1. About this policy
Korb Pty Ltd (ABN 26 159 533 454) (“Korb”, “we”, “us”, “our”) is an Australian manufacturer and installer of tactile ground surface indicators, stair nosings, entry matting systems, and architectural metalworks (bollards, bike racks and custom fabrications). We operate from Melbourne (head office), Adelaide and Perth.
We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect through our website (korb.au), how we use it, and your rights in relation to that information.
2. What personal information we collect
The types of personal information we may collect depend on how you interact with us:
Information you provide directly
- Contact enquiries: name, email address, phone number, company name, and the content of your message (via our Contact form)
- Configure & Quote requests: name, email, phone, company, role, project details (location, type, product selections, quantities, dimensions, substrates, installation preferences), and any files you upload (plans, drawings, specifications)
- CPD booking requests: name, email, phone, company, role, number of attendees, preferred format and date
- Product sample requests: name, email, delivery address, company, and product preferences
- Account registration: name, email, and password when you create a login for access to our Specification Suite, standards library, and spec templates
Information collected automatically
- Server logs: your IP address, browser type, operating system, referring URL, pages visited, and timestamps. These logs are retained for security and performance monitoring.
- Cookies: our website uses session cookies essential for website functionality (login sessions, shopping cart state). We do not currently use third-party advertising or analytics cookies. If we introduce analytics tracking in future, this policy will be updated accordingly.
3. How we use your personal information
We collect and use personal information for the following purposes:
- Responding to your enquiries about our tactile indicator, stair nosing, entry matting, and metalworks products
- Preparing and delivering project quotations for supply-only and supply-and-install orders
- Managing your account in our customer relationship management (CRM) system for ongoing project coordination
- Processing and fulfilling orders, including coordinating delivery and installation scheduling
- Arranging site inspections prior to installation of tactile indicators, stair nosings, or matting systems
- Booking and delivering Continuing Professional Development (CPD) presentations
- Sending product samples and technical documentation
- Providing access to our Specification Suite, LRV Calculator, and spec template library
- Communicating about your projects, order status, delivery scheduling, and installation timelines
- Marketing communications about new products, compliance updates, or industry news (only with your consent, and you may opt out at any time)
- Improving our website and services
- Complying with legal obligations
4. Legal basis for collection
We collect personal information where it is reasonably necessary for one or more of our business functions or activities, as permitted under Australian Privacy Principle 3. We will not collect personal information unless it is reasonably necessary for our dealings with you.
Where we collect sensitive information (which we generally do not require), we will obtain your consent.
5. Disclosure to third parties
We may share your personal information with the following categories of third parties, solely for the purposes described in this policy:
- Hosting provider: our website and business systems are hosted on Hetzner Cloud infrastructure located in Singapore. Hetzner provides the server infrastructure only and does not access your data.
- Email delivery: transactional emails (enquiry confirmations, quote notifications) are sent via Amazon Simple Email Service (SES). Amazon processes email delivery data in accordance with their privacy practices.
- Business systems: we use Odoo ERP software (self-hosted on our own server) to manage customer relationships, quotations, orders, and project coordination. Your data remains on our server and is not shared with Odoo S.A.
- Freight and logistics partners: if you place an order for delivery, we share your delivery name and address with our freight partners to fulfil the shipment.
- Installation subcontractors: for supply-and-install projects, we may share site addresses and project contact details with our installation teams.
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
We will not disclose your personal information to overseas recipients except as described above (Hetzner Singapore for hosting, Amazon SES for email delivery). In each case, we take reasonable steps to ensure the recipient handles your information consistently with the APPs.
6. Data storage and security
Your personal information is stored on our self-managed server infrastructure hosted by Hetzner Cloud in Singapore. We implement appropriate technical and organisational measures to protect your information, including:
- Encrypted connections (TLS/SSL) for all website traffic
- Firewall-restricted server access
- Role-based access controls within our business systems
- Regular security updates and system monitoring
While we take reasonable steps to protect your information, no method of transmission over the internet or method of electronic storage is completely secure.
7. Cookies and tracking
Our website uses the following cookies:
- Session cookies: essential for website functionality, including maintaining your login session and shopping cart. These expire when you close your browser or after a period of inactivity.
- Odoo session cookie (session_id): identifies your browsing session for the website platform.
We do not currently use Google Analytics or any third-party tracking, advertising, or remarketing cookies. If we introduce analytics or tracking tools in the future, we will update this policy and provide appropriate notice.
You can control cookies through your browser settings. Disabling session cookies may affect website functionality, particularly login and cart features.
8. Data retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Enquiry and quote data: retained in our CRM for the duration of your business relationship with us, and for a reasonable period thereafter to support warranty claims and project records
- Order and invoice records: retained for a minimum of 7 years as required by Australian tax law
- Server logs: retained for up to 12 months for security and performance analysis
- Account data: retained for as long as your account remains active, or until you request deletion
When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it.
9. Your rights under the Australian Privacy Principles
Under the APPs, you have the right to:
- Access the personal information we hold about you. You can request a copy of your information by contacting us.
- Correction: request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
- Deletion: request that we delete your personal information where it is no longer needed for the purposes for which it was collected (subject to any legal obligations requiring us to retain it).
- Opt out of marketing: you can unsubscribe from marketing communications at any time by contacting us or using the unsubscribe mechanism in any marketing email.
We will respond to access and correction requests within 30 days. We do not charge a fee for making a request or for making corrections.
10. How to make a privacy complaint
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us:
- Contact Korb first: send your complaint to our Privacy Officer at info@korb.au or write to us at 17 Anderson Road, Thornbury VIC 3071. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.
- Escalate to the OAIC: if you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The updated policy will be published on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
12. Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:
Configure & Quote ↗