This policy explains what personal information Canberra Colony (canberracolony.com) collects, why, and what you can do about it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988.

What we collect

• When you order: your name, email address, phone number, billing and delivery addresses, and what you bought.
• When you pay: card payments, including Apple Pay and Google Pay, are handled by WooPayments, which is powered by Stripe. We never see or store your full card number.
• If you create an account: your login details, saved addresses, order history and wishlist.
• When you contact us: what you send us by email or through a form on the site.
• If you subscribe to our newsletter: your email address and your subscription choices. Every newsletter has an unsubscribe link.
• When you browse: basic visit statistics, such as pages viewed, browser type and the page that sent you here. With an order, we also record how you found us, for example a search engine or a link in an email.

How we use it

• to take payment for, pack and deliver your order, and to keep you updated about it;
• to answer your questions and handle returns, refunds and live-arrival claims;
• to keep the records that tax and consumer law require;
• to protect the shop and our customers from fraud and abuse;
• to send our newsletter, only if you asked for it;
• to understand, in aggregate, how people use the site so we can improve it.

We don’t sell your personal information, and we don’t use it for advertising profiles.

Who we share it with

We share personal information only with the services we need to run the shop, and only what each one needs:

• Australia Post, to deliver your parcel: your name, delivery address, and phone number or email.
• Stripe and Automattic (WooPayments), to process payments and check them for fraud.
• Automattic (Jetpack), for visit statistics, security, contact forms and backups of the site.
• Google (Google Workspace), which carries our email.
• Cloudflare, which delivers the website and protects it from attacks.
• Our own server in Sydney, which hosts the shop, and its encrypted backups, which are also kept in Sydney.

We may also disclose information when the law requires it.

Information that leaves Australia

Stripe, Automattic, Google and Cloudflare may store or process information in the United States and other countries. We choose established providers with their own privacy and security commitments.

Cookies

The shop uses cookies to keep your cart and keep you signed in. Others record how you found us when you order, and help Stripe spot fraud. Jetpack uses them for visit statistics. If you block cookies, the cart and checkout may not work.

How long we keep it

• Order and payment records: five years after the sale, as tax law requires.
• Your account: until you ask us to close it.
• Newsletter subscriptions: until you unsubscribe.
• Emails and messages: as long as we need them to help you, and no longer than our order records.

Keeping it safe

The site uses HTTPS throughout. Only we can reach your information, and backups are encrypted. No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.

Your choices and rights

You can ask to see the personal information we hold about you, and ask us to correct it. You can also ask us to delete it. We’ll do so unless we have to keep it, for example tax records. You can unsubscribe from the newsletter at any time.

Our shop is for adults. If you’re under 18, please ask a parent or guardian to order for you.

Questions and complaints

Email [email protected]. We’ll reply within 30 days, and usually much sooner. If you’re not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner.

We may update this policy. The current version is always on this page. Last updated 11 November 2026.