A restricted key order form should collect enough information for a locksmith to identify the key system, confirm authority, understand who is requesting the key, track payment and fulfil the order correctly. If you are replacing paper processes, see why restricted key orders should not rely on paper forms.

That sounds simple, but restricted key orders are rarely just a basic product request.

They may involve a requester, an authorised signatory, a payer, a collector, a property manager, a building manager and the locksmith responsible for the restricted key system.

This is why restricted key order forms need to be more structured than a normal contact form.

Why restricted key order forms matter

Restricted keys are part of controlled key systems. A locksmith usually needs to confirm that the person requesting the key is authorised, or that the request has been approved by someone who is authorised. The Locksmiths Guild of Australia Code of Practice is one local industry reference that describes restricted key procedures as including records of keys cut and the identity of the people receiving them.

A good restricted key order process should help answer:

  • what key is being requested?
  • which restricted key system does it belong to?
  • who is requesting the key?
  • who is authorised to approve the request?
  • who is paying?
  • how will the key be collected or delivered?
  • what record needs to be kept?

If the form does not collect this clearly, the locksmith team may need to chase missing information before the order can be processed.

Basic requester details

A restricted key order form should identify the person submitting the request.

This commonly includes:

  • full name
  • business or organisation name, if applicable
  • phone number
  • email address
  • billing address, if required
  • relationship to the site or key system

The requester may be a tenant, resident, employee, property manager, owners corporation manager, facility manager, business owner or authorised signatory.

The form should make this role clear.

Site or property details

The locksmith needs to know which site, building or property the key relates to.

Useful fields may include:

  • site or building name
  • street address
  • apartment, unit, lot or tenancy number
  • company or organisation name
  • property manager or building manager details
  • relevant branch or collection location, where applicable

For apartments and managed buildings, the property details are often just as important as the person requesting the key.

Restricted key system details

The form needs enough information for the locksmith to identify the restricted key system and the specific key being ordered.

This may include:

  • restricted key system number
  • key number or key code
  • rank or key level, if used
  • key type
  • quantity required
  • existing key markings
  • lock or cylinder location, if cylinders are also being requested
  • notes about the door, area or access level

A good form should explain where customers may find key numbers or system markings, without encouraging them to share sensitive information through insecure channels. For generic form tools, see can locksmiths use online forms for restricted key orders?.

Authorised signatory details

Restricted key systems usually rely on authorised people who can approve key orders.

A restricted key order form may need to capture:

  • authorised signatory name
  • authorised signatory business or organisation
  • authorised signatory phone number
  • authorised signatory email
  • signature, where the locksmith requires it
  • approval date
  • whether the requester is the authorised signatory
  • whether approval needs to be sent to someone else

This is one of the main reasons restricted key forms can become complicated.

The person requesting the key may not be the person authorised to approve it.

Requester, approver, payer and collector may be different people

A restricted key order form should not assume the same person handles every part of the order.

In real workflows:

  • the requester may be a tenant
  • the approver may be an owners corporation manager
  • the payer may be a property manager or account holder
  • the collector may be a nominated person
  • the locksmith may need to notify someone else when the order is ready

A good process should separate these roles clearly.

This is difficult to manage with a flat PDF form, especially if the order needs to move between several people.

Payment information

Restricted key order forms often need to capture how the order will be paid.

Common payment options may include:

  • online card payment
  • credit card over the phone
  • account payment
  • pro forma invoice
  • EFT or bank transfer
  • payment on collection
  • cash or EFTPOS in store
  • purchase order
  • company account code

The important point is that payment status should be tracked separately from approval status.

Payment warning: A restricted key order form should not ask customers to write full card details into a PDF or email attachment. A better process uses a payment provider and keeps only the payment status with the order.

An order may be approved but not yet paid.

An order may be on account and ready to process.

An order may require a pro forma invoice before the customer pays.

Why collecting card details on PDF forms is risky

A completed restricted key form may contain a customer’s full name, address, phone number, email address, signature and building access request. If it also collects card details, the risk increases significantly.

Some paper and PDF restricted key order forms ask customers to write card details directly onto the form.

This may include:

  • card number
  • expiry date
  • CCV
  • cardholder name
  • cardholder signature

This creates avoidable problems.

A form containing card details becomes sensitive. Staff then need to decide how it should be handled, who can access it, whether it should be stored, how long it should be kept and how it should be destroyed.

For general privacy context, the OAIC APP 11 guidance explains reasonable steps for protecting personal information and destroying or de-identifying it when it is no longer needed.

Emailing that form does not remove the risk. The message may be encrypted while travelling between mail systems, but the attachment can still remain in inboxes, sent folders, shared mailboxes, local mail apps, archives, backups or forwarded approval threads after delivery.

It can also create confusion because the same form may contain both the order record and payment card details. The locksmith may need to retain a record of the restricted key order, but may not want to retain card details.

A better process is to separate payment processing from order record keeping.

Instead of asking customers to write card details on a form, an online workflow can allow payment to be processed through a payment provider while the order record keeps only the relevant payment status.

Delivery and collection details

Restricted key orders often need clear fulfilment instructions.

A form may need to capture:

  • collection or delivery preference
  • nominated collector name
  • collector phone number
  • delivery address
  • postal method
  • courier instructions
  • branch or location for pickup
  • whether identification is required on collection
  • notification preference when the key is ready

For controlled key systems, collection details matter because the person receiving the key may need to be recorded or verified.

Order status and processing notes

A paper form usually records the request, but it does not always make the status clear.

A better restricted key order process should show whether the order is:

  • submitted
  • awaiting approval
  • approved
  • awaiting more information
  • awaiting payment
  • paid
  • on account
  • ready to cut
  • ready for collection
  • dispatched
  • completed
  • cancelled or rejected

This helps locksmith staff understand what needs action.

It also reduces follow-up from customers asking whether the order has been approved, paid for or processed.

Office and workshop records

Many locksmiths also need internal fields that customers do not see.

These may include:

  • signature verified
  • records checked
  • key register updated
  • key cut
  • key stamped
  • customer notified
  • payment confirmed
  • staff initials
  • order completion date
  • workshop notes

These internal steps are another reason a simple PDF form can become awkward. The customer-facing form, approval record, payment status and workshop process may all need to be connected.

What a good restricted key order form should include

At minimum, a restricted key order process should consider:

  • requester details
  • site or building details
  • key system details
  • key number or key code
  • quantity required
  • authorised signatory details
  • approval status
  • payment method
  • payment status
  • delivery or collection method
  • nominated collector or recipient
  • customer notifications
  • order notes
  • internal processing records

Not every locksmith needs every field on every order.

The better approach is to use a structured workflow that shows the right fields for the right situation.

Why online workflows are better than static forms

PDF and paper forms can collect information, but they do not manage the order.

They do not easily handle:

  • conditional fields
  • approval requests
  • separate requester and approver details
  • separate payer details
  • online payment processing
  • payment status tracking
  • customer notifications
  • staff handover
  • audit history
  • order status
  • record retention

An online workflow can guide the customer through the required information and give staff a clearer view of what stage the order is at.

Online payments should process payments, not just collect details

There is an important difference between collecting payment details and processing payment online.

A PDF form that asks for card details is still a manual process. It creates sensitive paperwork and leaves staff to process the payment separately.

A better online ordering process can connect the order to a payment provider so the customer pays through a proper payment flow. The locksmith can then see the payment status without storing card details on the order form.

For locksmiths, this can reduce manual payment handling and help orders arrive closer to being ready to action.

Where KeyOrders fits

KeyOrders is being developed to help locksmiths move restricted key orders away from paper forms, PDFs and manual follow-up.

It is designed to give locksmith businesses a branded online ordering process for restricted key requests, with support for:

  • structured order details
  • authorised approval workflows
  • separate requester, approver and payer information
  • online payment status
  • collection and delivery instructions
  • customer notifications
  • fulfilment tracking
  • order records

For locksmiths, KeyOrders can provide a professional online ordering experience without requiring the business to build a custom transactional website. For a broader workflow view, see best way for locksmiths to manage restricted key orders online.

For customers, tenants, property managers and authorised signatories, it can make restricted key ordering clearer and easier to follow.