When you place an order we ask for:

• your name or a nickname
• your mobile number, so the courier can reach you
• your delivery address, suburb, state and postcode
• your email address, only if you choose to give it
• any delivery notes you write

We also record what you ordered, the prices, the order total and the order status. We do not take card or bank details: you pay the courier in cash.

• to prepare, deliver and collect payment for your order
• to contact you about your order if something needs checking
• to send an order receipt and status link, if you gave an email address
• to keep business and tax records we are required to keep

• We do not sell your information or share it for advertising.
• We do not send marketing emails or messages.
• We do not use analytics, advertising trackers or third-party cookies.

Only the services needed to run the store:

• MongoDB Atlas stores order records.
• Resend sends order emails.
• Cloudinary hosts product photos. It receives no customer details.
• Our courier receives your name, phone number and address to deliver the order.
• WhatsApp, if you choose to order or message us there. WhatsApp handles those messages under its own privacy policy.

Some of these providers may store data on servers outside Australia. We may also disclose information where the law requires it.

The site saves a few things in your browser so it works without an account:

• your bag, so it is still there when you come back
• that you confirmed you are 18 or older
• links to orders you placed on this device, so you can check their status

These stay on your device and are not sent to us. Clearing your browser data removes them.

We keep order records for as long as we need them to deliver your order and meet our legal and tax obligations. After that we delete them. You can ask us to delete your details sooner, unless the law requires us to keep them.

Order details are stored in a secured database and sent over encrypted connections. Each order page can only be opened with the private link created for that order. Only our staff can sign in to the order system.