Privacy Policy

When you order, we collect your name, email address, delivery address, phone number and the contents of your order. If you email us, we keep that correspondence so we have context if you contact us again.

We never see or store your full card number. Card data is captured and processed by our payment provider under their own security controls. What we receive back is a confirmation, the last four digits and the card type.

Our platform and analytics tools record your IP address, browser and device type, the pages you visit and how you arrived at the site. This is aggregate behavioural data used to understand how the store is performing.

Cookies keep your cart intact between pages, remember preferences, and let us measure traffic. You can block or delete them in your browser settings, though the cart and checkout will not function correctly without the essential ones.

To process and deliver your order, to contact you about that order, to handle returns and warranty claims, to detect fraudulent transactions, and to meet our record-keeping obligations under Australian law.

We only send marketing email to people who have opted in. Every one of those emails has a working unsubscribe link, and unsubscribing takes effect immediately. Transactional emails about an order you've placed are not marketing and will still be sent.

Only the suppliers who need it to do their job: our ecommerce platform, our payment provider, the delivery carrier handling your parcel, and our email platform if you've subscribed. Each is bound by its own privacy obligations.

We do not sell personal information. We do not rent or trade contact lists. We do not pass your details to unrelated third parties for their own marketing.

We may disclose information where we are legally compelled to — a court order, a regulator's lawful request, or to establish or defend a legal claim.

Some of our service providers store data on servers outside Australia, including in the United States and the European Union. Where that happens we take reasonable steps to ensure the provider handles the information consistently with the Australian Privacy Principles.

Order and transaction records are retained for seven years to satisfy Australian tax and business record requirements. Marketing subscriptions are kept until you unsubscribe. General enquiries are cleared periodically once resolved.

The site runs over encrypted connections, access to customer data is limited to staff who need it, and administrator accounts require two-factor authentication. No system is completely secure, and we don't claim otherwise.

You can ask us what personal information we hold about you and we'll provide it. You can ask us to correct anything inaccurate, and you can ask us to delete information we're not legally required to retain. Contact us through the Contact Us page.

If a breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

This store is intended for adults. We do not knowingly collect personal information from anyone under eighteen. If we learn we have, we delete it.

Contact us first and we'll investigate. If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.

We may revise this policy. The current version is always the one published on this page, and the review date at the top tells you when it last changed.