Privacy policy

• When you order: your name, email address, phone number, and shipping and billing addresses.
• When you ask to be told about a restock: your email address and which product you asked about.
• When you browse: aggregate, non-identifying usage data — page views, referring site, approximate region and device type.

We never see or store your card details. Payment is handled entirely by Stripe on Stripe’s own pages. Your card number never reaches our servers.

To take payment, pick and pack your order, get it delivered, send you order updates, handle returns and warranty claims, meet our tax and consumer-law record-keeping obligations, and — only if you asked — tell you when something is back in stock.

• Stripe — payment processing. Stripe is bound by its own privacy policy and by PCI DSS.
• Australia Post and courier partners — the name, address and phone number needed to deliver your parcel.
• Supabase and Vercel — the hosting and database providers that run this site and our warehouse system.
• Our accountant and the ATO — where the law requires it.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

Order and customer data is held in a database hosted in Australia (Sydney region). Some providers above process data overseas; where they do, they are bound by contract to protect it to a standard comparable to the Australian Privacy Principles.

Order records are kept for seven years, because tax law requires it. Restock-alert email addresses are deleted once the alert has been sent or when you ask, whichever comes first.

This site stores your cart in your own browser (local storage) so it survives a refresh — that never leaves your device and we cannot read it. We use privacy-friendly, cookie-free analytics that count page views and performance without building a profile of you or tracking you across other sites. There are no advertising trackers or third-party marketing pixels on this site.

Email hello@bargainpicks.com.au to see what we hold about you, correct it, or ask us to delete it — we respond within 30 days, and free of charge. If you are not satisfied with how we handle a privacy complaint, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

The site runs over HTTPS, our database is access-controlled, and buyer contact details are stored encrypted. No system is perfect; if we ever have a data breach likely to cause you serious harm, we will notify you and the OAIC as the Notifiable Data Breaches scheme requires.