work: to draft replies to enquiries and emails, summarise and sort enquiries, transcribe recorded meetings, research companies we might work with, and choose which businesses to contact. These tools use the personal information described above, such as names, job titles, work contact details, company information, and what you write to us.
A person at Caoba reviews and decides. We do not use computer programs to make decisions that could significantly affect your rights or interests, such as decisions about a contract with you, your employment, prices you pay, or access to our services.
Information sent outside Australia
Some of the service providers above store or process information outside Australia. It is likely to be disclosed to recipients in the United States, where our website host, our business database and most of our software providers keep their data, and in Ireland, where LinkedIn handles data for members outside the United States. Google may also store data in its data centres in other countries.
We use established providers and their contract terms to protect this information. The laws of those countries may give you less protection than Australian law.
How we keep it safe
We keep personal information in online business systems, not on paper. We limit access to the people at Caoba who need it, protect accounts with passwords and, where the service offers it, two-step verification, and use services that encrypt information when it travels over the internet.
If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
How long we keep it
- Clients: quotes, project records, invoices and payments for 7 years after the project ends, because tax and company law require us to keep business records.
- Enquiries that do not go ahead: up to 24 months, in case you come back to us.
- Business contacts we email: until 24 months after our last contact, unless you become a client. If you ask us to stop, we keep only your email address on our do-not-contact list.
- Job applications: 12 months.
- Website analytics: 14 months.
When we no longer need information, we delete it or make it anonymous.
Seeing, correcting or deleting your information
Email info@caoba.com.au to ask for a copy of the personal information we hold about you, to correct it, or to delete it. We will check who you are before we answer, reply within 30 days, and not charge you. If we cannot give you access or make a correction, for example because the law requires us to keep a record, we will tell you why in writing.
Complaints
If you think we have mishandled your personal information, email info@caoba.com.au and tell us what happened. We will confirm we received it within 5 working days, look into it, and give you our answer within 30 days.
If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, phone 1300 363 992.
Children
Our services are for businesses. This website is not directed at children, and we do not knowingly collect personal information from anyone under 18.
Changes to this policy
When we change how we handle personal information, we update this page and the date at the top. The version on this page is always the current one.
Contact us
CAOBA PTY LTD (ACN 630 386 079)
Sydney, NSW, Australia
Email: info@caoba.com.au
Facebook, Instagram and LinkedIn
Lead forms
Some of our ads on Facebook, Instagram and LinkedIn have a form you can fill in without leaving the app. When you send one, the platform gives us what is in the form, usually your name, work email, phone number, company, job title and your answers, plus which ad you responded to. LinkedIn may fill in some of these fields from your profile; you can change them before you send. We use these details the same way as an enquiry sent through this website. Meta and LinkedIn also handle this information under their own policies: the Meta Privacy Policy and the LinkedIn Privacy Policy.
Audiences
We do not upload client or contact lists to Meta or LinkedIn to target ads. If we start, we will update this policy first.
Our pages
When you follow, comment on or message our pages, we see your public profile and what you send. The platforms give us statistics about our pages, such as how many people saw a post, as totals that do not identify anyone.