1. Data Collection
We collect names and mailing addresses solely for the purpose of physical letter delivery. Email addresses are collected for order confirmation, shipping updates, and optional newsletter subscription. We do not collect sensitive personal information.
2. Security
All payment information is handled via encrypted third-party processors (Stripe). We do not store credit card details on our servers. Our Google Apps Script backend accesses Stripe using server-side secrets stored in Google Script Properties — never in code or client-side.
3. Data Retention
Order records are retained for 7 years for tax and accounting purposes. Mailing addresses are retained only for the duration of the 12-month subscription plus 30 days. You may request deletion of your personal data at any time by contacting us.
4. Third Parties
We share data only with: (a) Australia Post for delivery, (b) Stripe for payment processing, (c) Google Workspace for our backend spreadsheet and email. No data is sold to advertisers or data brokers.
5. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 30 days per Australian Privacy Principles (APP) guidelines.
6. Cookies & Analytics
We use minimal first-party analytics (page views, checkout funnel events) via our own backend — no Google Analytics, Meta pixels, or third-party trackers. A dismissible privacy notice appears on the checkout page; your preference is stored in localStorage only.