Legal
Last updated: 16 July 2026
In this Privacy Policy:
“SpecSwap”, “we”, “us” and “our” means Bonja Group (ABN 64 814 797 294), trading as SpecSwap, and any related business entity that operates the SpecSwap service.
“You” and “your” means a visitor, client, prospective client, supplier, consultant, builder, designer, developer, homeowner, project manager or other person who interacts with us.
“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
“Project information” means information relating to a project, site, specification, schedule, product requirement, pricing, programme, supplier, delivery, design or procurement package.
“Uploaded documents” includes FF&E schedules, furniture schedules, product lists, drawings, specifications, finishes schedules, appliance schedules, IT/AV briefs, moodboards, quotes, plans, images, PDFs, spreadsheets, CSV files and other documents submitted to us.
SpecSwap aims to handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) where applicable.
Most Australian small businesses with annual turnover of $3 million or less are not automatically covered by the Privacy Act, although some are covered depending on their activities. Even where SpecSwap is not legally required to comply with every Privacy Act obligation, we aim to follow privacy-aware practices because we handle project documents, supplier information and commercially sensitive material.
We may collect the following types of information.
This may include:
This may include:
You may upload or send documents such as:
These documents may contain personal information, business information, pricing information, design information, supplier information or other commercially sensitive material.
If you engage us, we may collect:
When you use our website, we may collect:
We may collect information when you:
We may also collect information from third parties where relevant, including:
We collect information so we can provide and improve our services, including to:
SpecSwap understands that uploaded project documents may contain confidential, commercial or project-sensitive information.
We use uploaded documents only for purposes connected with providing our services, including reviewing the project, preparing recommendations, sourcing products, obtaining supplier pricing, coordinating procurement and preparing handover information.
We do not sell uploaded documents.
We do not publish uploaded documents publicly without permission.
We only share project information where reasonably necessary to provide our services, obtain supplier pricing, coordinate procurement, manage delivery, support installation, prepare handover documentation, comply with legal obligations or protect our legitimate business interests.
You should only upload documents that you are authorised to share with SpecSwap.
To provide our services, we may share relevant information with third parties such as:
Where practical, we only share the information reasonably required for the relevant purpose.
For example, when seeking supplier pricing, we may share product descriptions, quantities, finishes, dimensions, delivery suburb, project timing, relevant drawings or schedule extracts. We generally avoid sharing unnecessary personal, commercial or client information.
SpecSwap may use third-party software and service providers to operate the business.
These currently include:
We may add or change providers over time, including for CRM, accounting, analytics, communication or document preparation purposes as the business grows.
These providers may store or process information on our behalf. Their own privacy policies and security practices may also apply.
Some of our suppliers, service providers, software platforms, consultants or support team members may be located outside Australia.
This means your information may be stored, accessed or processed overseas, including through cloud software or offshore support arrangements.
Where we disclose personal information to an overseas recipient and the Australian Privacy Principles apply, we will take reasonable steps required by APP 8. OAIC guidance explains that an APP entity that discloses personal information overseas may be accountable for certain acts or practices of the overseas recipient.
Overseas locations may vary depending on the tools, suppliers and consultants used for a particular project.
We may use your contact details to send you updates, service information, case studies, offers or other marketing communications where permitted by law.
You can unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us directly.
Even if you unsubscribe from marketing, we may still send you service-related communications about enquiries, quotes, orders, deliveries, invoices, handover documents or ongoing projects.
Our website may use cookies, pixels, analytics tools and similar technologies to understand website performance, user behaviour and marketing effectiveness.
These tools may collect information such as device type, browser type, pages visited, referral source, approximate location and interactions with the website.
You can disable cookies through your browser settings, although some website features may not work properly.
We take reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification or disclosure. OAIC guidance under APP 11 requires reasonable steps to protect personal information, and its security guidance covers measures organisations should consider.
Our security measures may include:
No method of online transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we take privacy and confidentiality seriously.
We keep information for as long as reasonably necessary for the purposes for which it was collected, including to provide services, manage projects, support warranty or handover obligations, comply with legal and accounting requirements, resolve disputes and maintain business records.
Typical retention periods may include:
We may retain de-identified or aggregated information for business analysis, service improvement or record-keeping.
You may contact us to request access to, or correction of, personal information we hold about you.
We may need to verify your identity before responding.
In some cases, we may refuse access or correction where permitted by law, including where the request would unreasonably impact the privacy of others, reveal commercially sensitive information, breach confidentiality obligations or be otherwise legally restricted.
You may ask us to delete information or uploaded documents we hold about you or your project.
We will take reasonable steps to delete or de-identify information where appropriate, unless we need to retain it for legal, accounting, insurance, warranty, dispute, project, contractual or legitimate business reasons.
Deletion may not be immediate where information is stored in backups, email archives, supplier communications, accounting records or project records required for ongoing business purposes.
We rely on the information you provide to us.
You should ensure that project documents, schedules, quantities, site details, delivery information, contact details and approval instructions are accurate, current and complete.
If your information changes, please notify us as soon as possible.
If you provide us with information about another person, such as a client, site contact, designer, architect, supplier, consultant or employee, you must ensure you are authorised to do so and that the person would reasonably expect their information to be shared with SpecSwap for the relevant project or service.
SpecSwap's services are intended for businesses, project teams and adults. We do not knowingly collect personal information from children.
If we become aware of a data breach involving personal information, we will assess the incident and take appropriate steps in accordance with applicable law.
Where required, this may include notifying affected individuals and/or the Office of the Australian Information Commissioner.
Our website, reports, quotes or communications may include links to third-party websites, suppliers or product pages.
We are not responsible for the privacy practices, content or security of third-party websites.
We may update this Privacy Policy from time to time.
The latest version will be published on our website with the effective date shown at the top.
Your continued use of our website or services after changes are published indicates your acceptance of the updated policy.
For privacy questions, access requests, correction requests, deletion requests or complaints, contact:
SpecSwap
Email: hello@specswap.com.au
Website: www.specswap.com.au
We will aim to respond to privacy enquiries within a reasonable time.
If you are not satisfied with our response and the Privacy Act applies, you may be able to contact the Office of the Australian Information Commissioner.
