Effective 11 May 2026
Privacy Policy
Section 01
Who we are
This policy applies to Factory2Key Pty Ltd (F2K) and the websites we operate, including the F2K investor portal at factory2key.com.au. F2K is an Australian company with registered office in Australia.
Privacy contact: dennis@factory2key.com.au.
Section 02
What we collect and why
We collect personal information only through forms you fill in on our website, and only for the purpose stated at the point of collection. We do not buy lists, scrape contacts, or collect personal information passively.
Each form on our site collects slightly different information. They are listed below.
Seafields Estate — Registration of Interest
- Purpose
- To contact you about Seafields Estate (Waggrakine WA): updates on the project, your selected lot(s), and to discuss next steps. No deposit, no obligation.
- Fields collected
- Name, email, phone (optional), suburb and postcode (optional), buyer profile, current housing, purchase timeline, finance status, lot selection, price preference, referrer details (optional), notes.
- Recipients
- Stored in Supabase (Australian region). Forwarded to GoHighLevel CRM. Confirmation email sent via Resend. F2K admin staff (Dennis McMahon, Uwe Jacobs) receive submission notifications.
- Retention
- Held for up to 24 months from last contact, then deleted. You can request earlier deletion at any time (see "Your rights" below).
Branscombe Estate — Registration of Interest
- Purpose
- To contact you about Branscombe Estate (Claremont TAS): updates on the project, your selected home(s), and to discuss next steps. No deposit, no obligation.
- Fields collected
- Name, email, phone (optional), suburb and postcode (optional), buyer profile, current housing, purchase timeline, finance status, unit selection, price preference, referrer details (optional), notes.
- Recipients
- Stored in Supabase (Australian region). Forwarded to GoHighLevel CRM. Confirmation email sent via Resend. F2K admin staff (Dennis McMahon, Uwe Jacobs) receive submission notifications.
- Retention
- Held for up to 24 months from last contact, then deleted. You can request earlier deletion at any time (see "Your rights" below).
Hemp Homes for Eco-Communities — Waitlist
- Purpose
- To contact you about the Hemp Homes for Eco-Communities program: progress updates from concept through engineering, prototyping and first install. No deposit, no obligation.
- Fields collected
- Name, email, phone (optional), suburb/state/postcode (optional), interest profile (I am a..., situation, timeframe, finance status, how you heard), regions of interest, preferred Joey60 configuration, journey interests, what drew you (optional), referrer details (optional), notes. We also store a SHA-256 hash of your IP address (raw IP is never stored) for abuse forensics and rate limiting.
- Recipients
- Stored in Supabase (Australian region). Forwarded to GoHighLevel CRM. Confirmation email sent via Resend. F2K admin staff (Dennis McMahon, Uwe Jacobs) receive submission notifications.
- Retention
- Held for up to 24 months from last contact, then deleted. You can request earlier deletion at any time (see "Your rights" below).
Section 03
How we store and protect it
Submissions are stored in Supabase (Postgres) in the Australian region. Database access is restricted to the F2K server-side API — anonymous users never access the database directly. Sensitive environment credentials (API keys, service role keys) are not exposed to the browser.
We hash IP addresses (SHA-256 with a server-side salt) before storing them; raw IP addresses are never stored or logged.
Section 04
Australian Privacy Principles
We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). In particular:
- APP 1 — we maintain this open and transparent privacy policy and notify you at the point of collection.
- APP 3 — we only collect information that is reasonably necessary for our functions.
- APP 5 — at the point of collection we tell you what we collect, why, and who receives it.
- APP 6 — we use your information only for the stated purpose unless you consent otherwise.
- APP 11 — we take reasonable steps to protect your information from misuse, interference, and unauthorised access.
- APP 12 & 13 — you can request access to and correction of your personal information at any time.
Section 05
Your rights
You can ask us to access, correct, or delete the personal information we hold about you. We will respond within 30 days.
Email dennis@factory2key.com.au with the form you submitted (Seafields ROI, Branscombe ROI, or Hemp Homes waitlist) and the email address you used. You don't need to explain why.
Section 06
Complaints
If you're unhappy with how we've handled your personal information, email us first — we want to fix it.
If we don't resolve it to your satisfaction, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC): oaic.gov.au.
Section 07
Changes to this policy
We'll update the effective date when this policy changes. We won't reduce your existing protections without contacting you first.