Privacy policy.

1. Information we collect

We collect the information you give us in our forms or while discussing your job. It can include your name, phone number, email address, selected service, preferred appointment date and time, messages, vehicle details and registration, or property address and window details. Job and invoice records may also include business or billing details, film or finish selections and photos supplied or taken to document the work.

We keep request references, booking and payment status, invoices, refund records and marketing preferences. When you opt into marketing, we record your consent choice, its source and time. Technical details, including your IP address and request activity, are used to protect forms and accounts against spam and abuse. Please do not include card numbers, passwords or unnecessary sensitive information in a message.

2. How we use your information

We use your details to answer enquiries, prepare quotes, confirm and manage appointments, carry out the agreed work, record payments and invoices, provide aftercare and handle concerns or refunds. Booking and service messages are separate from optional marketing. Sending a booking request does not subscribe you to our newsletter.

Photos held with your job are used to document the work. Booking with us does not give automatic permission to identify you in marketing. If we want to use identifiable photos from your job for promotion, we’ll ask for permission separately.

3. Stripe and payment information

When online deposit checkout is available, Stripe handles payment on its hosted checkout. We send your booking email address, service description, deposit amount and booking reference to create the checkout. Stripe collects the payment details you enter and may also collect device and transaction information under its own policy.

Our booking system records payment references, amounts, status and refunds to reconcile your invoice. It does not collect or store your full card number or security code. Stripe may process information in the United States, India and other countries where it or its providers operate. See Stripe’s privacy policy for its payment, security and international processing practices.

4. Newsletter and marketing choices

Marketing is optional. Joining the newsletter or selecting the separate marketing checkbox gives permission for Wally’s news and offers by email. Leaving it unchecked does not affect your service request.Lavendrmail, operated by Lavendr Collective, handles our website notifications and mailing-list preferences.

Lavendrmail receives the contact and consent details needed to manage Wally’s mailing list and communications. You can withdraw marketing consent at any time through the unsubscribe option in a marketing email or by contacting us. We’ll honour unsubscribe requests within five working days. This does not prevent messages needed to manage an existing booking, invoice or service concern.

5. Who can access your information

Information is available to authorised staff and service providers where needed to operate the website, manage jobs, support the booking system or process payments. We do not sell your personal information or give it to other businesses for their own marketing. We may disclose records where required or permitted by law, including to handle a payment dispute or protect against fraud.

Form, booking and administration records are stored in a private database on our virtual private server. Cloudflare routes and protects the public website and may process network details, including IP addresses, through its global network. When our Lavendrmail connection is active, it also processes the contact preferences and messages needed for our communications. We’ll update this policy when hosting or communication providers change, including relevant overseas processing locations.

6. Browser storage and external websites

The booking page uses your browser tab’s session storage to keep a private booking-access token so you can return from checkout and check your request. Keep booking access links private. Administration sign-in uses essential session and security cookies. You can clear browser storage, but this may remove access to your saved booking view.

This website does not currently use advertising pixels, third-party analytics or embedded social tracking widgets. Google Maps, Instagram and Facebook are external links. Those services, and Stripe checkout, handle information and cookies under their own policies when you visit them.

7. Storage and retention

Access controls are used to protect administration and job records. How long we need a record depends on the service, accounting requirements and any ongoing query or dispute. There is no automatic deletion period for every record. Financial records and evidence of consent may need to be retained even after a booking is cancelled or you unsubscribe. We cannot guarantee that any storage or transmission method is completely secure.

8. Access, corrections and privacy concerns

Contact us to request access to, correction of or deletion of your personal information, or to raise a privacy concern. We may need to verify your identity before releasing or changing records. We’ll explain if legal or record-keeping obligations prevent a requested deletion and discuss what can be done.

Email [email protected], call 0416 402 004 or write to Wally’s Tinting, 14 Gartmore Avenue, Bankstown NSW 2200. We’ll review your concern and respond within a reasonable time. If it remains unresolved, the Office of the Australian Information Commissioner provides information about privacy complaints and whether it can consider yours.

For appointment changes and deposit questions, read our booking terms.