Privacy Policy

1. About This Policy

Spool3D (ABN 28 586 980 199) ("we", "us", "our") operates spool3d.com.au. We are committed to handling your personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent they apply.

Although Spool3D may qualify for the small business exemption under the Privacy Act 1988 (Cth), we have voluntarily adopted this Privacy Policy in the interest of transparency. Nothing in this policy limits any rights you have under applicable privacy or consumer protection legislation.

2. Information We Collect

When you place an order, we (or our third-party service providers on our behalf) collect:

• Contact details: name, email address, phone number
• Delivery address: street address, suburb, state, postcode
• Order information: items purchased, quantities, colours, order reference number
• Payment information: processed entirely by Stripe, Inc. We do not store, see, or have access to your full card number, CVV, or bank account details
• Technical data: IP address and basic request metadata collected automatically by Cloudflare (our hosting and security provider)

We do not collect:

• Sensitive information (health records, government identifiers, financial account numbers)
• Information from persons under 18 years of age (our products are not directed at children)
• Information from third-party data brokers or social networks

We operate guest checkout only. No user accounts are created or maintained. Order data is tied to a Stripe checkout session, not to a permanent account with us.

3. Why We Collect It

We collect personal information to:

• Process and fulfil your order
• Arrange delivery through our carrier partners
• Send order confirmations and shipping notifications
• Respond to enquiries, returns, and complaints
• Meet our legal obligations, including under the Taxation Administration Act 1953 (Cth), which requires retention of financial records for a minimum of five years
• Detect and prevent fraud, chargebacks, and abuse of our systems

We do not use your personal information for direct marketing, and we do not sell, rent, or trade your personal information to third parties.

4. Who We Share It With

We disclose your personal information to the following third parties only to the extent necessary to fulfil your order or operate our business:

We do not share your information with any party not listed above. Each recipient is required to handle your information in accordance with applicable law and their own published privacy policies.

5. Overseas Disclosure

Some of our service providers are located in the United States. When we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle information in accordance with standards comparable to the Australian Privacy Principles, including by relying on each provider's publicly available data protection commitments and applicable cross-border data transfer mechanisms (such as Standard Contractual Clauses where relevant).

By placing an order, you acknowledge that your personal information may be transferred to and processed in countries outside Australia. This does not affect your rights under Australian privacy law.

6. Cookies and Tracking

spool3d.com.au uses only the cookies and tracking technologies strictly necessary to operate the website and process transactions. We do not use:

• Analytics cookies or web analytics services (e.g. Google Analytics)
• Advertising, retargeting, or tracking pixels (e.g. Facebook Pixel, Google Ads)
• Session recording or heatmapping tools
• Social media trackers or widgets

Cloudflare may set an essential security cookie (__cf_bm) for bot management. Stripe sets cookies required to process payments. These are essential for the website to function and cannot be disabled without preventing checkout.

7. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, including:

• HTTPS/TLS encryption on all connections, enforced by Cloudflare
• Payment data processed exclusively by Stripe (PCI-DSS Level 1 certified)
• No storage of full payment card details on our systems
• System access limited to authorised personnel

No method of internet transmission is completely secure. If you believe your information has been compromised in connection with our website, please contact us immediately at peter@spool3d.com.au. We will notify affected individuals of a data breach as required by law.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy or as required by law:

• Order records: minimum five (5) years to comply with the Taxation Administration Act 1953 (Cth)
• Payment records: retained by Stripe in accordance with PCI-DSS requirements and their privacy policy
• Email delivery logs: retained by Resend in accordance with their data retention policy
• Cloudflare logs: retained by Cloudflare in accordance with their data retention policy

When personal information is no longer required, we take reasonable steps to de-identify or destroy it securely.

9. Access and Correction

You may request access to, or correction of, personal information we hold about you by contacting us at peter@spool3d.com.au. We will respond within 30 days and may ask you to verify your identity. We may refuse access in limited circumstances permitted by the APPs and will provide written reasons for any refusal.

10. Complaints

If you believe we have mishandled your personal information, please contact us at peter@spool3d.com.au. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the current version took effect. Prior versions are available on request. Continued use of our website after a policy update constitutes acceptance of the updated policy.

Contact Us

Privacy enquiries: peter@spool3d.com.au
Spool3D  ·  ABN 28 586 980 199  ·  Australian Capital Territory, Australia