Privacy Policy

When you place an order, we collect:

• your name, email address and delivery address
• your phone number, so the courier can contact you
• what you ordered and what you paid

If you write to us through the contact form, we receive the name, email address and message you enter.

We never see or store your card details. Payment happens on a page hosted by Stripe, and your card number goes directly to them.

We don’t use analytics, advertising or tracking of any kind. There are no third-party scripts on this site, and nothing follows you across other websites.

There are no customer accounts, so we hold no usernames or passwords.

Only to run the shop: to take payment, send your order, email you a receipt and a note when it ships, answer your questions, and keep the records a business is required to keep.

We do not sell your information, and we do not share it for advertising.

We don’t send marketing emails. The only emails you’ll get from us are about your order or a reply to your message. If we ever start a newsletter it will be opt-in — you’d have to ask for it, you could unsubscribe at any time, and we would never add you to a list because you bought something.

Running the shop means relying on a few specialist services. Each one only receives what it needs:

• Stripe — takes payment and holds your card details, which we never receive.
• Supabase — stores order records and product images in our database.
• Resend — sends your order confirmation and shipping emails.
• Vercel — hosts the website itself.

Your order records are stored in Australia — our database runs in Supabase’s Sydney region.

Payment processing, email delivery and website hosting are handled by Stripe, Resend and Vercel, which operate overseas including in the United States. That means some of your information is processed outside Australia. By placing an order you agree to it being handled this way.

Simply browsing this site sets no cookies at all. Your shopping cart is saved in your own browser’s local storage so it survives if you close the tab — it stays on your device and is never sent to us.

A cookie is only set if you sign in to the shop’s private administration area, which is for the shop owner.

Order records are kept for five years, which is how long Australian businesses are required to keep records of their transactions. They also let us help with returns and warranty claims in the meantime.

Contact form messages are kept for up to twelve months and then deleted, unless they relate to an order we still need a record of.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email OrnatelyYours@hotmail.com and we’ll respond within a reasonable time. Some records may need to be kept where the law requires it.

If you’re unhappy with how we’ve handled your information, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes, the updated version will appear on this page with a new date at the top.

Questions about privacy? Email OrnatelyYours@hotmail.com or use our contact form.