Privacy Policy

Last updated: 31 August 2026.

Who we are

Obras Onsite. We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

• Your name and email address when you buy or contact us.
• Order details (what you bought and when).
• Payment is handled by our payment provider - we do not collect or store your full card number.
• Basic website analytics (e.g. pages visited) to improve the site.

How we use it

• To deliver your documents and process your order.
• To provide support and respond to enquiries.
• To send you updates or offers - only if you've opted in (you can unsubscribe any time).

Site tools & records you create

Our free site tools (pre-start sign-on, site induction, incident and near-miss reporting, toolbox talk attendance, plant pre-use checks, evidence capture and the live status board) let people on a construction site create records. You should know how that information is handled:

• Most tools save only on your own device. Boards, diaries, registers and calculators keep their data in your browser's local storage. We never receive it. Clearing your browser data deletes it.
• Some tools deliberately send a record. Sign-ons, inductions, incident and near-miss reports, plant pre-use checks and toolbox talk attendance are sent to the site's record inbox using our form provider. These records typically include a name, company or trade, the site name, the date and time, and whatever was written in the report.
• Evidence photos and live status entries are stored by us. Photos attached to a document record, along with the name and note of the person who captured them, and Green/Amber/Red status entries, are stored so that anyone scanning that QR code can see them. Treat anything you upload as visible to any person who scans that document.
• Incident reports can contain sensitive information. A report about an injury may include health information. Only record what is necessary, and don't include a person's medical details unless you need to and they know about it.
• If you are the site operator, you are responsible for the people whose details you record. Tell your workers what you are collecting and why, and don't use these tools to collect more than you need.

Where information is stored

Our website, the live status records and evidence photos are hosted on Cloudflare's global network. Our forms are handled by our form provider and payments by our payment provider. This means information may be stored or processed on servers outside Australia. We only use providers that offer appropriate protections, and we don't send your information anywhere else.

How long we keep it

Order and tax records are kept for as long as Australian tax law requires. Evidence photos and status entries stay attached to a document record until they are deleted or replaced — the system keeps the most recent entries per record and removes older ones. If you want something removed sooner, email us and we'll delete it.

Removing information

Email support@obrasonsite.com.au and we'll delete a photo, a status entry or a record you've asked about. If you believe something has been uploaded that shouldn't have been — a photo of a person, someone's medical details, anything private — tell us and we'll remove it promptly.

Who we share it with

We share information only with the providers that help us run the store (for example our payment processor and email/delivery provider), and only as needed to provide the service. We don't sell your personal information.

Cookies

We use cookies/local storage for things like your shopping cart and basic analytics. You can disable cookies in your browser, though some features may not work.

Access & contact

You can ask to see or correct the personal information we hold about you, or make a privacy complaint, by emailing support@obrasonsite.com.au. We'll respond within a reasonable time.