Privacy Policy

Ordering gives us your name, delivery address, email address, phone number and the contents of the order. Emailing us adds that correspondence, which we keep so we have context if you write again.

We never see or store your full card number. Card data goes directly to our payment provider under their own security controls. We receive a result, the card type and the last four digits.

Our platform and analytics record IP address, device and browser type, referring source and the pages you view. This is used in aggregate to understand how the store performs.

Cookies keep your cart between pages, remember preferences and support analytics. You can block or clear them in your browser, though the cart and checkout will not work properly without the essential ones.

To process and deliver orders, communicate with you about them, handle returns and warranty claims, detect fraudulent transactions, improve the store, and meet our record-keeping obligations under Australian law.

Marketing email goes only to people who have opted in, and every one carries a working unsubscribe link that takes effect immediately. Emails about an order you have placed are transactional rather than marketing and continue regardless.

Only providers who need it to do their job: our ecommerce platform, payment provider, the carrier delivering your parcel, and our email platform if you have subscribed. Each is bound by its own privacy obligations.

We do not sell personal information. We do not rent or trade contact lists. We do not pass your details to unrelated businesses for their marketing.

We may disclose information where legally compelled, including a court order, a lawful regulatory request, or where necessary to establish or defend a legal claim.

Some providers store data on servers overseas, including in the United States and the European Union. Where that happens we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

Order and transaction records are retained for seven years to satisfy Australian tax and business record requirements. Marketing subscriptions are kept until you unsubscribe. General enquiries are cleared periodically once resolved.

The site runs over encrypted connections, access to customer records is limited to those who need it, and administrator accounts require two-factor authentication. No system is perfectly secure and we do not claim ours is.

You can ask what personal information we hold and we will provide it. You can ask us to correct anything inaccurate, and to delete anything we are not legally required to keep. Requests go through the Contact Us page and are answered within thirty days.

Where a breach occurs that is likely to result in serious harm, we will notify the individuals affected and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

This store is intended for adults. We do not knowingly collect personal information from anyone under eighteen, and delete it where we become aware that we have.

Contact us first and we will investigate. If our response does not resolve it you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.

This policy may be revised. The version published on this page is always the operative one, and the date at the top shows when it last changed.