Privacy policy

Threaded Designs Melbourne collects only the personal information needed to quote, produce and deliver your order. This policy explains what we collect, how we use it, and your rights under the Australian Privacy Act 1988 (Cth).

What we collect

When you enquire, place an order or pay an invoice, we may collect:

• Your name and preferred contact channel (email address, Instagram handle, phone number).
• The delivery address for your order, if it is being posted.
• Order detail: the piece, the personalisation text, thread colour, artwork you send in, and any notes about the occasion.
• The email address associated with the Square payment for reconciliation, receipts and dispute handling.

What we do not collect or store: your full card number, CVV, expiry, cardholder billing address, or any authentication data. Payment card details are entered on Square's own hosted checkout and are processed by Square (Block, Inc.). Threaded Designs Melbourne never sees your raw card data.

Why we collect it

• To quote, produce and post your order.
• To respond to enquiries and messages you send us.
• To send order updates, dispatch notifications and delivery tracking.
• To keep tax and business records as required by Australian law.
• To handle refund requests and payment disputes.

We do not send marketing emails, and we do not add you to any mailing list.

Who we share it with

We share the minimum information needed with the following service providers:

• Square (Block, Inc.) processes payments. Square is bound by its own privacy policy at squareup.com/au/en/legal/general/privacy.
• Australia Post or the chosen courier receives your name and postal address to deliver the parcel.
• Cloudflare hosts this website. Standard web logs (IP address, browser type, requested page, timestamp) are retained for security and abuse prevention only.
• Google Fonts serves the web fonts used on this site. Google receives a standard HTTP request log (IP address, browser) when your browser fetches a font file. See policies.google.com/privacy.

We do not sell, rent, licence or trade personal information with anyone.

Cookies and web analytics

This website does not set marketing or tracking cookies and does not run third-party analytics. Cloudflare may set a minimal security cookie to help detect abusive traffic; nothing on this site profiles you.

How long we keep it

• Order records (name, contact, artwork, invoice): 7 years, to meet Australian record-keeping obligations for taxable supplies.
• Payment references from Square: 7 years, held inside the Square account.
• Delivery addresses: kept only as long as needed to arrange dispatch, then archived with the order record.
• Casual enquiries that do not become orders: deleted within 12 months.

Your rights

You can:

• Ask what personal information we hold about you.
• Ask us to correct anything that is wrong or out of date.
• Ask us to delete records we are not legally required to keep (tax record retention overrides deletion for the 7-year window).
• Complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your information.

Send any privacy request to support@threadeddesigns.com.au. We respond within 30 days.

Security

Your information is stored on password-protected devices and cloud accounts, kept up to date with current security patches. We use HTTPS everywhere on this site. If we ever discover a data breach that could put you at serious risk of harm, we notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Overseas transfers

Some service providers (Square, Cloudflare) process data outside Australia. Both companies operate under privacy standards comparable to Australian law and are contractually required to safeguard your data.