We follow the Australian Privacy Principles.
What we collect
Your name, email, delivery address, phone number, order history, and anything you write to us. We don't see or store card numbers.
Why
To fill and deliver your orders, answer your questions, keep records the law requires, and, only if you opt in, send our monthly email. You can unsubscribe from any email.
Who sees it
- Australia Post: delivers your order (name, address, phone).
- Stripe and PayPal: process payments (payment details go straight to them).
- Brevo: sends order emails and, if you subscribe, our monthly email.
- Google reCAPTCHA: checks that forms are sent by people, not bots.
- Google Places: suggests addresses as you type at checkout.
- Cloudflare: routes our email and protects the website.
- Linode (Akamai), Sydney: hosts the website and our order records.
Some of these services store data outside Australia (for example in the United States or the European Union). We choose providers with strong security and privacy commitments.
Cookies and your browser
Your cart, wishlist and saved addresses are kept in your own browser. We don't use analytics or advertising cookies.
Security
The site uses HTTPS everywhere; order records are kept on servers in Sydney with restricted access.
Access, correction and complaints
Ask us for a copy of your information, to correct it or to delete your account at hello@cafephin.com.au. If you're not happy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).