Your Privacy

Last updated: 4 August 2026

1. About this policy

At Crazy Digital Creative, I take your privacy seriously. This policy explains in plain language what personal information I collect when you use our website, why I collect it, how I keep it safe, and what rights you have.

I handle your information in line with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024.

This policy covers any information collected through my website, online store, emails, and social media.

2. What I collect

When you make a purchase, create an account, sign up for my emails, or contact me, I may collect:

• Your name and contact details (email, phone, address)
• Your business name and ABN (if applicable)
• Billing and shipping addresses
• Payment details (processed securely by my payment provider and never stored on my servers)
• Any messages, questions or feedback you send me
• Survey responses
• Social media handles (if you share them with me)

When you visit my website, I automatically collect some technical information:

• Your IP address and approximate location
• Browser type and device information
• Which pages you visit, how long you stay, and where you came from
• Cookie data (see Section 7)

3. Why I collect your information

I only collect information when I have good reason to. Here is how I use it:

How I use it	What that involves
To fulfil your order	processing your purchase, arranging delivery, sending receipts and updates
To run your account	setting up and managing your account, saving your preferences
To communicate with you	responding to your questions, sending support replies
To send you marketing	newsletters and offers, only if you have opted in
To improve our website	understanding how people use our site so we can make it better
To keep things secure	detecting fraud and protecting our website and customers
To meet legal requirements	tax record-keeping and responding to legal requests

I only send marketing emails to people who have asked for them. You can unsubscribe at any time by clicking the link in any email or contacting me.

4. Automated tools and AI

We may use automated tools or artificial intelligence to help run my business, for example:

• Recommending products or services based on what you have browsed or purchased
• Screening orders for potential fraud
• Using chatbots to answer common questions
• Analysing website traffic to spot trends

I do not use automated tools to make important decisions about you without a real person checking first. If you have concerns about how an automated tool has been used, contact me, and I will have someone review it.

5. Who I share your information with

I never sell or rent your personal information.

I do share it with a small number of trusted service providers who help me run my business. These include my payment processor, email platform, website host, analytics provider, advertising platforms, and shipping provider. Each of these providers is only allowed to use your information for the specific service they provide to me. They are required to keep it secure and confidential.

I may also share your information if I am legally required to do so, for example, in response to a court order or government request. If my business is sold or merged with another, your information may be transferred to the new owner under a confidentiality agreement.

6. Keeping your information safe

I take reasonable steps to protect your information, including:

• Encrypting data sent between your browser and my website (SSL/TLS)
• Restricting access so only staff who need it can see your information
• Using secure, encrypted storage for sensitive data
• Running regular security checks

No system is completely secure, but i do my best to protect your information.

I only keep your information for as long as we need it. As a guide:

Type of information	How long we keep it
Purchase and payment records	7 years (required by tax law)
Your account details	while your account is active, plus 2 years
Marketing preferences	until you unsubscribe, plus 1 year
Support messages	3 years after your issue is resolved
Website analytics	26 months
Cookie consent records	12 months

When I no longer need your information, I securely delete or anonymise it.

7. Cookies

Cookies are small files saved on your device when you visit my website. They help my site work properly and let me understand how people use it.

I use four types of cookies:

Type	What it does	Your choice
Essential	keeps the site working (e.g. your shopping cart)	Always on
Analytics	helps me see how people use the site	You can opt out
Marketing	used to show you relevant ads	You can opt out
Preferences	remembers your settings and choices	You can opt out

When you first visit my website, you may see a cookie banner that lets you opt out of non-essential cookies. You can also manage cookies through your browser settings.

8. What happens if there is a data breach

If there is a data breach that is likely to cause you serious harm, I will:

• Notify the Office of the Australian Information Commissioner (OAIC) as soon as possible
• Let you know what happened, what information was involved, and what you can do to protect yourself
• Take steps to contain the breach and reduce any further risk

This is in line with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

9. Children's privacy

My services are not aimed at anyone under 18. I do not knowingly collect personal information from children. If I find out a child under 18 has given me their information without parental consent, I will delete it as quickly as possible.

If you are a parent or guardian and think your child has shared their information with me, please contact me straight away. I will comply with the Children's Online Privacy Code currently being developed by the OAIC, which is expected to come into effect by December 2026.

10. Your rights and your right to take action

Under Australian privacy law, you have the right to:

• Ask me what personal information I hold about you
• Ask me to correct any information that is wrong or out of date
• Ask me to delete your personal information (where I am not required by law to keep it)
• Make a complaint if you think I have mishandled your information

To exercise any of these rights, contact me using the details in Section 13. I will respond within 30 days.

Since June 2025, the Privacy and Other Legislation Amendment Act 2024 gives individuals the right to take legal action for serious invasions of privacy. I encourage you to contact me first so I can try to sort things out directly.

11. Links to other websites

My website may link to other websites. I am not responsible for the privacy practices of those sites, so I encourage you to read their privacy policies before giving them any personal information.

12. Changes to this policy

I may update this policy from time to time. When I make changes, I will update the date at the top and post a notice on my website. If I make a major change that affects how I handle your information, I will do our best to let you know by email.

13. Contact me

If you have any questions about this policy, want to exercise your privacy rights, or want to make a complaint, please get in touch at rachel@crazydigitalcreative.com. I aim to respond within 48 hours and to resolve any complaints within 30 days.

If you are not happy with my response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.