Last updated: 3 November 2026
Shiny Shower ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
This policy describes our practices, including automatic first-party website analytics on approved marketing and customer-facing HTML pages using safe page labels. Automatic collection is not recorded as affirmative consent. Browser privacy signals and previously saved explicit declines are respected as described below; the site works without this analytics.
We may collect personal information that you voluntarily provide to us when you:
This information may include:
When you visit our website, we may automatically collect certain information about your device and usage, including:
We use the information we collect for various purposes, including:
We may share your information in the following circumstances:
We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service. These providers are bound by confidentiality agreements.
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
We may share your information for any other purpose with your explicit consent.
We use cookies and similar tracking technologies to collect and track information about your website usage. Cookies are small data files stored on your device.
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.
We automatically measure approved marketing and customer-facing HTML pages without an analytics box or floating privacy link. This collection is not recorded as affirmative consent, and earlier acceptance is not required. Global Privacy Control (GPC) and Do Not Track (DNT) disable this tracker and clear local analytics IDs. Previously saved explicit declines are honoured until their original expiry (up to 90 days), without being overwritten or extended. You can disable this tracker using GPC/DNT or by blocking local storage in your browser; there is no cookie or in-memory tracking fallback. The site works without this analytics.
We use random browser visitor and session IDs in local storage, public page paths, entry pages, referrer website host only, allowlisted advertising campaign parameters and click IDs (gclid, wbraid, gbraid), page views, approximate active visible seconds and clicks to our configured business phone numbers. Sessions end after 30 minutes idle, with a maximum of 24 hours. We record screen and viewport dimensions, language, time zone and broad browser, operating system and device families.
The collector uses the server-observed network address only to produce a masked network and a keyed hash for limited abuse control; it does not store a full IP address in analytics. Location is unknown. We do not request geolocation, fingerprint devices, read form contents, contact details or page body text, or retain arbitrary URL queries or fragments. Customer links are reduced to generic safe page labels, not stored as private URLs. Existing hosting/security logs and third-party Google tags are separate from this first-party tracker; these first-party controls do not claim to control all existing third-party tags.
Coverage includes the quote form, customer quote views, booking/status/invoice/payment pages, confirmation, uploads, getting-started, review and QR landing pages, and career job pages. Customer URLs are recorded only as generic safe page labels such as /quote, /quote/view, /booking/status, /booking/payment, /upload and /careers/job, never their private links, reference numbers, tokens, IDs, names, form answers or payment details. Published independent marketing pages retain verified public slugs. Admin/API pages, previews, errors, redirects and PDF/binary downloads are not tracked. Opening the full quote currently downloads a PDF and is excluded; HTML invoice pages are included.
From 3 November 2026, page duration measures approximate visible-and-focused time, including passive reading. Hidden or unfocused time is excluded. This does not verify attention, and browser delivery failures can undercount. Older records used interaction-limited active time; missing historical page visits cannot be reconstructed.
Authorised staff may see possible website sessions shortly before a Shiny Shower phone call. Recent clicks to the called business number are a stronger timing signal than recent site activity alone, but neither proves who called. Overlapping visits are uncertain. We have no caller-IP match, and these suggestions do not automatically change leads, advertising attribution or upload conversions. Some callers never visited the site.
Analytics records, including campaign click IDs and masked network/hash values, are retained for approximately 90 days. Cleanup runs in bounded hourly passes; collection pauses if retained event history becomes materially overdue. Privacy signals and saved declines stop future collection; they do not identify and erase previously collected records, which expire through retention. Automatic collection can resume when a saved decline expires or privacy signals are disabled. Contact us for privacy requests.
When you successfully submit a supported form on this website, existing unexpired analytics session and browser IDs may accompany that submission. We may associate that website session with the resulting Shiny Shower lead so authorised staff can understand its public-page journey. We do not copy contact or form contents into analytics. Form-submitted browser continuity, staff-selected associations and possible phone-visitor timing suggestions are labelled separately; none verifies a person, a caller or advertising conversion attribution. Other-business and external-site forms are excluded. Existing privacy signals, saved declines and unavailable storage prevent this automatic association. Associations expire with approximately 90-day analytics retention; a short-lived first-collection race buffer is eligible for at most two minutes and purged in bounded hourly cleanup.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This includes:
When we no longer need your information, we will securely delete or anonymize it.
Under Australian privacy law, you have the following rights:
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within a reasonable timeframe as required by law.
Our website may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
We encourage you to review the privacy policy of any third-party site you visit.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete such information.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Shiny Shower Pty Ltd
1300 585 087
Melbourne, Victoria, Australia
If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with us using the contact details above. We will investigate your complaint and respond within a reasonable timeframe.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
