Privacy policy

What we collect

• Your name, email address, phone number and delivery addresses, when you create an account or order.
• Your orders and any messages you send us.
• Reviews and photos you choose to post.
• Payment details, collected by our payment provider, Stripe. We receive confirmation of payment and limited card details (such as the card type and last four digits), not the full card number.
• Basic technical information such as your browser, device and pages visited, kept in our hosting logs.

Why we collect it

To process and deliver your orders, handle returns, run your account, respond to you, show reviews, prevent fraud, keep the website secure and working, and meet our legal obligations (such as tax records). If you choose not to give us information we need, we may not be able to fulfil your order.

Marketing

We’ll only send you marketing emails if you’ve agreed to receive them, and every email has an unsubscribe link. Order and account emails (like dispatch confirmations and sign-in codes) aren’t marketing.

Cookies and browser storage

We use a cookie to keep you signed in, and your browser’s storage to remember your bag. We don’t use advertising or cross-site tracking cookies.

Who we share it with

We share personal information only as needed to run our store, with:

• Stripe, to take payments
• delivery carriers such as Australia Post, to deliver your order
• Supabase, which stores our customer and order database, and Vercel, which hosts our website
• our email provider, to send order and sign-in emails
• professional advisers and authorities, where required by law

We don’t sell your personal information.

Overseas storage

Some of these providers store or process information outside Australia, including in the United States. We choose providers with strong security and data-protection commitments, and take reasonable steps to make sure they handle your information consistently with the Australian Privacy Principles.

Keeping it secure

We protect your information with encrypted connections, access controls and database security rules, and only keep it for as long as we need it for the purposes above or as the law requires.

Access, correction and complaints

You can update most details in your account. To ask for a copy of the information we hold, a correction, or to make a privacy complaint, email hello@cybinsights.com. We’ll respond within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.