Privacy Policy

This site is operated by [LEGAL ENTITY NAME TO BE CONFIRMED] (ABN [ABN TO BE CONFIRMED]), trading as ChocoMate at chocomate.au (“we”, “us”, “our”). You can reach us any time at sales@chocomate.au. Our postal address for privacy correspondence is [BUSINESS ADDRESS TO BE CONFIRMED].

We only collect what we need to take and fulfil an order, or to send you email you asked for.

• Order details — your name, email address, phone number (if you give one), delivery address, and any delivery notes you add at checkout.
• Newsletter signups — your email address, and the date you subscribed.
• Technical information — standard web server logs kept by our hosting provider, such as IP address, browser type and the pages requested.

We do not collect or store your card number, expiry date or CVC. Card details are entered directly on Stripe’s hosted checkout page and are handled by Stripe. We only receive confirmation that a payment succeeded, along with the amount and the last few digits of the card where Stripe provides them.

• To take payment for, pack and deliver your order.
• To send you order confirmations, delivery updates and receipts.
• To answer questions, handle returns and resolve problems with an order.
• To send marketing email, only if you subscribed to our newsletter.
• To keep records we are required to keep, such as sales records for tax purposes.

We do not sell your personal information, and we do not disclose it for third-party advertising.

We use a small number of service providers to run the store. They only receive what they need to do their job:

• Stripe — payment processing and checkout.
• Google Firebase (Firestore) — storing order and subscriber records.
• Resend — sending order confirmation and newsletter email.
• Vercel — hosting this website.
• Delivery carriers — your name, address and phone number, so your parcel can be delivered.

Several of these providers store and process data on servers outside Australia, including in the United States and the European Union. By placing an order you consent to your information being handled overseas by these providers for the purposes described above. We may also disclose information where the law requires it.

This site uses only the cookies and browser storage needed for it to work — for example, keeping your cart contents while you shop, and the session cookie Stripe sets during checkout. We do not currently run third-party advertising or analytics trackers on this site. If that changes, we will update this policy.

We keep order records for as long as we need them to service the order and to meet our record-keeping obligations (generally at least five years for sales records). Newsletter subscriptions are kept until you unsubscribe. You can unsubscribe from marketing email at any time using the link in the email, or by emailing us.

We take reasonable steps to protect your information, including using reputable providers, serving this site over HTTPS, and limiting who can access order data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email sales@chocomate.au and we will respond within a reasonable time, normally within 30 days. We may need to verify your identity first.

If you think we have mishandled your personal information, please tell us first so we can try to fix it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy as the business changes. The current version always appears on this page with the date it was last updated.