Privacy policy

What we collect

• Order details: your name, email address, phone number, delivery address and what you bought.
• Payment information: processed entirely by Stripe. We never see or store your full card number.
• Support correspondence: emails and messages you send us, kept so we can help you.
• Usage data: pages viewed and actions taken on this site, including your IP address and browser type.

Why we collect it

We use your information to process payments, fulfil and deliver your order, send order and tracking updates, answer support requests, manage cartridge subscriptions, and meet our tax and record-keeping obligations.

We also use aggregated usage data to understand which pages people find useful and to measure whether our advertising works.

Who we share it with

We share only what each provider needs to do its job:

• Stripe — payment processing. Stripe handles your card details directly under its own privacy policy.
• Our fulfilment and shipping partners — your name and delivery address, so your parcel can be picked, packed and delivered.
• Meta (Facebook and Instagram) — we send advertising conversion events, including a hashed version of your email address where available, so we can measure ad performance.
• Vercel — website hosting and server logs.

Advertising and tracking

This site uses the Meta Pixel and sends matching server-side conversion events. These let us measure which ads lead to purchases and show relevant ads to people who have visited the site.

You can limit ad tracking through your browser settings, your device privacy settings, or your Meta ad preferences. Blocking these does not affect your ability to browse or buy.

How long we keep it

Order and transaction records are kept for at least seven years, as Australian tax law requires. Support correspondence is kept while it remains useful for helping you. Usage data is retained in aggregate.

Accessing, correcting or deleting your information

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email ozflowsupport@gmail.com and we will respond within 30 days.

Some information we are legally required to retain, such as completed transaction records, cannot be deleted on request.

Security

This site is served over HTTPS and payments are handled by Stripe, which is PCI-DSS compliant. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the information we hold.

Complaints

If you are unhappy with how we have handled your personal information, email us first and we will try to resolve it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.