What we know about you, and why
Short version: we ask for the least we can and still get a parcel to your door. We never see your card number. We don't sell anything about you to anybody, and there is no version of this business where we start.
What we collect
- To place an order — your name, email, phone, and your address if it's being posted. The phone number is there so a shop can ring you about your own order.
- Your bag — a cookie on your own browser holding which items and how many. No prices and nothing about you; prices are always read back from our database, never from the cookie.
- Your last delivery details — kept in a cookie on your own device so you don't retype them next time. It never leaves your browser except to fill in that form, and there's a link on the checkout page to forget it.
- The suburb you type — looked up against a copy of the Commonwealth address file that sits on our own servers. Nobody else is asked, so your address is not shopped around a mapping company one keystroke at a time.
- Your email for the newsletter — only if you ticked that box yourself. It is never pre-ticked, and ordering something is not consent to be emailed.
Your card
Card numbers never reach us. Payment happens on Stripe's own page, and what comes back to us is whether it worked, the card brand, and the last four digits. We could not charge you off our own bat if we tried — every charge is tied to one order on one shop's account.
Who else sees it
That's the whole list. Nobody buys this data from us and nobody is given it for advertising.
How long we keep it
Orders are kept as business records — a receipt has to still exist when someone asks about a purchase from two years ago, and tax law expects us to keep them for five years.
Newsletter subscriptions are kept until you unsubscribe. When you do, we mark the row rather than delete it: that timestamp is the proof we were told to stop, and throwing it away is how someone gets emailed again by accident.
Getting a copy, or getting it removed
You can ask what we hold about you and ask us to correct or delete it. We'll do it, apart from the order records we're required to keep — and we'll tell you plainly which ones those are.
Every newsletter email has a one-click unsubscribe at the bottom that works without logging in to anything.
Reply to any email we've sent you about an order and a person will answer.
Where the suburb list comes from
The suburb and postcode suggestions at checkout come from the Geocoded National Address File — the Commonwealth's own address data, the same source Australia Post works from.
Incorporates or developed using G-NAF © Geoscape Australia, licensed by the Commonwealth of Australia under the Open Geo-coded National Address File (G-NAF) End User Licence Agreement.