1. Information We Collect

We collect information necessary to provide our services, including:

• Contact and delivery details (full name, email, shipping address, phone number).
• Digital photographs uploaded for custom magnet manufacturing.
• Order history and transaction metadata (payments are processed tokenized via Stripe; we never store your full card details).
• Website technical data and analytics cookies to enhance browsing performance.

2. How We Use Your Information

Your data is used strictly for legitimate business purposes:

• Custom printing, assembling, and delivering your handcrafted photo magnets.
• Sending necessary transactional notices (order confirmation, tax invoices, shipping updates).
• Direct marketing updates (only with your express or inferred consent in compliance with the Spam Act 2003, with a one-click unsubscribe mechanism in every marketing communication).
• Studio customer support and quality assurance.

3. Protection & Retention of Your Photos (APP 11)

We treat your family memories with the highest confidentiality and care. In accordance with APP 11.2:

• Your uploaded images are stored in secure, encrypted cloud storage accessible only by studio staff strictly for production and quality review.
• Photos from abandoned or expired checkout sessions are automatically and permanently purged.
• Completed order photos are retained for a limited operational period to facilitate customer re-prints and warranty support, after which they may be de-identified or permanently deleted.
• We will never display or publish your photos for promotional or social media purposes without your prior explicit written authorization.

4. Service Providers & Cross-Border Disclosure (APP 8)

To operate our e-commerce platform, we partner with reputable cloud service providers including Stripe (payment processing), Australia Post (order shipping), Cloudflare (CDN & security), Supabase (database storage), and Brevo (transactional email delivery). In some instances, your data may be hosted in secure Australian or overseas data centers operated by these vetted service partners.

5. Your Rights & Privacy Inquiries

Under the APPs, you have the right to request access to personal information we hold about you, request corrections, or ask for your uploaded photos and account details to be permanently deleted from our servers. If you have any privacy concerns or wish to lodge a complaint, please contact us. If we are unable to resolve your concern, you also have the right to contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.