Brand Surge (CEJ Australia Pty Ltd, ABN 71 688 987 019)
Effective Date: 1 April 2026
Last Updated: 1 October 2026
1. Introduction
CEJ Australia Pty Ltd (ABN 71 688 987 019) trading as Brand Surge (Brand Surge, we, us or our) respects your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with the website https://www.brandsurge.com.au (Website) and our promotional merchandise and clothing business.
We handle personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the 13 Australian Privacy Principles (APPs) set out in that Act. We have adopted this approach as a matter of good practice for our customers, and to prepare for reforms to the Privacy Act, including the removal of the small business exemption, which is scheduled to take effect on 10 December 2026.
2. Scope of this Policy
This Policy applies to personal information we collect through the Website, by telephone, by email, through our social media pages, and in the course of quoting, producing and delivering Orders.
This Policy does not apply to the practices of third parties that we do not control, including third-party websites you may access through links on the Website. We encourage you to read the privacy policies of any third-party service you use.
3. What is Personal Information
Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether recorded in a material form or not.
4. Kinds of Personal Information We Collect
The kinds of personal information we may collect include your name, business name, postal and delivery address, email address, telephone number, order history and preferences, Artwork and design files you provide, payment-related information (such as transaction identifiers, though not full card details, which are handled by our payment providers), and information generated by your use of the Website, including through cookies and similar technologies.
We do not intentionally collect sensitive information (as defined in the Privacy Act) and ask that you do not include sensitive information in Artwork, correspondence or Order details unless it is genuinely necessary.
5. How We Collect Personal Information
We collect personal information directly from you when you place an Order, request a quote, contact us, subscribe to marketing communications, or otherwise interact with the Website.
We may also collect personal information automatically through cookies and similar technologies when you browse the Website, as described in our Cookie Policy.
Where reasonably practicable, we collect personal information directly from you. If we collect personal information about you from a third party, such as a colleague placing an Order on your behalf, we will take reasonable steps to notify you in accordance with this Policy.
6. Why We Collect, Hold, Use and Disclose Personal Information
We collect, hold, use and disclose personal information for purposes including: providing quotes and processing Orders; producing and delivering Products, including artwork proofing; processing payments; providing customer service and responding to enquiries; sending order updates and service communications; sending marketing communications, where you have consented or where otherwise permitted by law; improving the Website and our services; complying with our legal and regulatory obligations; and resolving disputes and enforcing our Terms and Conditions.
7. Direct Marketing
We may send you marketing communications about our Products and promotions by email, using our email marketing platform, Omnisend. We will only do so where you have consented to receive such communications, or where you are an existing customer and the communication relates to similar products or services, in accordance with the Spam Act 2003 (Cth).
Every marketing email includes an unsubscribe mechanism. You may opt out of marketing communications at any time by using that mechanism or by contacting us using the details in section 23 (Complaints and How to Contact Us).
We, or a third-party provider engaged on our behalf, may also use business email platforms, including Resend, to send business development and marketing outreach emails to prospective customers, including where that contact information has been sourced from publicly available business listings or provided to us directly. These communications are also sent in accordance with the Spam Act 2003 (Cth) and include an unsubscribe or opt-out option.
8. Cookies and Tracking Technologies
The Website uses cookies and similar tracking technologies to operate our online store, remember your preferences, and understand how visitors use the Website. Further detail is set out in our Cookie Policy, which forms part of this Policy.
9. Website Hosting and E-Commerce Platform
The Website and our online store are hosted and operated using the BigCommerce e-commerce platform. BigCommerce processes personal information as part of providing that platform, including order, customer and product data, in accordance with its own privacy and security practices.
10. Payment Processing
Payments made through the Website are processed by Stripe and PayPal, including where you choose to pay using a mobile wallet such as Apple Pay or Google Pay, which is processed as a payment method within those providers' own systems. When you make a payment, your payment details are collected and processed directly by these payment providers in accordance with their own privacy policies. We do not receive or store your full card or account details.
11. Analytics
We use Google Analytics to understand how visitors use the Website, including pages visited, time spent on the Website, and general location and device information. Google Analytics uses cookies to collect this information, which is used in aggregated and anonymised form to help us improve the Website.
12. Email Marketing and Automation
We use Omnisend to manage our email marketing and customer communication, including newsletters, order updates and promotional offers. Omnisend processes the contact and order information necessary to deliver these communications.
13. Live Chat
We use Tidio to provide live chat support on the Website. If you use live chat, Tidio processes the information you provide during that conversation, including your name, contact details and the content of your enquiry, to enable us to respond to you.
14. Accounting and Business Systems
We use Xero for accounting and invoicing, and Microsoft 365 for email, document storage and internal business systems. These platforms may process personal information such as customer names, contact details, order and invoice records, and correspondence, as part of our normal business operations.
15. Disclosure to Third Parties Generally
We disclose personal information to the third-party service providers described in sections 9 to 14 of this Policy, to the extent necessary for them to provide their services to us. We may also disclose personal information to couriers and freight providers to arrange delivery of your Order, to our professional advisers where necessary, and to any person where required or authorised by law.
We also use Resend, a third-party email delivery platform, to send certain business development and marketing outreach emails on our behalf, and industry-standard design and file-handling software, including Adobe applications, to prepare and process Artwork for production.
We do not sell your personal information to third parties.
16. Overseas Disclosure of Personal Information
Some of the third-party service providers we use, including BigCommerce, Stripe, PayPal, Google Analytics, Omnisend, Tidio, Resend and Microsoft 365, operate infrastructure and support services outside Australia, including in countries such as the United States. As a result, personal information we hold may be stored, accessed or processed on servers located overseas.
Before disclosing personal information to an overseas recipient, we take reasonable steps, so far as is practicable, to ensure that the overseas recipient handles that information consistently with the APPs, including by relying on the data protection and security commitments of established international service providers. However, because these providers operate global cloud infrastructure, we are not always able to specify the precise country in which particular information is held at a given time.
By providing us with your personal information, you acknowledge that it may be disclosed to overseas recipients in the manner described in this section.
17. Data Quality
We take reasonable steps to ensure that the personal information we collect, use and disclose is accurate, up to date and complete. You can help us do this by keeping your account and order details current and by notifying us of any changes.
18. Data Security
We take reasonable steps to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure, including through the use of secure hosting, access controls and reputable third-party service providers. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a data breach involving personal information that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme in the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.
19. Data Retention
We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including to comply with our legal, accounting and taxation obligations, resolve disputes, and enforce our agreements. When personal information is no longer required, we take reasonable steps to destroy it or ensure it is de-identified.
20. Access to and Correction of Personal Information
You may request access to, or correction of, the personal information we hold about you by contacting us using the details in section 23 (Complaints and How to Contact Us). We will respond to your request within a reasonable time and, where we refuse access or correction, we will provide reasons for the refusal in accordance with the Privacy Act.
We may need to verify your identity before providing access to, or making changes to, your personal information.
21. Anonymity and Pseudonymity
Where it is lawful and practicable to do so, you may interact with us anonymously or using a pseudonym, for example when making a general enquiry. However, we generally need to collect your identifying information to provide a quote, process an Order or respond to a specific customer service matter.
22. Children's Privacy
The Website is intended for use by adults and businesses purchasing promotional merchandise. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can address the matter.
23. Complaints and How to Contact Us
If you have a question or concern about how we handle your personal information, or wish to make a complaint, please contact us at info@brandsurge.com.au, by post to PO Box 658, Marsden QLD 4132, or through contact us. We will investigate your complaint and aim to respond within a reasonable time.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
24. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices or in the law, including the removal of the Privacy Act's small business exemption from 10 December 2026. The updated Policy will be published on the Website with a revised "last updated" date and takes effect from the date of publication.
25. Governing Law and Contact Details
This Policy is governed by the laws of Queensland, Australia. For any privacy-related query, please contact us at info@brandsurge.com.au or by telephone on 07 3523 4809.