DBHM Custodial Pty Ltd t/a EFI Hardware (herein referred to as "EFI Hardware", "we", "us" or "our") is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.
We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.
A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at [oaic.gov.au](https://oaic.gov.au).
For customers inside the EU/UK GDPR click
here.
What is Personal Information and why do we collect it?
Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect include names, billing and delivery addresses, email addresses, telephone numbers, order details, purchase history, and other information necessary to process and fulfil orders.
This Personal Information is obtained in many ways including when you provide it directly to us, via our website [efihardware.com](https://efihardware.com), through the creation of customer accounts, order placement, correspondence by email, telephone or facsimile, interactions with us on social media, browser cookies, analytics tools, and from third-party service providers.
We collect your Personal Information for the primary purpose of providing our products and services, processing and fulfilling orders, managing customer relationships, providing customer support, marketing communications, and meeting our legal and regulatory obligations.
Payment Information
EFI Hardware does not store or process full credit card or payment card details. Payments made through our website are processed securely by trusted third-party payment gateways including PayPal, E-Way, Visa & Mastercard.
These providers manage privacy and payment information in accordance with their own privacy policies and applicable security standards.
Third-Party Service Providers
We may disclose Personal Information to trusted third-party service providers where required to operate our business, including but not limited to:
These providers are only given access to Personal Information necessary to perform their services.
Overseas Disclosure
Some third-party service providers may store or process Personal Information outside Australia. Where this occurs, we take reasonable steps to ensure that such providers comply with the Australian Privacy Principles or equivalent privacy protections.
Cookies and Analytics
Our website uses cookies and similar technologies to support essential site functionality, shopping cart operation, analytics, and marketing insights. You can choose to disable cookies through your browser settings, however this may affect website functionality.
Disclosure of Personal Information
Your Personal Information may be disclosed where required to deliver our services, comply with legal obligations, or where you have provided consent.
Security of Personal Information
Your Personal Information is stored in an encrypted manner that reasonably protects it from misuse, loss, and unauthorised access, modification, or disclosure.
When Personal Information is no longer required, we take reasonable steps to destroy or permanently de-identify it. Records may be retained for a minimum of seven (7) years to comply with legal, taxation, and accounting obligations.
Access and Correction
You may request access to the Personal Information we hold about you and request corrections where necessary. We may require identification before processing such requests.
Policy Updates
This Privacy Policy may be updated from time to time without notice and will be available on our website.
Last Updated 08/06/2026
Privacy Policy Complaints and Enquiries Please direct your correspondence in writing to:
EFI Hardware
2 Chang Loop
Croydon South, Victoria
Australia 3136
info@efihardware.com
+61 3 9873 5955
European Union and United Kingdom Data Protection Rights (GDPR) Where we offer goods or services to individuals located in the European Union (EU) or the United Kingdom (UK), we process Personal Information in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK GDPR.
Lawful Basis for Processing
When processing Personal Information of individuals located in the EU or UK, we rely on one or more of the following lawful bases:
- Performance of a contract: Where processing is necessary to fulfil orders, provide products or services, or respond to enquiries.
- Legitimate interests: Where processing is necessary for the operation, security, and improvement of our business and website, provided such interests are not overridden by your rights.
- Consent: Where required, including for certain marketing communications or the use of non essential cookies.
- Compliance with legal obligations: Where we are required to retain or disclose information under applicable law.
Your GDPR Rights
If you are located in the EU or UK, you may have the following rights in relation to your Personal Information:
- The right to access the Personal Information we hold about you
- The right to request correction of inaccurate or incomplete information
- The right to request erasure of your Personal Information (“right to be forgotten”)
- The right to restrict processing in certain circumstances
- The right to object to processing based on legitimate interests
- The right to data portability where processing is based on consent or contract and carried out by automated means
- The right to withdraw consent at any time where processing is based on consent
These rights are not absolute and may be subject to legal limitations.
International Transfer
As an Australian business, we may transfer Personal Information outside the EU or UK, including to Australia and to third-party service providers located in other countries.
Where required, we take reasonable steps to ensure that appropriate safeguards are in place to protect Personal Information in accordance with applicable data protection laws.
Lodging a Complaint (EU/UK)
If you are located in the EU or UK and believe we have breached applicable data protection laws, you have the right to lodge a complaint with your local supervisory authority.
Updates
We may update this Privacy Policy from time to time without notice to reflect changes in technology, legal requirements, or our services.
Last Updated 08/06/2025