1. Introduction 

Canibuild Au Pty Ltd (ACN 642 715 428) (“Canibuild,” “we,” “us,” or “our”) operates the website located at canibuild.com/en-au/ (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect information about visitors and users of the Site, including information collected through tracking technologies we deploy for advertising and analytics purposes. 

This Policy applies only to the Site and not to our subscription platform (app.canibuild.com) or any third-party websites accessible via links from the Site. 

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the “Privacy Act”). The APPs govern the way in which we collect, use, disclose, store, secure, and dispose of your personal information. A copy of the APPs may be obtained from the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. 

By visiting or using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Site. 

2. Information We Collect 

2.1 Information You Provide 

When you interact with forms, contact us, or request access to our services, we may collect: 

• Contact Data: name, company name, email address, phone number, mailing address 

• Demographic Data: postcode, state, industry type 

• Communications: messages, support requests, or feedback you submit to us 

2.2 Information Collected Automatically 

When you visit the Site, we and our third-party partners automatically collect: 

• IP address and approximate geolocation 

• Browser type, version, and operating system 

• Pages visited, time spent, referral URLs, and clickstream data 

• Device identifiers and session information 

This information is collected through cookies, pixels, and similar tracking technologies described in Section 3. 

2.3 Information from Third-Party Advertising Platforms 

When you arrive at our Site via an advertisement, third-party advertising platforms may share click-ID data with us so we can attribute your visit to the relevant campaign. Specifically: 

2.4 Sensitive Information 

“Sensitive information” is defined in the Privacy Act to include information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record, or health information. We do not ordinarily collect sensitive information through the Site. Where we are required and able to do so, we will collect and use your sensitive information only with your consent, where required or authorised by law, or for a directly related secondary purpose where you would reasonably expect such use. 

3. Tracking Technologies & Cookies 

3.1 Technologies We Use 

We use the following tracking technologies on the Site: 

3.2 Cookies We Set 

The following first-party and third-party cookies may be stored in your browser: 

HubSpot and other operational tools may also set session, analytics, functionality, and consent-related cookies, which may include cookies such as hstc, hubspotutk, hssc, hssrc, cf_bm, __cfuvid, and similar cookies depending on the Site configuration. These cookies are used for purposes such as tracking visitors, managing sessions, deduplicating contacts, bot protection, consent management, and Site functionality. The specific cookies used, their purposes, and their retention periods may also be described in our cookie banner or consent management platform. You can review and manage cookies via your browser settings. 

3.3 How We Use Tracking Data 

We use data collected through tracking technologies to: 

• Measure the performance of our advertising campaigns (ad attribution) 

• Build and serve targeted advertising audiences on Meta, Google, and LinkedIn 

• Understand how visitors interact with the Site (analytics) 

• Match website visitors to contact records in our CRM (HubSpot) 

• Improve our marketing, product, and sales operations 

4. How We Use and Share Your Information 

4.1 Our Use of Your Information 

We use the information we collect to: 

• Respond to enquiries and provide information about our services 

• Process and fulfil requests for access to canibuild’s platform 

• Send marketing communications (where you have not opted out, and consistent with the Spam Act 2003 (Cth)) 

• Attribute leads and conversions to the correct advertising channels 

• Improve the Site and our products 

• Carry out billing, debt recovery, and account management activities 

• Comply with legal obligations 

4.2 Sharing with Third Parties 

We share data with the following categories of third parties: 

We do not sell your contact details or financial data for monetary consideration or to data brokers. However, our use of advertising pixels, cookies, and similar tracking technologies may constitute “sale,” “sharing,” or processing for targeted advertising under certain overseas privacy laws (including US state privacy laws). Residents of those jurisdictions may opt out as described in Section 6. We do not share text messaging opt-in data or consent with any third party. 

5. Your Rights Under Australian Privacy Law 

5.1 Access and Correction 

Under APP 12 and APP 13, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond to your request within a reasonable period (ordinarily within 30 days) and may require identification before releasing information. We do not charge a fee to make a request, but we may charge a reasonable administrative fee for providing access where permitted by the Privacy Act. 

We may refuse access or correction in the limited circumstances permitted by the Privacy Act — for example, where granting access would have an unreasonable impact on the privacy of others, where the request is frivolous or vexatious, where granting access would prejudice existing or anticipated legal proceedings, or where access may otherwise be denied or required to be denied under law. 

5.2 Direct Marketing Opt-Out 

Where we use your personal information for direct marketing, you may opt out at any time by following the unsubscribe instructions in any marketing communication or by contacting us at support@canibuild.com. We will honour your opt-out request within a reasonable period in accordance with APP 7 and the Spam Act 2003 (Cth). 

5.3 Complaints 

If you believe we have breached the APPs or this Policy, you may lodge a complaint with our Privacy Officer at support@canibuild.com. We will acknowledge your complaint within a reasonable period and aim to resolve it within 30 days. If you are not satisfied with our response, you may refer your complaint to the OAIC at www.oaic.gov.au or by phone on 1300 363 992. 

6. US State Privacy Rights 

This section addresses consumer rights under CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), TDPSA (Texas), and similar US state laws. It applies only to visitors who are residents of those jurisdictions. 

6.1 Your Rights 

Depending on the US state in which you reside, you may have the following rights regarding your personal information: 

• Right to Know: the categories and specific pieces of personal information we have collected about you 

• Right to Delete: request deletion of personal information, subject to certain exceptions 

• Right to Correct: request correction of inaccurate personal information 

• Right to Opt Out of Sale or Sharing: opt out of the sale or sharing of your personal information for cross-context behavioural advertising (see Section 6.2) 

• Right to Limit Use of Sensitive Personal Information: where applicable 

• Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights 

6.2 Do Not Sell or Share My Personal Information 

Under California law (CCPA/CPRA) and similar US state laws, sharing personal information with third-party advertising platforms (such as Meta, Google, and LinkedIn) for cross-context behavioural advertising may constitute “selling” or “sharing” personal information. 

When you opt out, we will disable the advertising tracking technologies described in Section 3.1 for your browser session and forward your opt-out signal to Meta, Google, LinkedIn, and HubSpot where technically possible. Where required by applicable US state law, we will also honour recognised browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out of the sale or sharing of personal information or processing for targeted advertising. 

This link or privacy choice mechanism may be presented based on your location or other technical settings. Residents of other US states with applicable opt-out rights may still contact us at support@canibuild.com to request that we limit sharing of their data. 

6.3 How to Submit a Request 

To exercise any of the rights described in Section 6.1, you may: 

• Email: support@canibuild.com with the subject “Privacy Request” 

• We will respond to verifiable consumer requests within 45 days, with an option to extend by a further 45 days where reasonably necessary 

• We may need to verify your identity before processing your request 

If we deny your request, you may appeal our decision by emailing support@canibuild.com with the subject line “Privacy Appeal.” We will review and respond to your appeal within the time required by applicable law. If your appeal is denied, we will provide information on how you may contact the applicable state attorney general or privacy regulator, where required by law. 

7. EU, UK, and Quebec Visitors 

If you are visiting this Site from the European Union, United Kingdom, or Quebec, Canada, please note: 

• We do not specifically target visitors from these jurisdictions through this Site. 

If you access this Site from the EU, UK, or Quebec, you will be presented with a consent banner before any non-essential tracking technologies are activated. Tracking tags will not fire until you provide affirmative consent. You may reject non-essential tracking technologies and may withdraw or change your consent at any time through the cookie banner, consent management tool, or other privacy choices mechanism made available on the Site. 

If you believe our data practices affect your rights under GDPR, UK GDPR, or Quebec Law 25, please contact us at support@canibuild.com. 

8. Cross-Border Data Disclosure 

Some of the third parties to whom we disclose personal information are located outside Australia. In particular, we are likely to disclose personal information to recipients located in the United States and Canada, including for the purposes of data hosting and back-up, advertising attribution, and customer relationship management. The advertising platforms and CRM identified in Section 4.2 (Meta, Google, LinkedIn, HubSpot) are primarily based in the United States. 

Before disclosing personal information overseas, we take steps that are reasonable in the circumstances to ensure that the overseas recipient handles your personal information in a manner consistent with the APPs, in accordance with APP 8. 

9. Data Retention 

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Where personal information is held in client records, we ordinarily retain it for a minimum of seven (7) years to meet our legal and recordkeeping obligations. Advertising click IDs stored in cookies persist for up to 365 days from the date of last interaction. You may delete cookies from your browser at any time. When personal information is no longer needed for any lawful purpose, we will take reasonable steps to destroy or de-identify it. 

10. Data Security 

We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorised access, disclosure, alteration, or destruction. Access to personal information is limited to our employees and contractors who specifically need it to carry out their responsibilities, and they are obliged to respect the confidentiality of personal information held by us. We use encryption technology to safeguard payment card data used in electronic transactions. However, no internet transmission or storage system is completely secure. If you believe your information has been compromised, please contact us at support@canibuild.com. 

To help us protect your privacy, you should maintain the secrecy of the user name and password you use to access and use our subscription services, and promptly notify us if your account credentials are lost, stolen, or used without permission. 

11. Notifiable Data Breach Scheme 

If we experience a data breach that is likely to result in serious harm to an individual whose personal information is involved, and we are unable to prevent that likely harm with remedial action, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. 

12. Children’s Privacy 

The Site is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at support@canibuild.com and we will promptly delete it. 

13. Phone & Text Message Communications 

By engaging with canibuild’s customer support or sales team via phone, you acknowledge that calls may be recorded for quality assurance and training purposes. Mobile information (including text messaging opt-in data and consent) will not be shared with third parties or affiliates for marketing or promotional purposes. To stop receiving SMS communications, reply STOP to any message. 

14. Third-Party Links 

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit. 

15. Changes to This Policy 

We reserve the right to update this Privacy Policy at any time. When we make material changes — particularly changes that affect your rights or how we use your data — we will update the “Effective Date” at the top of this page. We encourage you to review this Policy periodically. Continued use of the Site after any update constitutes acceptance of the revised Policy. 

16. Contact Us 

For questions, concerns, or to exercise your privacy rights: