Privacy

What we collect

When you place an order we collect your name, email address, shipping and billing addresses, phone number if you provide one, and payment confirmation from our payment processor. We never store full card numbers on our systems.

If you create an account we also keep a profile (name, phone, marketing preference) and any addresses you save. Newsletter signup records only the email address you submit and the fact that you consented.

We record pages viewed, device type, and city so we can understand how the shop is used. If you sign in or place an order, that visit can be linked to your account.

How we use it

Order data is used to fulfil and support your purchase, prevent fraud, and meet tax and accounting obligations. Marketing email is sent only when you have given explicit consent — never because you bought something. Site usage stays on our systems and is not sold.

We use trusted processors under contracts that restrict how they may use the data: Stripe (payments), Supabase (database and authentication), Vercel (hosting), and Resend (transactional and consented marketing email, when configured). Some of these services store data outside Australia, including in the United States.

How long we keep it

Paid orders and the addresses attached to them are kept for legal and accounting periods. Account profiles and saved addresses stay until you change or delete them. Newsletter records stay until you unsubscribe. Site-usage records are kept for 90 days.

Your choices

You can update your profile, addresses and marketing preference in your account, unsubscribe from the studio list using the link in those letters, or contact us to request access, correction or deletion where the law allows.

Contact

Privacy questions can be sent through the contact form on this site. We will respond to the email address you provide. If the Privacy Act applies to us and you are not satisfied, you may also contact the Office of the Australian Information Commissioner (oaic.gov.au).