Privacy Policy

Last updated 31 July 2026

HEXFORGE INDUSTRIES PRIVACY POLICY

Effective date: 31ST July, 2026
Last updated: 31st July, 2026

1. About this Privacy Policy

This Privacy Policy explains how Hexforge Industries collects, holds, uses, discloses, protects and otherwise manages personal information.

In this Privacy Policy:

  • Hexforge Industries, Hexforge, we, us and our mean KRISTOPHER JON OPFERKUCH, trading as Hexforge Industries, ABN 90 347 737 312.
  • Website means www.hexforge.com.au, any Hexforge Industries subdomain, customer portal, online store or other website operated by us.
  • Services includes design, 3D printing, fabrication, modelling, miniature painting, custom furniture work, repairs, alterations, digital services, consulting and any other products or services supplied by us.
  • Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

This Policy applies to information collected through our Website, online store, social media accounts, email, telephone, order forms, quotation processes, customer portals and direct dealings with us.

2. Our commitment to privacy

We take reasonable steps to handle personal information responsibly, transparently and securely.

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to us, we will comply with those requirements. Where they do not legally apply, we will endeavour to follow equivalent privacy practices as a matter of good business practice.

We do not sell or rent customer contact lists or personal information to third-party marketers.

3. Personal information we may collect

Depending on how you interact with us, we may collect:

3.1 Identity and contact information

This may include your:

  • name;
  • business or organisation name;
  • billing and delivery address;
  • email address;
  • telephone number;
  • social media username;
  • customer account details; and
  • contact preferences.

3.2 Order and transaction information

This may include:

  • products and services requested or purchased;
  • quotations, invoices, payment status and transaction records;
  • shipping and collection details;
  • project requirements;
  • measurements, dimensions, plans and specifications;
  • material, colour and finish selections;
  • design approvals;
  • revision history;
  • warranty, return and complaint records; and
  • correspondence about your order.

3.3 Payment information

Payments may be processed by banks, payment gateways or other payment service providers.

We may receive limited payment-related information, such as:

  • transaction references;
  • payment confirmation;
  • payment method;
  • the final digits of a payment card; and
  • billing status.

We do not intend to store complete credit or debit card numbers unless this is expressly required for a particular payment service and handled using appropriate security controls.

3.4 Project files and customer-supplied content

For custom work, we may collect:

  • photographs;
  • drawings;
  • CAD files;
  • 3D models;
  • logos and branding;
  • artwork;
  • reference images;
  • floorplans;
  • measurements;
  • written instructions;
  • technical information; and
  • other files required to assess or complete the project.

These materials may contain personal information about you or another person.

You must obtain any necessary authority before providing us with personal information about another person.

3.5 Website and technical information

When you use our Website, we or our service providers may collect:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • referring website;
  • pages viewed;
  • date and time of access;
  • session information;
  • approximate geographic region;
  • cookie identifiers;
  • account login activity; and
  • diagnostic, performance and security information.

3.6 Communications and enquiries

We may retain:

  • emails;
  • telephone notes;
  • website enquiry submissions;
  • live-chat messages;
  • social media messages;
  • feedback;
  • reviews;
  • survey responses; and
  • records of complaints or disputes.

3.7 Marketing information

Where permitted, we may collect information about:

  • marketing consent;
  • newsletter subscriptions;
  • campaign engagement;
  • promotional preferences;
  • competitions or events entered; and
  • whether you have unsubscribed from marketing.

3.8 Sensitive information

We do not generally require sensitive information.

Where sensitive information is reasonably necessary for a particular purpose, we will seek appropriate consent or rely on another lawful basis before collecting it.

Do not provide health, identification, financial or other sensitive information unless it is genuinely required and we have asked you to provide it.

4. How we collect personal information

We may collect personal information:

  • directly from you;
  • through our Website or online store;
  • when you request a quote;
  • when you place or pay for an order;
  • when you create an account;
  • when you contact us;
  • during project consultations;
  • through social media platforms;
  • from someone authorised to act for you;
  • from payment processors;
  • from delivery and courier providers;
  • from business partners or service providers;
  • from publicly available sources; and
  • through cookies, analytics and similar technologies.

Where practicable, we will collect personal information directly from you.

5. Why we collect and use personal information

We may use personal information to:

  • respond to enquiries;
  • prepare estimates and quotations;
  • assess whether a project is technically and commercially feasible;
  • process orders and payments;
  • design, manufacture and supply products;
  • perform services;
  • obtain customer approval for designs or specifications;
  • arrange delivery, collection or installation;
  • communicate project and order updates;
  • provide customer service;
  • process returns, refunds, repairs and warranty claims;
  • manage accounts, invoices and debts;
  • maintain business and taxation records;
  • improve our products, services and Website;
  • conduct quality control and internal analysis;
  • prevent fraud, misuse and security incidents;
  • protect our legal rights and property;
  • manage complaints and disputes;
  • comply with legal and regulatory requirements;
  • send marketing communications where permitted;
  • administer events, promotions or competitions; and
  • consider applications from suppliers, contractors or prospective employees.

We may use de-identified or aggregated information for analytics, planning, product development and business improvement.

6. Consequences of not providing information

You may interact with parts of our Website anonymously or using a pseudonym where practical.

However, we may be unable to provide a quotation, accept an order, deliver a product, perform a service or address a warranty claim without accurate identifying, contact, project and transaction information.

7. Cookies and similar technologies

Our Website may use cookies, pixels, local storage and similar technologies to:

  • operate Website functions;
  • remember preferences;
  • maintain login sessions;
  • process shopping carts;
  • measure Website traffic;
  • diagnose technical issues;
  • improve Website performance;
  • prevent fraud;
  • understand how visitors use the Website; and
  • support advertising or remarketing where permitted.

Some cookies are necessary for the Website to operate. Other cookies may be optional.

You may be able to disable cookies through your browser or any cookie controls provided on the Website. Disabling cookies may prevent some features from operating correctly.

Third-party analytics, payment, social media and advertising providers may use their own cookies or tracking technologies. Their handling of information is governed by their own privacy policies.

8. Direct marketing

We may send you information about Hexforge Industries products, services, promotions, events or business updates where:

  • you have consented;
  • consent may reasonably be inferred;
  • the communication is otherwise permitted by law; or
  • the message is a non-marketing service communication relating to an existing order or account.

Marketing communications will identify the sender and provide a method for unsubscribing where required.

You may unsubscribe at any time using the link or instructions in the communication or by contacting us. Unsubscribing from marketing will not prevent us from sending essential transactional communications relating to an order, payment, warranty claim, account or legal matter.

We will not automatically treat a one-off enquiry or purchase as unlimited permission to send unrelated marketing.

9. Disclosure of personal information

We may disclose personal information where reasonably necessary to:

  • employees and authorised contractors;
  • manufacturers and material suppliers;
  • delivery, postal and courier providers;
  • payment processors and financial institutions;
  • website hosting and cloud service providers;
  • software, email and communications providers;
  • customer relationship and accounting platforms;
  • IT support and cybersecurity providers;
  • analytics and marketing service providers;
  • professional advisers, including accountants, insurers and lawyers;
  • debt recovery providers;
  • government agencies, regulators and law enforcement authorities;
  • a prospective purchaser or successor in connection with a genuine business sale, restructure or transfer; and
  • other parties with your consent or as authorised or required by law.

We will endeavour to disclose only the information reasonably necessary for the relevant purpose.

Service providers may only use information for their contracted purpose, subject to their own legal obligations and service terms.

10. Overseas disclosure and storage

Some technology, cloud, payment, communications, analytics or software providers may process or store information outside Australia.

The countries in which personal information is likely to be processed or stored may include:

Australia, Belgium, Canada, Cayman Islands, Colombia, France, Germany, India, Ireland, Japan, Luxembourg, Malaysia, Netherlands, Philippines, Singapore, Switzerland, Ukraine, United Kingdom and United States.

Because cloud infrastructure and service-provider locations may change, it may not always be practicable to identify every country in advance.

Where applicable, we will take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.

11. Social media and third-party platforms

When you interact with us through Facebook, Instagram or another third-party platform, that platform may collect and process information independently of us.

Information posted publicly may be visible to other users and may be copied, shared or indexed outside our control.

Do not post confidential project information, payment information or sensitive personal information in public comments.

12. Photographs and portfolio material

We may photograph completed work for quality-control and recordkeeping purposes.

We will seek appropriate permission before publicly using identifiable customer information, private premises, confidential designs or customer-supplied materials in:

  • our portfolio;
  • advertising;
  • social media;
  • case studies; or
  • promotional content.

Where a completed product does not identify the customer or disclose confidential information, we may request permission to display it as an example of our workmanship.

You may request that a project remain confidential before work begins.

13. Security

We use reasonable administrative, physical and technical safeguards appropriate to the nature of the information we hold.

These may include:

  • access controls;
  • password protection;
  • multi-factor authentication where available;
  • encryption in transit;
  • system updates;
  • backups;
  • malware protection;
  • staff and contractor access restrictions;
  • secure disposal practices; and
  • monitoring for unauthorised access.

No internet transmission, cloud service or electronic storage system is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and notifying us promptly if you suspect unauthorised access.

14. Data breaches

Where we become aware of a suspected data breach, we will assess the incident and take reasonable steps to:

  • contain the breach;
  • reduce potential harm;
  • investigate its cause;
  • improve security controls; and
  • notify affected individuals and regulators where legally required.

15. Retention and deletion

We retain personal information only for as long as reasonably necessary for:

  • the purpose for which it was collected;
  • completing projects;
  • maintaining warranty and transaction records;
  • legal, accounting, taxation and insurance requirements;
  • resolving disputes;
  • enforcing agreements; and
  • legitimate business recordkeeping.

Information that is no longer required may be securely deleted, destroyed or de-identified.

Backup copies may remain for a limited period until they are overwritten through ordinary backup processes.

We do not guarantee indefinite retention of customer-supplied project files. Customers should maintain their own copies of all important files.

16. Access and correction

You may request access to personal information we hold about you or ask us to correct inaccurate, incomplete or outdated information.

We may require reasonable proof of identity before processing a request.

In some circumstances, access may be refused or limited where permitted by law, including where access would:

  • unreasonably affect another person’s privacy;
  • disclose confidential commercial information;
  • prejudice an investigation;
  • be unlawful; or
  • reveal legally privileged material.

Where appropriate, we will explain a refusal and available complaint options.

17. Privacy complaints

Privacy enquiries, access requests and complaints should be submitted using the contact details below.

Please include:

  • your name and contact details;
  • details of the issue;
  • relevant dates;
  • any supporting documents; and
  • the outcome you are seeking.

We will acknowledge and investigate complaints within a reasonable time.

Where the Privacy Act applies and you are dissatisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner.

18. Children and young people

Our Website and Services are not specifically directed at children.

A person under 18 should not place an order or provide payment information without the involvement and permission of a parent or legal guardian.

Where we become aware that personal information has been submitted by a child without appropriate authority, we may delete it where reasonably practicable.

19. Third-party websites

Our Website may contain links to third-party websites.

We do not control and are not responsible for the privacy, content or security practices of third parties. You should review the privacy policy of any third-party website before providing personal information.

20. Changes to this Policy

We may update this Privacy Policy to reflect changes to our operations, technology, service providers or legal obligations.

The current version will be published on our Website with its effective date.

Material changes will not be applied retrospectively in a manner that unlawfully reduces your rights.

21. Contact details

Hexforge Industries
Legal entity: KRISTOPHER JON OPFERKUCH
ABN: 90 347 737 312
Address: 2L Torwood Rd, Dubbo, NSW  AUSTRALIA 2830
Email: admin@hexforge.com.au
Telephone: +61435 833 788
Website: www.hexforge.com.au