Privacy Policy

Last updated: 1 February 2026

SUMMITFLOW PTY LTD, ABN 73 694 808 412, referred to as “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information in a responsible manner in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, hold, use, and disclose personal information, and how you can access or correct it, make a complaint, or contact us.

1. What personal information do we collect?

We may collect the following types of personal information:

Contact and identification details — name, postal or street address, email address, phone number(s), date of birth (where relevant).
Property and energy-related details — property address, roof type/orientation, energy usage/bills, meter details, existing electrical setup, solar/battery/air conditioning/EV charger preferences or existing systems.
Financial and payment information — bank details (for refunds or direct debits), payment card details (processed securely via third-party providers), quotes, invoices, and payment history.
Technical and website data — IP address, browser type, device information, pages visited, time/date of visits, referring sites (via cookies, analytics tools, or server logs).
Other information — job application details (if you apply to join our installer network), photos/videos of your property (with consent, e.g., for system design/installation), marketing preferences, and any information you voluntarily provide in enquiries, forms, emails, or calls.

We only collect personal information that is reasonably necessary for our functions and activities.

2. How do we collect personal information?

We collect personal information:

Directly from you — when you contact us, submit an enquiry/quote request, book a site assessment, sign a contract, apply to join our installer network, or interact with our website.
From third parties — such as energy retailers (for usage data with your consent), government rebate schemes (e.g., NSW ESS, STC, PDRS), suppliers/installers, or credit reporting agencies (where permitted).
Automatically — through website cookies, analytics (e.g., Google Analytics), forms, or server logs.

If we collect sensitive information (e.g., health-related data in rare cases), we will obtain your express consent unless required or authorised by law.

3. Why do we collect, hold, use, and disclose your personal information?

We collect, hold, use, and disclose your personal information for the primary purposes of:

Providing and managing our services — consultations, site assessments, system design, quotes, installations (solar, battery, EV chargers, air conditioning), post-installation support, and maintenance.
Processing payments, rebates, incentives, and scheme compliance (e.g., creating and managing Energy Savings Certificates under NSW ESS, STCs, PDRS).
Communicating with you — responding to enquiries, sending quotes/contracts, service updates, reminders, and support.
Marketing — sending information about our services, promotions, or energy-saving tips (you can opt out at any time).
Improving our website, services, and business operations.
Complying with legal obligations, resolving disputes, or enforcing contracts.

4. Who do we disclose personal information to?

We may disclose your personal information to:

Our employees, contractors, and service providers (e.g., installers, electricians, suppliers, payment processors, IT/cloud providers, marketing agencies) who assist us in delivering services.
Government bodies or scheme administrators — for rebates, incentives, compliance, or certificate creation (e.g., Clean Energy Regulator for STCs, IPART/ESS scheme for NSW).
Energy retailers, distributors, or network operators (where required for grid connection or compliance).
Professional advisors (e.g., lawyers, accountants) or insurers.
Third parties with your consent, or as required/allowed by law.

Some recipients may be located overseas (e.g., cloud storage providers in the US or Europe). We take reasonable steps to ensure overseas recipients handle your information in accordance with Australian privacy laws (e.g., via contractual protections).

5. How do we hold and protect personal information?

We store personal information securely (electronically and/or in hard copy) using reasonable safeguards against misuse, interference, loss, unauthorised access, modification, or disclosure.

We retain information only for as long as necessary for the purposes outlined above, or as required by law (e.g., tax or consumer law record-keeping periods).

6. Direct marketing

We may send you marketing communications about similar products/services. You can opt out at any time by contacting us, using the unsubscribe link in emails, or updating your preferences.

7. Cookies and website analytics

Our website may use cookies, pixels, and similar technologies for functionality, analytics, and advertising. You can manage cookies via your browser settings. For more details, see our [Cookie Policy] (if you have one) or contact us.

8. Access and correction

You have the right to access and correct your personal information we hold (subject to exceptions under the Privacy Act). To request access or correction, contact us using the details below. We may charge a reasonable fee for access requests.

9. Complaints

If you believe we have breached the Privacy Act or this policy, please contact us first. We will investigate and respond within a reasonable time.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au Phone: 1300 363 992

We may update this Privacy Policy from time to time. The current version is available on our website, and significant changes will be notified where appropriate.

By using our website or services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.