Privacy Policy

1. Information We Collect

We may collect the following types of personal information:

Information You Provide Directly

• Identity Information: Full name, email address, phone number, and postal address when you create an account or place an order.
• Order Information: Details of products purchased, order history, and delivery preferences.
• Communication Data: Records of your correspondence with us, including emails, contact form submissions, and phone enquiries.
• Account Information: Username, password (stored in encrypted form), and account preferences.

Information Collected Automatically

• Technical Data: IP address, browser type, operating system, and device information.
• Usage Data: Pages visited, time spent on pages, links clicked, and browsing patterns on our website.
• Cookie Data: Information collected through cookies and similar technologies (see Section 7 below).

Payment Information

Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. When you make a purchase, your payment card details are submitted directly to Stripe and are never stored on our servers. We only receive a transaction confirmation and the last four digits of your card number for reference purposes.

2. How We Use Your Information

We use your personal information for the following purposes:

• Order Fulfilment: Processing your orders, arranging shipping, and sending order confirmations and tracking information.
• Customer Service: Responding to your enquiries, providing technical support, and handling returns and refunds.
• Account Management: Managing your customer account and preferences.
• Communication: Sending you important updates about your orders, changes to our services, or updates to our policies.
• Marketing: With your consent, sending promotional emails about new products, special offers, and news. You can opt out at any time.
• Website Improvement: Analysing usage patterns to improve our website functionality, user experience, and product offerings.
• Legal Compliance: Meeting our obligations under Australian law, including tax reporting and consumer protection requirements.
• Fraud Prevention: Detecting and preventing fraudulent transactions and other illegal activities.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information with the following parties strictly for the purposes of operating our business:

• Stripe: Our payment processor, to facilitate secure payment transactions.
• Shipping Carriers: Australia Post and other courier services, to deliver your orders. We share only the information necessary for delivery (name, address, phone number).
• Service Providers: Trusted third-party services that assist us with website hosting, email delivery, and analytics. These providers are contractually bound to protect your information.
• Legal Requirements: Government authorities or law enforcement agencies when required by law or to protect our legal rights.

4. Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it, including:

• SSL/TLS encryption for all data transmitted between your browser and our website.
• Encrypted storage of passwords and sensitive account information.
• Regular security assessments and updates to our systems.
• Access controls limiting employee access to personal information on a need-to-know basis.
• Secure, PCI-compliant payment processing through Stripe.

While we strive to protect your personal information, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to implementing industry best practices.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Account Data: Retained for as long as your account is active, plus a reasonable period after account closure.
• Order Records: Retained for a minimum of 7 years to comply with Australian tax law requirements.
• Communication Records: Retained for up to 3 years after the last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion.

6. Your Rights Under the Australian Privacy Act

Under the Australian Privacy Principles, you have the following rights regarding your personal information:

• Access: You have the right to request access to the personal information we hold about you. We will respond to access requests within 30 days.
• Correction: You have the right to request correction of any inaccurate, out-of-date, incomplete, or misleading personal information we hold about you.
• Complaint: If you believe we have breached the Australian Privacy Principles, you have the right to lodge a complaint with us. We will investigate and respond within 30 days.
• Opt-Out: You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.
• Deletion: You may request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations.

To exercise any of these rights, please contact our Privacy Officer using the details provided in Section 9.

7. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly, including session management, shopping cart functionality, and security features.
• Analytics Cookies: Help us understand how visitors interact with our website so we can improve the user experience.
• Preference Cookies: Remember your settings and preferences for future visits.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of our website, including the ability to place orders.

8. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as soon as practicable.

9. Contact Us – Privacy Officer

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to make a privacy complaint, please contact our Privacy Officer:

• Email: info@ultraboxstore.com
• Phone: (03) 9028 4756
• Post: Privacy Officer, MPIT PTY LTD, Suite 12, 440 Collins Street, Melbourne VIC 3000, Australia

If you are not satisfied with our response to your complaint, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date.

For significant changes, we may notify you via email or a prominent notice on our website. We encourage you to review this policy periodically to stay informed about how we protect your information.