Privacy policy

Who we are

Bam Studio is a sole trader business based in Sydney, Australia, ABN 97 582 835 200. In this policy, "we" and "us" mean that business. Email bamstudio.support@gmail.com with any question about this policy.

As a small business we may fall below the turnover threshold at which the Privacy Act 1988 (Cth) applies automatically. We have chosen to handle personal information in line with the Australian Privacy Principles regardless, because you should not have to check our revenue to know how your address is treated.

What we collect

• Order details — your name, email address, delivery address, phone number if you give one, what you bought, and any personalisation text (for example the letters on a name charm).
• Messages — anything you send us by email, including the order number you quote.
• Asking to hear about new drops — if you give us your email address to hear about new designs, we save that address, the date you asked and which part of the site you asked from. We do not keep a name with it. There is no newsletter, so nothing is sent to it.
• Account details — if you create an account, your email address and a securely hashed password held by Supabase, the service that runs our accounts and database. We never see the password itself.
• Payment information — handled entirely by our payment processor. Card numbers are never sent to us or stored on our systems. We receive only a payment reference, the amount, and the billing name and email.
• Technical information — basic server logs such as IP address, browser type and pages requested, used to keep the site running and to spot abuse.

Why we collect it

To print, pack and post your order; to answer your questions; to process returns and refunds; to keep the business records the Australian Taxation Office requires; and, if you have asked us to, to note that you would like to hear about new designs and market dates if we ever set up a way to send them.

We do not sell personal information, and we do not share it for anyone else's marketing.

Who we share it with

Only the service providers we need to run the shop, and only the information they need:

• Payment processing — Stripe, which handles the card transaction and fraud checks.
• Accounts and order records — Supabase, which stores your order history, profile and sign-in details, the messages sent through our contact form and any address given to hear about new drops, and sends the account emails described below.
• Website hosting — Fly.io, which serves these pages from its Sydney region and keeps the basic server logs above.
• Delivery — Australia Post, which receives the name and address on the parcel label.

We may also disclose information where the law requires it, or where it is reasonably necessary to deal with a serious safety or fraud issue.

Overseas disclosure

Some of these providers store data outside Australia, including in the United States and the European Union. Two of our designers are based in Vietnam; they work on artwork and product files and do not need access to customer records. By ordering — or by sending us a message or your email address through this site, both of which are now saved with the same providers — you consent to your information being stored and processed overseas by the providers listed above.

Email we send, and marketing

We do not send marketing email. There is no newsletter: we keep the addresses that have asked to hear about new drops, and nothing is sent to them. If you have ticked a preference in your account, it records what you would like for the day we can send it, and nothing goes out in the meantime. We never send dispatch, tracking, restock or review-reminder emails.

The only email this site sends by itself is about your account: confirming your email address when you sign up, and the link that resets your password when you ask for one. Those are part of signing in, not marketing. No order confirmation is sent — your order number is shown on screen after you pay instead.

There is no unsubscribe link on this site, because there is nothing yet to unsubscribe from. If you would rather we did not keep your address in the meantime, ask us using the details under "Accessing and correcting your information" below. If we ever do start a newsletter, it will only go to people who asked for it, every message will carry an unsubscribe link, and this page will be updated before the first one is sent.

Cookies

The site uses cookies and similar browser storage to keep your basket between visits, to keep you signed in if you have an account, and to complete checkout securely. You can block or clear cookies in your browser, but the basket and checkout will not work properly without them. We do not use analytics or advertising cookies.

How long we keep it

Order and payment records are kept for at least five years, which is the period Australian tax law requires. Any address we have been given to hear about new drops is kept in our database. We have not set a period after which either is deleted, and nothing removes them on its own — they stay until we delete them by hand. You can ask us to delete yours at any time; see below.

Security

The site runs over HTTPS, payment details never touch our systems, and access to order records is restricted to the people who need it to fill orders and answer messages. Addresses given to hear about new drops are stored where only the studio's own administrative key can reach them — the key this website runs on cannot read them at all. No system is perfectly secure, but if a data breach ever occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner.

Accessing and correcting your information

Email bamstudio.support@gmail.com to ask what we hold about you, to correct it, or to ask us to delete it. We will respond within a reasonable time, usually 30 days. Deleting an account is done by hand rather than by a button — see the note on the settings page. We may need to keep some records even after a deletion request where tax or consumer law requires it, and we will tell you if that applies.

Complaints

If you think we have mishandled your personal information, tell us first — we would rather fix it. Email bamstudio.support@gmail.com with what went wrong. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Our products are bought by adults. We do not knowingly collect personal information from children, and we ask that anyone under 18 orders through a parent or guardian.

Changes to this policy

We will update this page when our practices change, and the date at the top will change with it.