Privacy Policy

Who we are

This site is operated by TODO — registered business name (ABN TODO — ABN), trading as Outwest Hobbies, of 29B Angus Avenue, Kandos NSW 2848, Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

We only collect what an order actually needs:

• To fulfil an order — your name, email address, delivery address and phone number. The phone number goes to Australia Post so they can contact you about a delivery.
• If you create an account — your email address and a password, which is stored only as a one-way hash. We never see or store your password itself.
• If you contact us or subscribe — your email address and whatever you choose to write to us.
• Automatically — the search terms typed into the site, which we use in aggregate to work out what to stock. These are not tied to your identity.

We never see your card details. Payments are processed by Stripe, and your card number is entered directly into Stripe's own secure form. It does not pass through our servers and we could not store it if we wanted to.

Why we hold it

To take and deliver your order, to answer you when you get in touch, to send order confirmations and dispatch notifications, and to meet our record-keeping obligations under Australian tax law. If you have subscribed to our newsletter, to send you that — and every one of those emails carries an unsubscribe link that works immediately.

We do not sell your personal information, and we do not share it for anyone else's marketing.

Who else touches it

Only the services needed to run the shop:

• Stripe — payment processing. Stripe receives your email address and the order amount, and handles your card details directly.
• Australia Post — delivery. They receive the name, address and phone number for the parcel, and nothing else.
• Our email provider — to deliver order confirmations and dispatch notices to your inbox.

Some of these providers operate servers outside Australia. Where that is the case, we rely on their contractual commitments to handle your information to a standard comparable to the Australian Privacy Principles.

How long we keep it

Order records are kept for five years, which is what Australian tax law requires of us. Account details are kept until you ask us to close the account. Newsletter subscriptions are removed as soon as you unsubscribe.

Cookies

We use a cookie to keep you signed in, and your browser's local storage to remember your cart and wishlist between visits. Both are functional — the site cannot work without them. We do not use advertising or cross-site tracking cookies.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct anything wrong, or ask us to delete it — subject to the order records we are legally required to keep. Email info@outwesthobbies.com and we will respond within 30 days.

If you are not satisfied with how we have handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

The site is served over HTTPS, passwords are hashed, and administrative access is restricted. No system is perfect, so if we ever have a data breach likely to cause you serious harm, we will notify you and the OAIC as the Notifiable Data Breaches scheme requires.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be notified to account holders by email. See also our Terms of Sale.