Stanton Dahl Architects (“we”, “us” or “our””) offer architectural design services to bring about honour, wellbeing and dignity through the design, creation, research and interpretation of space in the service of people. We operate the Stanton Dahl Architects website found at https://stantondahl.com.au/ (the Website).

At Stanton Dahl Architects we are committed to protecting the privacy of our customers and other individuals we interact with.

This privacy policy (Privacy Policy) explains how we will collect, use, disclose, store, and protect Personal Information collected from you (this includes for our customers, website visitors, contractors, suppliers and our staff). This Privacy Policy also describes the way in which you may access or correct your Personal Information that we hold, and how to contact us if you have any complaints in relation to your privacy.

We will handle your Personal Information in a manner consistent with the Privacy Act 1988 (Cth) (Privacy Act) and its Australian Privacy Principles (APPs).

What is personal information?

Personal Information includes information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an identified or reasonably identifiable individual. For example, this may include your name, age, gender, and contact details.

This Privacy Policy does not apply to the collection, holding, use or disclosure of Personal Information that is an employee record. An employee record is a record of Personal Information relating to the employment of an employee. This includes information about the employee that relates to their (but is not limited to):

• health;
• training;
• disciplining;
• resignation;
• termination; and

terms and conditions of employment.

What kinds of personal information do we collect and hold?

We collect Personal Information that is reasonably necessary for one or more of our business functions or activities. The type of information that we collect and hold may depend on the relationship you have with us. For example, if you:

• are a candidate seeking employment with us, we may collect and hold information including your name, address, email address, contact telephone number, gender, age, employment history, references, resume, medical history, emergency contact, taxation details, qualifications and payment details;
• are a referee of a candidate being considered for employment, we collect and hold information including your name, contact details, current employment information and professional opinion of the candidate.
• are or may become a customer (including where you make an enquiry via our website or otherwise seek to engage us), we may collect and hold information including your name, address, email address, contact telephone number, banking details, payment information, any information you voluntarily share with us, participant and information in market surveys or opinion polls. We may also hold information related to your browser, operating system, device model, IP address, connection time, cookies and other identifiers;
• seek marketing information from us, we may collect and hold your contact details, marketing preferences (such as whether you wish to receive communications from us), direct marketing consents, browser, operating system, device model, IP address, connection time, cookies, data we receive from third parties that completements the data we process, identifiers and any other analytics information;
• contact us (including a video meeting with us), we may collect and hold call recordings (when you contact our service), your responses to any surveys, CCTV recordings ;
• have connected to our website, social media channel or other service using your social media profile, we may collect and hold public information available on that profile;
• make any sort of payment or purchase with us, we may collect and hold information about your purchases, payment methods, billing details, deliveries, returns, claims and reservations;
• are a supplier, we collect and hold information including your name, address, email address, contact telephone number, business records, billing information, information about goods and services supplied by you.

How do we collect and hold information?

We will collect your Personal Information when you:

• visit our website;
• interact with us such as:
  • attend an interview with us;
  • provide any information to us;
  • communicate with us via telephone, email or video conference;
• apply for an employment position with us;
• engage us to provide architectural and consulting services;
• subscribe to our newsletter;
• contact us via our website or otherwise by email or similar;
• communicate with us through our customer service or social media channels;
• share, publish, comment or otherwise engage with content on our social media channels;
• agree to receive marketing or newsletter communications from us; and
• provide any billing or payment information to us during the course of us providing our goods and services to you.

We may also  gather information from publicly available resources including ASIC, social media and other publicly available databases.

We collect much of the data directly from you when you visit our website or when we provide our services to you. We may also collect and process data on you in connection with your use of our website or other services. In addition, we may use public registers or update services to collect and process address and status information.

When you enquire about, contact us, sign up to our newsletters, acquire or enlist for any of our goods or services, we collect the Personal Information that you give us such as your name, your telephone number, your address and email address, and your date of birth. We do this so that we can provide you with our goods or services. We also keep Personal Information so that we can respond to queries.

You are not required to disclose your Personal Information to us. However, if you do not provide the information requested, you may not be able to receive the full benefit of our Website and services.

Why do we collect personal information and our use and disclosure of personal information

We collect, use and disclose Personal Information for our business functions and activities, including for:

• providing our architectural and consulting services;
• performance of a contract;
• Stanton Dahl’s and Associates legitimate interest in (conducting our company’s business);
• engaging third parties, including consultants, contractors and suppliers; and
• to comply with our legal and regulatory obligations under the Privacy Act.

We may also, from time to time, use and disclose some of your Personal Information for other purposes such as:

• to verify your information and identity, perform know your customer and credit checks (if we require) and to protect against fraud and other unlawful activities;
• to detect and prevent abuse of our services;
• to continually improve our goods and services and the relevance of our marketing materials;
• for developing, marketing and supplying our goods and services;
• to fulfil our reporting obligations to any relevant tax and regulatory bodies; and
• to share certain information with relevant third parties in order to provide goods and services and marketing messages.

We disclose Personal Information for any of the purposes for which it is collected, or where we are compelled by law. Disclosure will usually be for internal purposes and to related entities or to third parties such as contracted service suppliers.

We use external service providers in the processing of your Personal Information. These may include IT and software providers who provide operations databased and customer relationship management functions for us (eg: Microsoft, Zoho).

Where we do so, we oblige such service providers contractually to ensure a sufficient level of data security to protect your Personal Information and to comply with applicable laws. These service providers may act as processors of Personal Information, in which case we commit them not to use your data for their own purposes, but they may also act as separate controllers, for example with regard to Personal Information required for payment transfers, deliveries, and targeted marketing.

We may also disclose your Personal Information to authorities if we are required by law to do so, for example if it is necessary to prevent or investigate fraud or other illegal activities. We may also disclose your Personal Information to other parties by order of a competent court. In addition, we may disclose your Personal Information in connection with a possible sale of business or other corporate transaction to the buyer of the business or other relevant party related to the transaction.

Certain aspects of our business (including the Website and our payment systems) are integrated with third-party software and systems (third-party vendors) and, to provide the services, we will need to disclose Personal Information to these third-party providers to the limited extent required to enable and support these integrated functions and to support the services. We will endeavour to only disclose Personal Information to third parties with privacy policies in place that are committed to Personal Information security and complying with privacy laws.

We will not otherwise disclose your Personal Information to third parties unless it is consistent with the purpose for which we collected it, you have consented, or we are otherwise permitted or required to do so by law. This may include disclosure of your Personal Information in the following circumstances:

• disclosure to our consultants, contractors and suppliers in order to:
  • develop our goods and services;
  • provide you with the goods and services (including the content making up the services);
  • market our goods and services;
• disclosure to payment providers (see further below);
• disclosure to comply with our legal obligations, including, but not limited to, where we are required to provide information under a subpoena or Court order or other mandatory reporting requirements under law;
• to communicate with the privacy regulator (eg: the Office of the Australian Information Commissioner) if you make a privacy complaint or that body makes an inquiry of us; or
• where this is reasonably necessary for the establishment, exercise or defence of any legal claim.

Where Personal Information is transferred or disclosed to such third parties, their access, storage and use will be subject to their privacy policies. To the full extent permitted at law, we are not liable for any loss, damage or claim arising out of a third party’s access, storage or use of your Personal Information where we have transferred or disclosed the Personal Information to such third party in a manner consistent with this Privacy Policy, we were authorised by you (including express or implicit consent), or by law to provide that third party with your Personal Information.

Direct marketing

From time to time, we use Personal Information to provide you with information about our goods and services that we consider may be of interest to you.

You can opt out of receiving such communications at any time by contacting us using the details below or by using any unsubscribe function provided in the communication.

Will we transfer your personal information overseas?

As a rule of thumb, we generally do not transfer Personal Information overseas however we will do so where our suppliers require it (for instance, our cloud provider has data storage overseas or our payment providers have servers overseas).

In the event that we need to disclose Personal Information overseas, we will comply with the requirements of the Privacy Act when disclosing Personal Information overseas.

We will only disclose your Personal Information overseas if:

• the work for, with or involving you requires it;
• our service providers have platforms or databases based overseas;
• you have provided your prior consent; and
• one or both of the following apply:
  • the receiving person or organisation (such as a supplier described above) is subject to a law, binding scheme or binding contract that provides substantially similar protection to the APPs which you can access and enforce; or
  • if the disclosure is otherwise required or authorised by law.

We will take reasonable steps to ensure that any such recipient of your Personal Information does not breach the APPs.

Keeping of personal information

If we hold Personal Information, and we no longer need the information for any purpose for which the information was used or disclosed, the information is not contained in any Commonwealth record and we are not required by law to retain the information, we will take reasonable steps to destroy the information or to ensure it is de-identified.

Access to personal information

If we hold Personal Information about you, you can request access to that information by putting the request in writing and sending it to the Privacy Officer. We will respond to any request within a reasonable period.

There are certain circumstances in which we will refuse to grant you access to the Personal Information. In such situations we will give you written notice that sets out:

• the reasons for the refusal; and
• the mechanisms available to you to make a complaint.

Correction of personal information

If we hold Personal Information that is inaccurate, out-of-date, incomplete, irrelevant or misleading, we must take reasonable steps to correct the information.

If we hold Personal Information and you make a request in writing addressed to the Privacy Officer to correct the information, we must take reasonable steps to correct the information and we will respond to any request within a reasonable period.

There are certain circumstances in which we can refuse to correct the Personal Information. In such situations we will give you written notice that sets out:

• the reasons for the refusal; and
• the mechanisms available to you to make a complaint.

If we correct Personal Information that we have previously disclosed to a third party and you request us to notify the third party of the correction, we will take reasonable steps to notify the third party unless impracticable or unlawful to do so.

Data breach

We are committed to comply with the ‘notifiable data breach’ scheme under the Privacy Act. A data breach is notifiable to the Office of the Australian Information Commissioner (OAIC) when an ‘eligible data breach’ occurs which is when:

• there is unauthorised access to or unauthorised disclosure of Personal Information, or a loss of Personal Information, that an organisation holds;
• the eligible data breach is likely to result in serious harm to one or more individuals; and
• the organisation has not been able to prevent the likely risk of serious harm of the eligible data breach with remedial action.

An organisation may take remedial steps to prevent the likelihood of serious harm occurring for any affected individuals after a data breach has occurred. In which case, the data breach is not an ‘eligible data breach’.

Where we have reasonable grounds to believe that we have experienced an eligible data breach (and remedial action cannot be used), we will notify affected individuals and the OAIC about the breach in accordance with the Privacy Act.

Our website and cookies

Where you upload information via our Website, including via the “Get in touch today.” enquiry form, by the very act of your upload you consent to us keeping your Personal Information for the purposes of dealing with your inquiries and our supply of goods and services to you.

We also collect data through our use of ‘cookies’, ‘beacons’ and other internet technologies.

Cookies are small data files which are stored on your device’s browser. Cookies are stored in order for your internet browser to navigate a website. Cookies will not identify you, but they do identify your internet service provider, browser type and browsing habits.

A web beacon is a technique used on web pages and emails to unobtrusively check that a user has accessed some content.

We use cookies but not to collect your identifying Personal Information.

They may collect statistical information about your visit to our Website (such as the pages you visit on the Website) in order to remember your preferences and allow you to navigate the Website more easily.

The default setting of most internet browsers is to accept cookies automatically, but you can choose whether to allow cookies through your browser settings. Please note that if you deactivate your cookies, you may have difficulty accessing or using our Website.

We also collect your IP address to create an audit trail of events that take place on our Website, and to track and aggregate non-identifiable information, your referring website addresses, browser type and access times.

Links

If we provide links through our Website to third-party websites, add-ins, plug-ins and applications, those links are provided for convenience and may not remain current or be maintained.

Unless expressly stated by us otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, add-ins, plug-ins or applications, and have no control over or rights in those linked websites, add-ins, plug-ins or applications. The privacy policies that apply to those other websites, add-ins, plug-ins or applications may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites, add-ins, plug-ins or applications.

Complaints

You have a right to complain about the way we handle your Personal Information if you believe we have breached the APPs.

If you wish to make a complaint to us, you should first contact our Privacy Officer in writing. Your complaint will be dealt with in accordance with our complaints procedure and we will provide a response within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the OAIC by submitting an online form at https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us

Privacy Officer Contact Details

You can contact our Privacy Officer in the following ways:

• Telephone number: (02) 8876 5300
• Email: privacy@stantondahl.com.au
• Address: PO Box 833, Epping NSW 1710

Amendments

 We may amend this Privacy Policy from time to time. When we publish the changes, the effective date will change to the effective date on which the changes take place.

Effective as of: 31 August 2026

Last updated: 31 August 2026