Privacy Policy

OzTechShed (TODO: ABN — add before launch, TODO: business address — add before launch) respects your privacy. This policy explains what personal information we collect through this website and our store, why we collect it, how we handle it, and how you can ask a question or make a complaint. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

Information you give us

• Orders. When you place an order we collect your name, email address, optional phone number, delivery and billing addresses, and the contents and value of your order. We need this to fulfil and deliver your order, handle returns and keep tax records.
• Messages. If you use the contact form or email us, we collect your name, email address and the content of your message so we can reply.
• Newsletter. If you subscribe, we collect your email address and the date you subscribed. We only send the newsletter with your consent, and every email includes an unsubscribe link as required by the Spam Act 2003 (Cth).

Information collected automatically

Like most websites, our hosting provider (Cloudflare) logs technical information such as IP address, browser type, pages requested and timestamps. We use this for security, fraud prevention and aggregate traffic reporting. We do not run advertising trackers and we do not sell personal information.

Payments and Stripe

Card payments are processed by Stripe. Card numbers are entered on Stripe's systems and are never stored on our servers. We receive limited information back from Stripe — typically the payment status, a payment reference, and the card brand and last four digits. Stripe handles your payment information under its own privacy policy (stripe.com/privacy). We keep order records for tax and warranty purposes.

Cookies and local storage

We use a small amount of browser storage to remember your theme preference and the contents of your cart. Stripe may set cookies during checkout to keep the payment session secure. We do not run third-party advertising cookies.

TODO: analytics — if an analytics product is added, name it here, describe what it collects and how visitors can opt out

Who we share it with

We share personal information only where it is needed to run the business:

• Stripe — payment processing and tax calculation
• Cloudflare — hosting and network security
• Australia Post or Sendle — delivery labels and tracking
• our email and newsletter providers — transactional email and newsletters TODO: name the newsletter provider once chosen
• our accountant or professional advisers, where required
• government agencies, where required by law

We do not sell or rent personal information.

Overseas disclosure

Some providers, including Cloudflare and Stripe, store or process data outside Australia, including in the United States and the European Union. Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, for example through the contractual protections those providers offer.

How long we keep it

• Order and tax records: at least seven years, as required by Australian tax law.
• Contact messages: up to 24 months, then deleted.
• Newsletter subscriptions: until you unsubscribe.
• Server logs: retained by our host for a short period, then rotated.

When information is no longer needed for these purposes, we delete or de-identify it.

Access, correction and deletion

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@oztechshed.com.au and we will respond within a reasonable period, usually within 30 days. Some records, such as completed order records, must be kept for tax purposes — if that applies we will explain why.

Security

We use HTTPS across the site, keep access to systems restricted, store secrets in encrypted environment variables and choose providers with strong security track records. No online system can be guaranteed completely secure, so please contact us if you believe your information has been compromised.

Complaints

If you have a concern about how we have handled your personal information, contact us first at hello@oztechshed.com.au so we can try to resolve it. If you are not satisfied with the outcome, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it last changed, and material changes will be noted on this page.

Contact

Questions about privacy can go to hello@oztechshed.com.au, or by post to the business address above.