Privacy Policy

Information We Collect

We only collect information that you choose to give us, or that is needed to operate the website and fulfil orders:

• Contact & quote details - your name, email address, optional phone number, and the message, measurements, colours, quantities, deadlines and any file or reference links you send through our contact and quote forms.
• Order details - what you ordered, your delivery address and any notes needed to print and ship your item. When you order directly on this website, checkout is handled by Square; some purchases also happen on Etsy or eBay, where those platforms collect this information under their own privacy policies.
• Technical information - standard server logs from our hosting provider (such as IP address, browser type and pages visited) used for security and to keep the site running.

We do not collect or store your full payment card details. Card payments for orders on this website are processed securely by Square, and orders placed on Etsy or eBay are handled by those platforms, each using their own secure systems.

How We Use Your Information

We use the information you provide to:

• Reply to your enquiry and prepare a quote.
• Confirm, produce, package and ship your order.
• Provide order support and answer follow-up questions.
• Keep records of orders and correspondence for our business and any warranty or consumer-law obligations.
• Protect the website and prevent spam, fraud or misuse.

We will only use your information for a different purpose if it is related to the above and you would reasonably expect it, or if you have given consent.

How Your Information Is Shared

We do not sell or rent your personal information. We only share it where it is necessary to operate the business, including with:

• Form & email providers - our contact form is processed by Web3Forms, which forwards your message to our business email so we can reply. Order confirmation, shipping, refund and delivery follow-up emails for website orders are sent through Resend on our behalf. The delivery follow-up is a one-off message per order checking your item arrived; reply to it if you would rather not receive these.
• Payment processing - card payments for website orders are handled by Square, which processes your payment and related order details under its own privacy policy.
• Hosting & infrastructure - the website is hosted on Microsoft Azure, and order records used to send your emails are stored with our database provider (Supabase). These process standard technical and order data on our behalf.
• Selling platforms - where you buy through Etsy or eBay, your order and contact details are handled by those platforms.
• Shipping carriers - your name and delivery address are shared with Australia Post or another carrier to deliver your order.

Some of these providers are located outside Australia - for example, in the United States and the European Union - so your information may be stored or processed overseas. We only use reputable providers and take reasonable steps to make sure your information is handled with appropriate protection wherever it is processed.

We may also disclose information where required by law, or to protect our legal rights.

Cookies & Analytics

This website uses cookies and similar browser storage in two ways:

• Essential storage - needed for the site to work, such as remembering your cart, recently viewed catalogue data and your chosen display currency. These cannot be switched off without breaking parts of the site.
• Analytics - we use Google Analytics to understand general, aggregated visitor activity (such as which pages are popular and how people find us) so we can improve the site. This sets cookies and is processed by Google under its own privacy policy. Our Google Analytics is not used to identify you personally and does not retain your full IP address.

We do not use third-party advertising or remarketing trackers, and we do not sell your browsing data.

You can opt out of analytics at any time by adjusting your browser's cookie settings or installing the Google Analytics Opt-out Browser Add-on. For visitors in the EU and UK, where prior consent is required for analytics cookies, we are rolling out a cookie consent banner so you can accept or decline analytics cookies before they load.

How Long We Keep It

We keep enquiry and order information only for as long as it is needed for the purpose it was collected, to meet our legal and tax obligations, and to handle any warranty or consumer-law matters. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Keeping Your Information Secure

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including using reputable third-party providers and limiting who can access enquiry and order records. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security, but we work to protect your information at all times.

Your Rights & Choices

You can ask us to access, correct or delete the personal information we hold about you, or ask a question about how it is handled. To do this, email contact@formfinity.com.au and we will respond within a reasonable time. We may need to verify your identity before acting on a request.

Australian Privacy Law

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth) where they apply to us. If you believe we have mishandled your information, please contact us first so we can try to resolve it. You may also contact the Office of the Australian Information Commissioner (OAIC).

International Customers (EU, UK & US)

We are based in Australia but ship worldwide, so some buyers are also protected by privacy laws in their own country. Those rights apply to you in addition to everything above.

European Union & United Kingdom (GDPR)

If you are in the EU or UK, we process your personal data to perform our contract with you (taking, making and shipping your order), to meet our legal and tax obligations, for our legitimate interests in running and securing the business, and - for analytics cookies - on the basis of your consent. You have the right to:

• access the personal data we hold about you and request a copy;
• have inaccurate data corrected or incomplete data completed;
• ask us to erase your data (the "right to be forgotten") where there is no ongoing need or legal reason to keep it;
• restrict or object to how we use your data;
• receive your data in a portable format where technically possible;
• withdraw consent at any time where we rely on it, such as for analytics cookies.

To exercise any of these, email contact@formfinity.com.au. You also have the right to complain to your local data protection authority - in the UK, the Information Commissioner's Office (ICO). Because our website and some of our providers are based in Australia and the United States, ordering from us means your data is transferred outside the EU and UK; we take reasonable steps to protect it in line with this policy.

United States (California & other states)

We do not sell or share your personal information for money or for cross-context behavioural advertising. If you are a US resident, you can ask us to confirm what personal information we hold, request a copy, or ask us to delete it, by emailing contact@formfinity.com.au. We will honour reasonable requests and will not treat you differently for making one.

Changes to This Policy

We may update this policy from time to time as our business or legal obligations change. The latest version will always be published on this page with an updated date above. Continuing to use the website or place orders after a change means you accept the updated policy.