Privacy Policy
Last updated: 20 November 2025
1. We Respect Your Privacy
Pillarbit Software Pty Ltd (ABN 65 692 373 505) trading as Camper BMS (“we”, “us”, or “our”) respects your right to privacy and is committed to safeguarding the personal information of our website visitors, prospective customers, and service users.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or otherwise interact with us.
We adhere to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and, to the extent applicable, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
“Personal information” means any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and whether recorded in a material form or not (Australian definition), and includes “personal data” as defined in GDPR Article 4(1).
For any privacy-related queries, please contact our Privacy Contact at support@camperbms.com or by post at 81–83 Campbell Street, Surry Hills NSW 2010, Australia.
2. What Personal Information We Collect
We may collect and process the following personal information:
- Name, email address, phone number, and postal address;
- Information provided when you contact us, subscribe to updates, or request information;
- Usage data, including IP address, browser type, operating system, pages visited, and referral sources;
- Marketing preferences, survey responses, or feedback;
- Information obtained from cookies and analytics tools such as Google Analytics 4 (GA4).
We collect only the information reasonably necessary for our business activities, and we do not collect sensitive information unless legally required or with your explicit consent.
Where lawful and practical, you may choose to interact with us anonymously or using a pseudonym.
However, if you do so, we may be unable to provide certain services or respond to particular requests that require identification.
Consequences of Not Providing Information
If you choose not to provide requested information, we may be unable to respond to your inquiry, provide updates, or deliver services to you.
3. How We Collect Information
We collect personal information:
- Directly from you via website forms, email, or other correspondence;
- Automatically through cookies, analytics, and similar technologies when you use our website;
- From trusted third parties, such as analytics or advertising providers;
- From publicly available sources where lawful.
We will notify you at or before the time of collection (or as soon as practicable afterwards) about the purpose and method of collection, in accordance with APP 5.
Notice at Collection (CCPA)
When you submit information through our website forms or other collection points, we provide a clear link to this Privacy Policy as our “Notice at Collection” under the California Consumer Privacy Act (CCPA).
4. Legal Bases for Processing (GDPR Article 6)
We process personal data only where we have a lawful basis under GDPR. The applicable bases include:
- Consent (Art. 6(1)(a)) – when you opt in to marketing communications or non-essential cookies;
- Contract performance (Art. 6(1)(b)) – to provide services or respond to pre-contractual requests;
- Legal obligation (Art. 6(1)(c)) – to comply with record-keeping, tax, or regulatory duties;
- Legitimate interests (Art. 6(1)(f)) – to improve our services, maintain website security, and prevent fraud.
We conduct balancing tests to ensure our legitimate interests do not override your fundamental rights and freedoms.
5. How We Use Personal Information
We use personal information to:
- Provide, manage, and improve our products, website, and communications;
- Respond to inquiries and requests;
- Send marketing and promotional materials (only with consent or under a legitimate interest basis);
- Analyse website traffic and usage trends;
- Comply with legal and regulatory obligations.
We collect and use information only for the purposes described or those you would reasonably expect.
Direct Marketing (APP 7 / GDPR Art. 21)
We may send you marketing communications that we believe may interest you. You can opt out of receiving direct marketing at any time by:
- Clicking “unsubscribe” in our emails, or
- Contacting our Privacy Contact at support@camperbms.com.
We do not charge fees for processing opt-out requests, and all requests are actioned promptly.
6. Retention Periods
We retain data only as long as necessary for the purposes for which it was collected:
| Purpose | Retention Period | Legal / Business Reason |
|---|---|---|
| General inquiries | 12 months after last contact | Customer service quality and reference |
| Marketing communications | 24 months or until consent withdrawn | Consent and marketing preference management |
| Website analytics data | 14 months for user data, 2 months for event data | Trend analysis and service optimisation |
| Complaint or legal records | 6 years | Limitation period and regulatory compliance |
Backup data is stored securely and automatically deleted after 90 days.
7. Disclosure of Personal Information
We may disclose personal information to:
- Employees, contractors, and professional advisers who need access to perform their duties;
- Third-party service providers who assist us in operations (e.g., hosting, email, analytics);
- Law enforcement, courts, regulators, or government agencies as required by law;
- Successors or transferees in the event of a merger, sale, or business restructuring.
All third-party processors are bound by written Data Processing Agreements that ensure compliance with GDPR and APPs.
Current Data Processors
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Netlify, Inc. | Web hosting and form submissions | USA / EU (via AWS) | SCCs; DPA in place |
| Google LLC (Google Analytics 4) | Website analytics | USA | SCCs – GA4 does not log or store full IP addresses |
| Google Workspace (Google LLC) | Business email and productivity tools | USA / Global | SCCs; covered by DPA |
8. International Data Transfers
We may store and process personal information in Australia and the United States.
The United States is not subject to an adequacy decision under GDPR Article 45. Accordingly, where we transfer personal information to U.S.-based service providers, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and implement supplementary safeguards to ensure an equivalent level of data protection.
Where data is transferred outside the EU or UK, we apply the EU Standard Contractual Clauses (SCCs) and conduct Transfer Impact Assessments (TIAs) to ensure equivalent protection to GDPR standards.
We take reasonable steps to ensure overseas recipients comply with the Australian Privacy Principles, including contractual obligations to handle information consistently with those principles.
Copies of applicable safeguards are available upon request by contacting our Privacy Contact at support@camperbms.com.
9. Children’s Privacy
Our website and services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided personal data, please contact our Privacy Contact to request deletion.
10. Your Rights (GDPR)
If you are located in the European Union, you have the following rights under the GDPR:
- Access – obtain confirmation and a copy of your data;
- Rectification – correct inaccurate or incomplete data;
- Erasure – request deletion of your data (“right to be forgotten”);
- Restriction – limit processing under certain conditions;
- Data Portability – receive your data in a structured, machine-readable format;
- Objection – object to processing based on legitimate interests or direct marketing;
- Withdraw Consent – withdraw consent at any time without affecting prior lawful processing.
You can exercise these rights by contacting our Privacy Contact at support@camperbms.com. We respond to valid requests within 30 days and may extend this by another 30 days for complex cases, notifying you within the initial period.
If you are unsatisfied, you may lodge a complaint with your local supervisory authority. As we have no EU establishment, the competent authority will depend on your residence within the EU.
10A. Your Rights (CCPA - California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), and, where applicable, the California Privacy Rights Act (CPRA):
- Right to Know – request disclosure of the categories and specific pieces of personal information we collect, use, and disclose;
- Right to Delete – request deletion of your personal information, subject to certain exceptions;
- Right to Opt-Out of Sale – we do not sell your personal information;
- Right to Non-Discrimination – you will not receive discriminatory treatment for exercising your CCPA rights.
If you are a California resident, you also have the Right to Correct inaccurate personal information that we maintain about you. You may submit a correction request by contacting our Privacy Contact at support@camperbms.com.
To exercise these rights, contact our Privacy Contact at support@camperbms.com. We will respond within 45 days and may extend by another 45 days for complex requests.
We do not sell personal information and have not sold personal information in the preceding 12 months.
Identity Verification for CCPA Requests
For security, we may need to verify your identity before processing any privacy rights request. Verification steps may include confirming details you have previously provided (such as your email address or recent interaction with our services). If an authorised agent submits a request on your behalf, we may require proof of authorisation and your identity.
No Sale or Sharing of Personal Information
We do not sell or share personal information as defined under the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA). Google Analytics is used solely for aggregated website measurement under a Data Processing Agreement with Google LLC.
Do Not Sell or Share My Personal Information
Because we do not sell or share your personal information, there is currently no action for you to take to opt out of sale or sharing.
11. Security of Your Information
We maintain appropriate technical and organisational safeguards to protect personal information, including:
- HTTPS/TLS encryption;
- Role-based access controls and authentication;
- Regular vulnerability assessments;
- Data encryption at rest and in transit;
- Staff confidentiality and security training.
Under the Notifiable Data Breaches (NDB) Scheme and GDPR Articles 33–34, we will notify affected individuals and authorities within 72 hours of becoming aware of a data breach likely to result in serious harm.
12. Access and Correction
You may request access to, or correction of, personal information we hold about you by contacting our Privacy Contact at support@camperbms.com. We will respond within 30 days. Access may be refused in limited circumstances (e.g., where disclosure would breach another’s privacy or legal privilege), and reasons will be provided.
13. Cookies and Analytics
Our website uses cookies and similar technologies for functionality, performance measurement, and analytics.
Cookie Categories
- Strictly Necessary Cookies - essential for website functionality, including localStorage for consent preferences and basic navigation (no expiry);
- Analytics Cookies - analyse site usage via Google Analytics 4 to help us improve the website (user data: 14 months; event data: 2 months).
You can manage cookie preferences at any time using the 'Cookie Preferences' link in the footer or your browser settings.
We obtain explicit, opt-in consent before setting any non-essential cookies. Analytics cookies are disabled by default until you grant consent via the cookie preferences banner.
Google Analytics 4 processes anonymised usage data; it does not retain full IP addresses and operates under the Google Ads Data Processing Terms with Google LLC, incorporating the EU Standard Contractual Clauses (SCCs).
You can further opt out of GA4 tracking using Google’s opt-out tool.
14. Automated Decision-Making and Profiling
We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.
15. Complaints
If you have concerns about our handling of personal information, please contact our Privacy Contact at support@camperbms.com. We will acknowledge complaints within 7 days and aim to resolve them within 30 days of receipt.
If you are not satisfied, you may contact:
- The Office of the Australian Information Commissioner (OAIC) – https://www.oaic.gov.au; or
- Your local EU supervisory authority (if located in the EU).
16. Changes to This Policy
We may amend this policy from time to time to reflect operational or legal changes. Updates will be published on https://camperbms.com with the revised effective date. We encourage you to review this policy periodically to stay informed about how we protect your information.
17. Jurisdiction and Governing Law
This Privacy Policy is governed by the laws of New South Wales, Australia, and any disputes will be subject to the exclusive jurisdiction of the courts of New South Wales.