Privacy Policy

1. Introduction

This Privacy Policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We are committed to protecting your privacy and personal information.

2. Information Collection

3. Payment Processing

All payment processing is handled by Stripe. Important points:

• We accept major credit and debit cards (Visa, Mastercard, American Express)
• We do not store credit card information
• Payment data is secured by Stripe's systems
• Daily payment settlement to store owners
• Transaction records are maintained for tax purposes

4. Data Security

• Data stored on secure Australian servers
• Regular security audits
• Encryption for all sensitive data
• Limited staff access to personal information
• Mandatory data breach reporting as per Australian law

5. Information Sharing

We share information with:

• Stripe for payment processing
• Shipping providers (when required)
• Legal authorities (when required)
• Never sold to third parties

6. Your Rights

Under Australian privacy law, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request data deletion
• Complain about privacy breaches
• Opt-out of marketing communications

7. Data Retention

We retain data in accordance with Australian law:

• Transaction records: 7 years (tax requirement)
• Store performance data: 2 years
• Inactive account data: 12 months