Privacy Policy
Last updated: August 2026
1. Introduction
Timberlink New Zealand Limited (5732447) (“we”) are committed to protecting the personal information of our customers. We are bound by the Information Privacy Principles set out in the Privacy Act 2020 (NZ).
We will only collect, use or disclose personal information in accordance with the Privacy Act and this Privacy Policy. In this Privacy Policy, “personal information” means information about an identifiable individual.
We may amend this Privacy Policy at any time and for any reason. The updated version will be available by following the “Privacy Policy” link on our website.
2. When do we collect personal information?
We collect personal data in a number of ways. The most common situations in which we collect personal information are when you:
- purchase products from us or enter into an agreement with us;
- request technical or promotional information about our products;
- contact us with a query; or
- visit our premises.
- when you purchase products from us, we may collect your name, job title, organisation, contact details (e.g. address, delivery address, email address and phone numbers) and payment details;
- when you request technical or product information or send us a query, we may collect your name, job title, organisation and contact details (e.g. email address); or
- when you visit our premises, we may collect your name, organisation, contact details (e.g. mobile phone number, email address), reasons for your visit, and any health, safety or site-access information reasonably required to manage your visit.
- the purpose for which you provided it to us (the primary purpose);
- purposes which are related to the primary purpose and for which you would reasonably expect us to use your personal information; and
- any other purposes to which you have consented.
3. What personal information do we collect?
The types of personal information we collect from you will depend on the situation in which that information is collected. For example:
4. What do we use personal information for?
The purposes for which your personal information will be used will depend on the situation in which that personal information is collected. We will inform you of the specific purposes for which we intend to use your personal information in a collection notice at or before the time we collect your personal information.
Generally, we may use your personal information for:
- For example:
- when you purchase products from us, we may use your details for the purpose of processing your order, supplying and delivering the products and arranging payment;
- when you request technical or product information, we may use your details to send it you that information;
- when you send us a query, we may use your details to respond to your query; or
- when you visit our premises, we may use your details to record your visit, and the reasons for your visit, for the purposes of contractor and visitor management, investigating health, safety or operational issues, conducting a site evacuation, and keeping our premises and people safe.
- the purpose for which you provided it to us (the primary purpose);
- purposes which are related to the primary purpose and which you would reasonably expect us to use your personal information for; and
- any other purposes to which you have consented.
We may also collect business contact details from construction industry information services(such as BCI Central/LeadManager and use those contact details for marketing purposes. Where we collect personal information about you from a source other than you (for example, from these services or from a third party), we will take reasonable steps to make you aware of the collection and the matters set out in this Privacy Policy, as required under the Privacy Act, unless an exception applies.
5. Direct marketing
We may use your personal information to contact you for promotional and marketing purposes, but only in accordance with the Privacy Act and the Unsolicited Electronic Messages Act 2007 (NZ). Each marketing email we send will also have an unsubscribe facility.
If, at any time, you decide that you no longer wish to be contacted for promotional and marketing purposes, please contact the Privacy Officer at privacy@timberlink.com.au or at Timberlink Australia, Level 2, 37 Dalmore Drive, Scoresby, Victoria, Australia, 3179.
6. Who do we disclose personal information to?
The third parties to whom your personal data will be disclosed will depend on the purposes for which that personal data is used. We will inform you of the types of third parties to whom your personal data will be disclosed in the collection notice at or before the time we collect your personal data.
Generally, we may disclose your personal information as necessary for:
- For example, we may share your personal data with:
- third parties who assist us to supply and deliver our products;
- third parties who provide administrative, communications, computer, payment, security or other services to us to support our business operations (for example, IT service providers, payment processors, professional advisors, credit reference bureaus and debt recovery agents); and
- our related companies.
In exceptional circumstances, we may be required or permitted by law to disclose personal information, for example to law enforcement authorities or to prevent a serious threat to public safety.
7. Overseas transfers
Some of the third parties who provide administrative, communications, computer, payment, security or other services to us to support our business operations may be located, or may store data, outside New Zealand. The countries in which they may be located include Australia, the USA and India.
Where we disclose your personal information to a third party outside New Zealand, we will comply with Information Privacy Principle 12 of the Privacy Act. This means we will only make the disclosure where: the recipient is subject to the Privacy Act (because it carries on business in New Zealand); the recipient is subject to privacy laws that provide comparable safeguards to the Privacy Act; the recipient is required (for example, under contractual arrangements such as model contract clauses) to protect the information in a way that provides comparable safeguards; or you have authorised the disclosure after being expressly informed that the recipient may not be required to protect the information to New Zealand standards.
8. How do we secure your personal information?
We will take all reasonable steps to ensure that your personal information is protected against unauthorised access, processing, erasure, loss or use.
If a privacy breach occurs that has caused, or is likely to cause, serious harm to an affected individual, we will notify the Office of the Privacy Commissioner and any affected individuals as soon as practicable after becoming aware of it, in accordance with the Privacy Act.
9. Accessing and correcting your personal information
You may contact us to seek access to or seek to correct personal information which we hold about you. There are certain exemptions under the Privacy Act which may apply to personal information access and correction requests. We may require that the person requesting access or correction provide suitable identification We will respond to your request as soon as reasonably practicable and, in any event, within 20 working days. We generally will not charge you for accessing your personal information, although in limited cases we may charge a reasonable amount for making the information available. If we refuse a request to correct your personal information, you may ask us to attach to the information a statement of the correction you sought. Requests for access to, or to correct, personal information held by us should be addressed to the Privacy Officer at privacy@timberlink.com.au or Level 2, 37 Dalmore Drive, Scoresby, Victoria, Australia, 3179.
10. Complaints
If you have any complaints about our personal information handling practices, please contact the Privacy Officer at privacy@timberlink.com.au or Timberlink Australia, Level 2, 37 Dalmore Drive, Scoresby, Victoria, Australia, 3179. Our complaints process is as follows:
- We will contact you in writing, stating our understanding of the conduct being complained about; that we are conducting an investigation; and requesting that you outline your desired outcome.
- We may provide the information you provide and details of the complaint to relevant service providers to assist in dealing with the complaint.
- Once our investigation is complete, we will notify you in writing. If we have not complied with the relevant sections of our Privacy Policy or the Privacy Act, we will attempt to rectify the breach in an appropriate manner. Any systemic issues identified by the investigation will be considered and rectified where appropriate.
- Once our investigation into the complaint is finalised, we may retain a record of the complaint, the investigation and any action taken to rectify any breach. On request, we will delete your personal information. The information retained may be used by us for internal review of our practices.
If you are not satisfied with our response to a complaint, you have the right to contact the Office of the Privacy Commissioner (New Zealand). Contact details can be found at www.privacy.org.nz.

