1. What This Policy Covers

This Privacy Policy applies to all users of the Made in Arnhem Land marketplace, including buyers, sellers, and visitors.

2. Information We Collect

Some personal information is required to provide marketplace services, including account creation, order processing, seller onboarding, and payment processing.

If required information is not provided, we may be unable to provide certain services or complete transactions.

We may collect:

• Name and contact details
• Billing and shipping address
• Business details (including ABN where applicable)
• Payment-related information (processed via third-party providers)
• Order and transaction history
• Seller verification and certification information
• Communications with us
• Website usage data, cookies, and analytics

3. How We Collect Information

We collect information when you:

• Create an account
• Place an order
• Register as a seller
• Apply for certification
• Contact support
• Browse or interact with the platform

4. How We Use Information

Where consent is required for particular uses of personal information, consent may be withdrawn at any time by contacting us. Withdrawal of consent may affect our ability to provide certain services.

We use personal information to:

• Operate and manage the marketplace
• Process transactions and payments
• Enable order fulfilment and delivery
• Support seller onboarding and certification
• Provide customer support
• Detect fraud or misuse
• Improve the platform
• Comply with legal obligations

5. Disclosure of Information

We may share information with:

• Sellers (to fulfil orders)
• Payment providers
• Shipping and logistics providers
• IT and service providers
• Legal and regulatory authorities where required

6. Overseas Disclosure

Some third-party service providers (such as hosting, analytics, or payment services) may store or process personal information outside Australia.

We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, including through contractual arrangements or other safeguards, unless an exception under the Privacy Act applies.

7. Cookies & Analytics

We use cookies and similar technologies to:

• Improve functionality
• Understand usage
• Enhance performance

You may disable cookies via your browser settings.

8. Data Security

We take reasonable steps to protect personal information from unauthorised access, loss, or misuse.

9. Data Deletion & Retention

You may request that we delete or de-identify your personal information at any time by contacting us. We will acknowledge your request promptly and aim to respond within 30 days.

We will take reasonable steps to delete your personal information where:

• The information is no longer required for the purposes for which it was collected, and
• We are not required to retain it under applicable laws or for legitimate business purposes

In some cases, we may be required or permitted to retain certain information, including where necessary to:

• Comply with legal or regulatory obligations
• Complete or manage ongoing transactions
• Resolve disputes or enforce agreements
• Detect or prevent fraud or misuse

Where deletion is not possible, we may retain and securely store the information or de-identify it so that it no longer identifies you.

We may retain transactional and financial records for a minimum of 5 years, and in some cases up to 7 years or longer, to comply with Australian taxation, accounting, and regulatory obligations.

Data breaches

In the event of a data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

10. Access & Correction

You may request access to or correction of your personal information by contacting us.

11. Marketing Communications

We may send marketing communications where permitted by law.

You may opt out of receiving marketing communications at any time by using the unsubscribe option provided or by contacting us.

Requests to opt out will be actioned within a reasonable timeframe.

12. Changes to This Policy

We may update this policy from time to time. Updates will be published on this page.

13. Governing Law

This policy is governed by the laws of the Northern Territory, Australia and applicable Commonwealth laws.

14. Complaints

If you believe your privacy has been breached, you may lodge a complaint with us using the contact details above.

We will acknowledge receipt of your complaint promptly and aim to respond within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).