Legal

Privacy

DRAFT for legal review, 1 Nov 2026

Last updated: 1 Nov 2026 (draft, not yet in force)

This page explains what personal information we collect, why we collect it, who can see it, how long we keep it, and what you can ask us to do.

Who we are

The store is run by Austera Global Pty Ltd (ACN 700 870 275, ABN 41 700 870 275), an Australian company.

We follow the Australian Privacy Principles in the Privacy Act 1988 when we handle your information. [UNVERIFIED: a small business may not be bound by the Act. A lawyer should confirm whether Austera Global is bound, and whether it should opt in.]

What we collect

When you order, we collect:

your name
your email address
your delivery address
what you ordered, the prices, and the dates
a hashed version of your IP address, which is a scrambled version that is hard to turn back into the original

Your payment details go straight to Stripe. We never see or store your card details.

When you sign up to our free email list, we collect your email address.

When you reserve an order before orders open, we collect your email address and the items in your cart. We use that email only to send you a link to complete that order when orders open. No payment is taken when you reserve.

When you browse the site, we keep a simple visit log of our own: the page, the product you looked at, what you added to your cart, and the video or guide that sent you. We do not store your IP address. Each visit is labelled with a hashed visitor code made from your IP address and browser, mixed with a secret that changes every day, so it cannot be turned back into your IP address or linked from one day to the next. This log sets no cookies and uses no outside tracking company. We use it only to improve the store.

When you email us, we keep your message and our replies.

Our website host, Cloudflare, also handles technical data, such as your IP address, when you visit the site.

We treat the hashed IP address as personal information, to be safe.

[UNVERIFIED: the build team must confirm whether the site sets cookies or runs analytics. If it does, this page must list them.]

Why we collect it

We use your information to:

take, send and support your order
take payment and give refunds
email you about your order
spot fraud and abuse, and stop one person signing up many times
keep the business and tax records that Australian rules require
send you our free list emails, if you signed up

We do not sell your information. We do not give it to other businesses for their own marketing.

Who can see it

Stripe takes your payment and sends your receipt. Stripe has its own privacy policy, which explains how it handles your information.
The supplier that sends your order sees the details needed to deliver it: your name, your delivery address and the items. [UNVERIFIED: confirm what each supplier receives, for example whether they also get your email address.]
The carrier that delivers your parcel gets the delivery details from the supplier.
Cloudflare hosts our website and our order database.
The people who run this store for Austera Global can see orders so they can handle them.

Information sent overseas

Some of the companies above handle information outside Australia.

Stripe says it may need to move data to countries other than your own. It names the United States and India as examples.
Cloudflare says it mainly stores information in the United States and the European Economic Area. It says it may access it from around the world.
We ask for our order database to be kept in the Oceania region. This is a request, not a guarantee.

How long we keep it

We keep order and payment records for at least five years. Australian rules say most business records must be kept for five years.

When we no longer need information, and the law does not make us keep it, we destroy it or remove anything that identifies you.

We keep your email address on the free list until you unsubscribe. After that, we keep it only on a list of addresses we must not email.

[POLICY DECISION NEEDED: how long we keep the hashed IP address. The operator and the build team must decide.]

Our emails

We only send marketing emails to people who signed up to our list.

Every email says who we are and has an unsubscribe link.

Unsubscribing is free, and you do not need to log in. We remove you within 5 working days.

Your rights

You can ask to see the information we hold about you.

We will reply within a reasonable time, usually within 30 days.

It costs nothing to ask. If getting the information to you would cost us real money, we will tell you the amount first. The charge will not be excessive.

In some cases the law lets us refuse access, for example if it would unreasonably affect another person's privacy. If we refuse, we will tell you why.

You can ask us to correct information that is wrong or out of date. [UNVERIFIED: the rules and timing for correction under the Australian Privacy Principles were not read.]

You can ask us to delete your information. We will do this unless the law requires us to keep it, such as our order and payment records.

To do any of these, email [email protected]. We may need to check who you are first.

Keeping your information safe

Our order database is run by Cloudflare. Only people who need to see an order to handle it can reach it.

No online system is perfectly safe. If we learn that your information was exposed in a way likely to cause you serious harm, we will tell you. [UNVERIFIED: the notifiable data breach rules were not read.]

Complaints

If you have a privacy concern, email [email protected] first. We will look into it and reply.

If we do not reply, or you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC). The OAIC says 30 days is a reasonable time to wait for our response.

Young people

Our store is for people aged 18 or older. If you are under 18, please ask a parent or guardian before you give us your details.

Changes to this page

We may update this page. When we do, we will change the date at the top.