This policy explains how Cantra (ABN 35 673 620 687) collects, uses, stores and discloses personal information, and how you can access or correct it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
[[CONFIRM: This is a drafted starting point, not legal advice. Confirm every third-party processor listed below actually matches the apps and services installed on the store before publishing.]]
What we collect
We collect personal information that you give us directly, including:
- Name, business name and role
- Email address, phone number and delivery address
- ABN and trade-account details where you apply for wholesale pricing
- Order history and correspondence with our team
- Enquiry details submitted through our demo, wholesale and contact forms
We do not collect or store full payment card numbers. Card data is captured and processed directly by our payment providers.
Information collected automatically
When you visit this website we and our service providers may collect technical information including your IP address, browser type, device type, pages viewed, referring site and time of visit. This is collected through cookies and similar technologies.
We use this to keep the site secure, understand how it is used, and improve it.
Why we collect it
We use personal information to:
- Process and deliver your orders, and handle returns
- Respond to enquiries, quote requests and demo bookings
- Set up and manage trade accounts
- Send order and delivery notifications
- Send marketing communications where you have opted in
- Meet our legal, tax and record-keeping obligations
We do not sell personal information.
Who we share it with
We disclose personal information to service providers who help us run the business, only to the extent they need it:
- Shopify — our ecommerce platform, which hosts this store and processes orders
- Payment providers — [[CONFIRM: list the payment gateways actually enabled, e.g. Shopify Payments, PayPal, Afterpay]]
- Freight carriers — [[CONFIRM: list the carriers actually used]], who receive your name, address and phone number to deliver your order
- Email and marketing tools — [[CONFIRM: list any email or SMS marketing apps installed]]
- Analytics providers — [[CONFIRM: list analytics and advertising pixels actually installed, e.g. Google Analytics, Meta Pixel]]
Some of these providers store data overseas, including in the United States. By providing your information you consent to that disclosure. [[CONFIRM: verify the actual storage locations of each provider used.]]
Cookies
Cookies are small files stored on your device. We use them to keep your cart working, remember preferences, and measure site performance.
You can block or delete cookies through your browser settings, but parts of the site — including checkout — may stop working correctly.
Marketing communications
We only send marketing emails where you have opted in, or where you are an existing customer and the message relates to similar products. Every marketing email includes an unsubscribe link, and we action unsubscribes promptly.
Opting out of marketing does not stop transactional messages about orders you have placed.
How long we keep it
We keep personal information only as long as we need it for the purposes described above, or as required by law. Business and tax records are generally retained for [[CONFIRM: 7 years]] in line with Australian record-keeping requirements.
When information is no longer needed we take reasonable steps to destroy or de-identify it.
Security
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access — including using reputable hosted platforms, encrypted connections, and limiting internal access to those who need it.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and ask us to correct anything inaccurate. Contact us using the details below.
We will respond within a reasonable period. There is normally no charge, though we may charge a reasonable fee for substantial requests. If we refuse access we will tell you why in writing.
Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Changes to this policy
We may update this policy as our practices or the law change. The current version is always published on this page with the last-updated date shown at the top.