Privacy Policy
This page governs the manner in which Capstone Productions Pty Ltd (ABN 31 686 338 938) (“Capstone Productions”, “we”, “our”, “us”) collects, uses, stores, archives and discloses information collected from users (each, a “User”) of this website and the online store operated through it.
1. Introduction
1.1 In the course of our business in Australia, there are circumstances where we collect personal information. This privacy policy has been developed to ensure that such information is handled appropriately.
1.2 We are committed to complying with the Privacy Act 1988 (Cth) (Privacy Act) in relation to all personal information we collect. Our commitment is demonstrated in this policy. The Privacy Act incorporates the Australian Privacy Principles (APPs). The APPs set out the way in which personal information must be treated.
Who does the privacy policy apply to?
1.3 This policy applies to any person for whom we currently hold, or may in the future collect, personal information. This includes visitors to our website, customers who place orders, account holders, and applicants for trade accounts.
What information does the privacy policy apply to?
1.4 This policy applies to personal information. In broad terms, ‘personal information’ is information or opinions relating to a particular individual who can be identified.
1.5 Information is not personal information where the information cannot be linked to an identifiable individual.
2. How we manage personal information
2.1 We manage the personal information we collect in numerous ways, such as by:
(a) implementing security systems for protecting personal information from misuse, interference and loss from unauthorised access, modification or disclosure;
(b) appointing a privacy officer within the business to monitor privacy compliance;
(c) implementing procedures for identifying and managing privacy risks at each stage of the information lifecycle, including collection, use, disclosure, storage, destruction or de-identification;
(d) regularly providing staff with training on privacy issues;
(e) appropriately supervising staff who regularly handle personal information;
(f) implementing procedures for identifying and reporting privacy breaches and for receiving and responding to complaints.
2.2 Subject to our legal and professional obligations, we will take reasonable steps to destroy or permanently de-identify personal information if that information is no longer needed for the purposes for which we are authorised to use it. Records relating to completed sales are generally retained for at least seven years to meet taxation and record-keeping obligations.
2.3 In limited circumstances, it may be possible for you to use a pseudonym or remain anonymous when dealing with us — for example, when making a general enquiry. If you wish to use a pseudonym or remain anonymous you should notify us when making first contact. We will use our best endeavours to deal with your request, subject to our legal obligations and our ability to supply goods and services to you without using your name. We cannot process and deliver an order without your name and delivery details.
2.4 We are also subject to legal obligations that may affect how we deal with personal information.
3. What information do we hold?
Personal information
3.1 We may collect and hold personal information about you, which may include:
(a) contact information, including your name, phone number and email address;
(b) billing and delivery addresses;
(c) account information, including your username and a securely hashed password, and your order and enquiry history;
(d) business details where you apply for or hold a trade account, including trading name, ABN or ACN, and the details of your authorised contacts;
(e) information about the goods you have purchased, quoted or enquired about, and any related correspondence;
(f) technical information collected automatically when you use our website — see clause 9; and
(g) any other personal information reasonably required to supply goods and services to you.
Payment information
3.2 Payments are processed on our behalf by our payment provider, Stripe. Your full card number, expiry date and security code are provided directly to Stripe and are not collected or stored on our servers. We receive only limited information from Stripe, such as whether the payment succeeded, the card type, and the last four digits of the card, so that we can identify and reconcile your order.
Sensitive information
3.3 We do not seek to collect sensitive information about individuals, as that term is defined in the Privacy Act. Please do not send us sensitive information unless we have asked for it and explained why it is needed.
4. When and how do we collect your information?
4.1 Our usual approach to collecting personal information is to collect it directly from you — when you create an account, place an order, apply for a trade account, request a quote, subscribe to our updates, or contact us by phone, email or through a form on our website.
4.2 We also collect some information automatically when you use our website, through cookies and similar technologies. See clause 9.
4.3 In limited circumstances we may collect information about you from a third party — for example, from our payment provider in relation to a payment or chargeback, from a delivery carrier in relation to a consignment, or from a person who places an order to be delivered to you. Where we collect your personal information from someone else, we will take reasonable steps to notify you.
5. How do we hold your information?
5.1 Our usual approach to holding personal information includes:
(a) physically at our premises (securely); and
(b) electronically, in the database supporting this website, in our email and business systems, and with the service providers described in clause 7.
5.2 We secure the personal information we hold in numerous ways, including:
(a) using secure servers to store personal information;
(b) encrypting information in transit between your browser and our website using HTTPS;
(c) storing account passwords only in hashed form, so they cannot be read by us; and
(d) using unique usernames, passwords and other protections including firewalls on systems that can access personal information.
5.3 No method of transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
6. Why do we collect your information?
6.1 We take reasonable steps to use and disclose personal information for the primary purpose for which we collect it. The primary purpose for which information is collected varies, but is generally to supply audiovisual, staging and production equipment and related services to you or your business — including processing and fulfilling your order, taking payment, arranging delivery, providing warranty and after-sales support, and administering your account.
6.2 Personal information may also be used or disclosed by us for secondary purposes that are within your reasonable expectations and that are related to the primary purpose of collection. This includes assessing and administering trade account applications and applying your assigned pricing, responding to enquiries and quotation requests, internal business administration and reporting, improving our website and services, detecting and preventing fraud, and complying with our legal obligations.
6.3 For example, we may collect and use your personal information to provide you with updates on new products or services that may be relevant to you or your business. See clause 10 for how to opt out.
6.4 We will only disclose personal information to third parties if permitted by the Privacy Act or authorised by you. We do not sell or rent your personal information.
7. Who do we disclose your information to?
7.1 We may disclose your personal information to:
(a) our staff and contractors, to the extent needed to perform their role;
(b) our payment provider, Stripe, to process payments and refunds and to manage chargebacks and fraud screening;
(c) delivery carriers and freight forwarders, to deliver your order;
(d) suppliers, manufacturers and distributors, where needed to fulfil an order, arrange a direct delivery, or process a warranty or repair claim;
(e) our website hosting, email and information technology providers, who store or process information on our behalf;
(f) our parent organisation, Random Act of Worship Limited, for administrative, accounting or legal purposes;
(g) our professional advisers, including accountants, auditors, insurers and lawyers; and
(h) government authorities, courts or law enforcement, where required or authorised by law.
7.2 Where we disclose personal information to a service provider, we take reasonable steps to ensure they are bound by confidentiality obligations and, where applicable, privacy standards comparable to ours, and that they use the information only for the purpose for which it was provided.
8. Do we disclose your information outside of Australia?
8.1 Yes. Some of the service providers we rely on operate globally, which means your personal information may be stored or processed outside Australia.
8.2 In particular, our payment provider Stripe and our email provider Microsoft may store or process information in the United States and in other countries in which they or their sub-processors operate. Our website hosting provider may also store information outside Australia.
8.3 Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information, unless an exception under the Privacy Act applies.
8.4 If you would like to know more about where your information may be held, please contact our Privacy Officer using the details in clause 13.
9. Cookies and website tracking
9.1 Our website uses cookies and similar technologies. Some are strictly necessary for the site to work — for example, to keep your shopping cart contents between pages, to keep you signed in, and to protect against fraudulent form submissions. The website cannot function correctly without these.
9.2 We may also collect technical information automatically, such as your IP address, browser type and version, device type, the pages you visit and the time and date of your visit. This information helps us maintain site security and improve site performance and functionality.
9.3 You may disable or delete cookies in your browser settings. If you do, some features of our site — including the shopping cart and checkout — may not function properly.
10. Direct marketing and opting out
10.1 We may send you information about our products, services and promotions where you have consented, or where you are an existing customer and would reasonably expect to receive it.
10.2 You can opt out at any time by using the unsubscribe link in any marketing message, or by contacting us using the details in clause 13. We will action your request promptly.
10.3 Opting out of marketing does not stop transactional messages that we need to send you — for example, order confirmations, dispatch and delivery notifications, invoices, and replies to your enquiries.
11. Data breaches
11.1 We have procedures for identifying, containing, assessing and responding to suspected data breaches.
11.2 If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.
12. Access to information and correcting personal information
12.1 It is important that the information we hold about you is up-to-date. You should contact us if your personal information changes. If you hold an account, you can review and update much of your information by signing in to your account.
12.2 You may request access to the personal information held by us, or ask us for your personal information to be corrected, by using the contact details in clause 13.
12.3 We will grant you access to your personal information as soon as possible, subject to the request circumstances.
12.4 In keeping with our commitment to protect the privacy of personal information, we may not disclose personal information to you without proof of identity.
12.5 We may deny access to personal information if:
(a) the request is unreasonable;
(b) providing access would have an unreasonable impact on the privacy of another person;
(c) providing access would pose a serious and imminent threat to the life or health of any person;
(d) providing access would compromise our professional obligations; or
(e) there are other legal grounds to deny the request.
12.6 If we deny a request for access or correction, we will tell you why in writing, and how you may complain about the decision.
12.7 We may charge a fee for reasonable costs incurred in responding to an access request. The fee (if any) will be disclosed prior to it being levied. We do not charge for making a request, or for correcting your information.
12.8 If the personal information we hold is not accurate, complete and up-to-date, we will take reasonable steps to correct it so that it is accurate, complete and up-to-date, where it is appropriate to do so.
13. Complaints and who to contact
13.1 If you wish to complain about an interference with your privacy, then you must follow the following process:
(a) The complaint must be firstly made to us in writing, using the contact details below. We will have a reasonable time to respond to the complaint.
(b) In the unlikely event the privacy issue cannot be resolved, you may take your complaint to the Office of the Australian Information Commissioner (oaic.gov.au, or 1300 363 992).
13.2 A person may make a complaint, or request to access or correct personal information about them held by us. Such a request must be made in writing to the following address:
The Privacy Officer
Capstone Productions Pty Ltd (ABN 31 686 338 938)
Postal address: PO Box 7222, Redland Bay QLD 4165
Phone: 1800 114 769
Email: sales@capstoneproductions.com.au
14. Changes to this policy
14.1 We may update, modify or remove this policy at any time without prior notice. Any changes to the privacy policy will be published on our website.
14.2 This policy is effective 19 August 2026. If you have any comments on the policy, please contact the Privacy Officer using the contact details in clause 13 of this policy.