Privacy policy

When you place an order we record your name, email address, phone number and shipping address, together with the items ordered, the amount paid and the currency. Once your parcel is dispatched we also store the carrier, tracking number and tracking link.

We keep a short internal note against some orders — for example a delivery instruction you have given us, or the reason a piece was returned. Nothing else about you is recorded.

Card numbers, expiry dates and CVC codes are never sent to our servers. Payment is taken on Stripe’s own hosted checkout page, and Stripe returns only a payment reference and a confirmation that the charge succeeded. We cannot see, store or recover your card details, and neither can anyone who gains access to our systems.

This store runs no advertising pixels, no analytics scripts and no third-party trackers. We do not build a profile of you and we do not track you across other websites.

Your shopping bag is held in your own browser’s local storage so it survives a page refresh — it stays on your device and is never transmitted to us until you check out. The single cookie this site sets is a sign-in cookie for staff using the admin dashboard; it is not set for customers.

We use your details to take payment, pack and ship your order, send you order and dispatch confirmations, answer support enquiries, and honour the 24-month warranty. We also keep order records to meet Australian tax and consumer-law obligations.

We do not send marketing email unless you have asked us to, and we never sell, rent or trade personal information to anybody.

Your information goes to three kinds of recipient, and only as far as each one needs it: Stripe, to process the payment; the courier carrying your parcel, which receives your name, address and phone number so it can deliver; and our email provider, to send the confirmations you have asked for.

Some of these providers process data outside Australia, including in the United States. Where we ship internationally — New Zealand, the United States, the United Kingdom and Canada — your address is necessarily disclosed to carriers and customs authorities in the destination country.

Order records are retained for seven years to satisfy Australian tax and record-keeping requirements. If you ask us to erase your information sooner, we will remove everything we are not legally required to retain, and reduce what remains to the minimum needed for those obligations.

Order data is held in an access-controlled database that only store staff can reach, and admin access is protected by an individual password and an expiring session. Payment data never enters our systems at all, which removes the most sensitive category of information from the equation entirely.

You may ask us for a copy of everything we hold about you, ask us to correct anything inaccurate, or ask us to erase your details. Email bjvanau@icloud.com with your order number and we will respond within 30 days at the outside, and usually within one business day.

If you are unhappy with how we have handled your information, tell us first — we would rather fix it. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes we will update the date at the top of this page. Material changes affecting orders already placed will be emailed to the customers concerned.