Privacy Policy

Overview

Zerafa Design Co Pty Ltd (ABN 75 107 154 165) ("we", "us", "our") respects your privacy and is committed to handling your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what information we collect, how we use it, who we disclose it to, how it is disclosed, and the steps we take to keep it secure.

Information We Collect

We only collect information that is reasonably necessary to run our business and provide our services. Depending on how you interact with us, this may include:

• Payment information: when you make a payment through our site, payment processing is handled directly by Stripe, Inc. We do not collect or store your full card number, expiry date or CVC on our own servers. We may receive limited transaction details from Stripe, such as your name, email address, billing details, and the amount and date of the transaction, for the purpose of order confirmation, invoicing and record-keeping.
• Contact details: if you email us, call us, or otherwise get in touch, we collect the information you provide, such as your name, email address, phone number and the content of your message.
• Technical and usage information: like most websites, our hosting provider automatically logs standard technical information when you visit, such as your IP address, browser type, device type, pages viewed and the date/time of access. This is used for security, troubleshooting and maintaining the site.

How We Use Your Information

We use the information we collect to:

• Process and confirm payments and transactions made through Stripe
• Respond to enquiries and provide the services you have requested
• Maintain accurate business, accounting and tax records
• Operate, secure and improve our website
• Comply with our legal and regulatory obligations

We do not use your personal information for any purpose that is unrelated to why it was collected, unless you have consented or the law otherwise permits it.

Who We Disclose Information To

We do not sell, rent or trade your personal information. We may disclose information to:

• Stripe, Inc. — to process payments securely. Stripe's own privacy policy governs how it handles payment data: stripe.com/au/privacy
• Our website hosting provider — to store and serve website data and logs
• Professional advisers such as our accountant, where required for legitimate business, tax or legal purposes
• Government or regulatory bodies where we are required to do so by law

We do not disclose personal information to any other third party unless required to provide a service you've requested, or required by law.

How Information Is Disclosed

Where information is shared with the parties listed above, it is disclosed electronically through secure, encrypted connections (such as HTTPS and Stripe's PCI-compliant payment infrastructure) — never by unsecured email or physical transfer of payment details.

Data Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes:

• Using a reputable, PCI-DSS compliant payment processor (Stripe) so that card details never pass through or reside on our own systems
• Serving our website over HTTPS (encrypted connection)
• Restricting access to any personal information we do hold to authorised personnel only
• Keeping software and hosting infrastructure up to date with security patches

No method of transmission over the internet is 100% secure, and while we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes it was collected for, including to satisfy legal, accounting or reporting requirements (for example, Australian tax law generally requires financial records to be kept for five years).

Access and Correction

You may request access to the personal information we hold about you, or ask us to correct it, by contacting us using the details below. We will respond to reasonable requests within a reasonable timeframe, in accordance with the Privacy Act 1988 (Cth).

Cookies

Our website may use minimal, essential cookies required for the site and payment processing (including cookies set by Stripe) to function correctly. We do not currently use these cookies for advertising or cross-site tracking.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on this page with a revised "last updated" date.

Contact Us