Privacy policy
How we collect, use, store and protect your personal information when you use this website or order a report.
Last updated 17 September 2026
- Operated by
- EstiFlow Estimates Pty Ltd
- ABN
- 46 696 116 435
- Governing law
- New South Wales, Australia
EstiFlow Estimates Pty Ltd runs CouncilQS ("we", "us", "our"). We protect your personal information under the Privacy Act 1988 and the Australian Privacy Principles. This policy explains what we collect, why, and what you can ask us to do with it.
1. What we collect
1.1 Your details
- Your name, email address and phone number
- Your company and state, if you give them
- The applicant's legal name and the project details you enter when you order
- Your sign-in details, if you create an account
- Payment details, which our payment provider Stripe handles. We never see or store your card number.
1.2 Your project documents
- Plans, the Statement of Environmental Effects, the BASIX certificate and any other documents you upload
- These can include property addresses, owner names and other project information
1.3 How you use the website
- Browser type, IP address and the pages you visit, collected by analytics tools
- Messages you send through the contact form
2. How we use it
- Preparing your report. We use your documents and details to measure, price and write the report. The quantity surveyor who certifies it reviews them.
- Keeping you informed. We email you about your order, your report and any questions we have.
- Payment. We keep transaction references and invoices, not card details.
- Improving the service. We use de-identified, combined information to improve how reports are prepared.
3. Service providers
We use trusted providers to host this website, store files, process documents, take payments and send email. Document pages may be processed by secure third-party services for classification and data extraction. We require every provider to use your information only to deliver the service.
4. Storage, security and overseas providers
- Your information is encrypted in transit and at rest.
- Access to production systems is limited to authorised people, with multi-factor sign-in.
- Some of our providers store or process information outside Australia, including in Singapore, Japan and the United States.
5. How long we keep it
| Information | How long |
|---|---|
| Uploaded documents | 12 months after the report is delivered |
| Unpaid orders and the documents uploaded to them | Deleted within 14 days |
| Signed reports | 12 months after delivery, and longer where professional record keeping requires it |
| Account details | Until you ask us to delete them |
| Payment records | 7 years |
6. Who we share it with
We do not sell or trade your personal information. We share it only with:
- The certifying quantity surveyor, to review and sign your report
- Stripe, to take your payment
- Our service providers, to store files, process documents and send email
- Authorities, where Australian law or a court order requires it
7. Your rights
Under the Australian Privacy Principles, you can ask us to:
- Give you access to the personal information we hold about you
- Correct information that is wrong
- Delete your information
- Stop sending you marketing email
8. Deleting your data
Email info@councilqs.com.au to ask us to delete your data. We delete documents and reports within 30 days of your request, except records the law or professional rules require us to keep.
9. Cookies
We use essential cookies to keep you signed in. Where analytics or advertising tags run on this website, such as Google Analytics, Google Tag Manager or the Meta Pixel, they set cookies to measure visits and advertising. You can block non-essential cookies in your browser settings.
For Google advertising measurement, we retain an ad-click reference for up to 30 days and associate it with an enquiry or order. We may send Google that reference, a non-identifying transaction reference, the event time and the amount paid to measure advertising results. Names, email addresses, phone numbers, plans and order-access links are not included in these Google conversion events. Browser Do Not Track and Global Privacy Control signals disable the Google advertising tag.
10. Complaints
If you have a concern about how we handle your information, email us first and we will respond. If you are not satisfied, you can contact the Office of the Australian Information Commissioner.
11. Changes to this policy
We may update this policy from time to time. The latest version is always on this page.
Contact
For privacy questions, or to access or delete your data, email info@councilqs.com.au.