Privacy notice

Depending on how you interact with us, this may include your first and last name, email address, phone number, company or project details, enquiry text and the information needed to prepare a quote.

For online orders, we also handle your selected products, sizes, quantities, special-work instructions, pickup or delivery choice, delivery address where applicable, calculated delivery quote, order totals, order reference, payment status and invoice reference.

Your cart is stored in your browser until it is submitted at checkout. We do not ask you to provide sensitive personal information in cutting instructions or general enquiry fields.

We use the information to respond to enquiries, prepare quotes, verify and fulfil orders, arrange pickup or delivery, process payment, issue confirmations and invoices, provide customer support, keep business and accounting records, manage disputes, and protect the website and ordering process from misuse.

We do not sell personal information. We may disclose information where reasonably necessary to provide the requested service, protect our operations or rights, or respond to a valid legal requirement.

Stripe-hosted payment: when you continue to payment, Stripe hosts the secure payment page and receives the information needed to process the transaction and create payment or invoice records. Victorsteel does not receive or store your full card number. Stripe handles payment information under its own terms and privacy practices.

Google Places address suggestions: when you choose delivery and begin typing an address, partial address text and a random autocomplete session identifier are sent to Google Places to suggest Australian addresses. If you select a suggestion, its place identifier is sent to Google to retrieve the address details. Suggestions are displayed with Google Maps attribution. You can dismiss the suggestions and enter or correct the address manually.

Google Routes delivery quote: the confirmed delivery address is sent to Google Routes only when you request a delivery quote. It is used to estimate the route and travel time for the delivery fee. No address is sent to Google Places or Google Routes when you choose factory pickup.

Victorsteel does not expose its server API keys to the browser or persist address-search text and suggestion content. Returned place identifiers are held in short-lived server memory for up to 10 minutes only to verify that a selected address came from the current suggestions. Google's handling of information is described in the Google Privacy Policy and use of Google Maps services is subject to the Google Maps Platform Terms. See also our website and online-shop terms.

We use an authenticated SMTP email service to send order confirmations and invoice information to the email address you provide. Order details are also emailed to Victorsteel's configured internal sales and order recipients so the team can review, fulfil and support the order.

Website hosting, payment, routing, email and other operational service providers may process or store information on our behalf. Depending on each provider's infrastructure, that processing may occur outside Australia. Providers may also retain information under their own operational, security and legal requirements.

We retain personal information for as long as reasonably needed to complete and support the transaction, maintain appropriate business, accounting and tax records, resolve issues, and meet applicable legal obligations. Retention can vary by record type and provider; we do not state a single fixed period in this notice.

Measures used to reduce risk include HTTPS in transit, Stripe-hosted card collection, server-side verification of product prices and delivery quotes, restricted operational access, and authenticated order email. No website, transmission or storage system can be guaranteed completely secure.

You may ask us to provide access to, or correct, personal information we hold about you. We may need to verify your identity before acting on a request, and there may be circumstances where access cannot be provided in full.

For access, correction, privacy questions or concerns, email sales@victorsteelgroup.com.au. Please include enough information for us to identify the relevant enquiry or order without sending payment-card details.

We may update this notice to reflect changes to the website, service providers or business practices. The current version and effective date will be published on this page. This notice describes our practices and does not create a guarantee that systems or providers will always operate without interruption or risk.