Privacy, plainly.

When you interact with our shop or studio we may collect:

• Your name, email address and mobile number.
• Your shipping and (if different) billing address.
• Order details — items purchased, quantities, prices and any notes you add at checkout.
• Payment information, processed directly by Stripe. We do not see or store your card number, CVC or full bank details — Stripe holds those.
• Basic browsing data — pages viewed, device type, approximate location from your IP address — collected through standard server logs and any analytics we use to keep the site working.
• Photographs, drawings or measurements you send us when commissioning a custom piece.

We only collect what we need to run the studio:

• To process your order, take payment and arrange delivery.
• To answer your enquiries about custom or bespoke work.
• To send you the occasional newsletter or studio note — only if you have asked for it, and only until you ask us to stop.
• To comply with our tax, accounting and consumer-law obligations.
• To improve the site and prevent fraud or abuse.

Order records — including your name, address, items and amounts paid — are retained for at least seven (7) years, as required by the Australian Taxation Office.

Marketing data (newsletter subscriptions, referral records) is kept until you unsubscribe or request deletion, after which it is removed within a reasonable period.

Custom-order drawings and correspondence are kept while the project is open and for a reasonable period after install, in case a warranty matter arises.

We share only the minimum information needed, and only with these trusted parties:

• Stripe (payments) — handles card capture and processing. Stripe is bound by its own privacy terms and PCI-DSS obligations.
• Australia Post / AusPost (delivery) — receives your name, shipping address and a contact number so they can deliver your order.
• SendGrid (transactional email) — sends order confirmations, shipping updates and replies to enquiries on our behalf.
• Amazon Web Services (AWS) — provides the hosting and storage infrastructure that runs this site and our order records.
• Our accountant, in confidence, when required for tax and BAS reporting.

We do not sell, rent or trade your personal information. Ever.

The site uses a small number of cookies — most are functional (remembering your cart, theme preference and consent state). If we run analytics, it is configured to collect aggregate behaviour only, with no identifying information shared with third parties beyond what is necessary to keep the service running.

You can clear or block cookies at any time in your browser settings. Doing so may break the cart.

Under the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you.
• Correct any information that is inaccurate or out of date.
• Request deletion of information we no longer have a legal reason to keep.
• Withdraw consent for any marketing we send.
• Lodge a complaint with us, and — if you are not satisfied with our response — with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Email us at ivan@puredesignprojects.com and we'll respond within a reasonable timeframe — usually within 30 days.

The site runs over HTTPS. Order data is encrypted in transit and at rest. Access to the admin systems that hold customer records is limited to the studio owner and is protected by authentication. Payment data is handled by Stripe under PCI-DSS — we never see the full card number.

No system is perfectly secure. If we ever become aware of a serious data breach we will notify affected customers and, where required, the OAIC, in line with the Notifiable Data Breaches scheme.

Questions, requests or complaints about privacy should go to:

Pure Design Projects
Attn: Ivan
Tottenham VIC, Australia
ivan@puredesignprojects.com