Sneaky’s Boardstore

This Privacy Policy explains how Sneaky’s Boardstore (“we”, “us”, “our”) collects, holds, uses and discloses personal information when you use our website, interact with us, or purchase products.

1. Scope

This policy applies to:

• Visitors to our website (including browsing and shopping cart use)

• Customers who place orders

• People who contact us (including via contact forms, email or social media)

• Subscribers to our marketing communications (where applicable)

It does not apply to third-party websites and services that may be linked from our website (for example, social media platforms). Those third parties handle your information under their own policies.

2. When the Privacy Act applies

The Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) apply to organisations covered by the Privacy Act. Some small businesses may be exempt, but some are still covered depending on their activities.

Regardless of whether the Privacy Act applies to us at all times, we aim to handle personal information in a way that is consistent with this policy.

3. What personal information we collect

The types of personal information we may collect include:

• A. Identity and contact details

  • name, email address, phone number, billing and delivery address

• B. Orders and transactions

  • products purchased, order history, returns/exchanges, delivery notes, communications relating to orders

  • payment status and limited payment-related information (see “Payments” below)

• C. Account and preferences (if you create an account or save details)

  • login credentials (or account identifiers), wishlists, preferences, marketing preferences

• D. Communications

  • messages you send to us (contact forms, email, social media DMs), and records of customer service interactions

• E. Website and device data

  • IP address, device identifiers, browser type, referral URLs, pages viewed, timestamps, interactions, and similar analytics/diagnostic data (often collected via cookies and similar technologies)

• F. User-generated content

  • reviews, comments, images or other content you submit

Sensitive information: We do not seek to collect “sensitive information” (as defined in the Privacy Act) unless it’s necessary and you choose to provide it (for example, you voluntarily include it in a message). If you provide sensitive information, you consent to us handling it in accordance with this policy and as permitted by law. (OAIC)

4. How we collect personal information

We collect personal information in several ways, including:

• Directly from you (checkout, contact forms, emails, newsletter sign-ups, reviews).

• Automatically when you use our website (cookies, server logs, analytics/diagnostic tools). Our website platform provider (Squarespace) may place cookies and collect usage/device data to operate and secure the site and to provide analytics and performance insights. (support.squarespace.com)

• From third parties where necessary to operate our business, such as:

• Squarespace (our website platform provider)

  • payment processors used through Squarespace (for example, Stripe and/or PayPal, depending on configuration)

  • delivery/logistics partners

  • fraud prevention and security providers

  • marketing/email providers (where applicable)

5. Payments

Our online store uses Squarespace Commerce. When you enter payment details at checkout, your payment information is collected and processed by Squarespace and/or a Squarespace-supported payment processor (such as Stripe and/or PayPal, depending on configuration). Your complete payment information is transmitted to the payment processor when you initially provide or update it, and is handled in accordance with that processor’s terms and privacy policies. We generally receive only confirmation of payment and limited transaction details required to fulfil your order.

6. Why we collect, hold, use and disclose personal information

We may use personal information for the following purposes (including but not limited to):

• Providing products and services

  • to process orders, take payment, arrange shipping and delivery, and manage returns/warranties

• Customer support

  • to respond to enquiries, resolve issues, and provide service updates

• Website operation and improvement

  • to operate, maintain, troubleshoot, secure and improve the website and shopping experience

• Marketing (where permitted)

  • to send marketing communications where you have opted in or where otherwise permitted, and to measure campaign effectiveness

  • you can opt out at any time (see “Marketing choices”)

• Security and fraud prevention

  • to detect and prevent fraud, misuse, and security incidents, and to enforce our terms and policies

• Legal and compliance

  • to comply with legal obligations, respond to lawful requests, and manage disputes/claims

• Business operations

  • internal reporting, inventory forecasting, staff training/quality assurance, and business process management

Where the Privacy Act applies, we handle personal information in accordance with the APPs (including limits on secondary uses/disclosures unless an exception applies).

7. Disclosure of personal information

We may disclose personal information to:

• Squarespace, as our website hosting/eCommerce platform provider (and its subcontractors), to operate the website, checkout, forms and related services.

• Payment processors connected via Squarespace (for example, Stripe and/or PayPal, depending on configuration) to process payments and manage chargebacks/fraud prevention.

• Delivery/logistics partners to deliver orders.

• Professional advisers (lawyers, accountants, insurers) where necessary.

• Authorities (courts, regulators, law enforcement) where required or authorised by law.

• Business transferees if we sell, merge, restructure, or transfer assets, subject to confidentiality and legal requirements.

8. Overseas disclosures

We primarily target Australian customers, but we may accept international orders. However, some of our service providers (including Squarespace and certain payment/analytics providers used through Squarespace) may store or process information outside Australia (for example, where they use overseas infrastructure or support operations). Squarespace’s own privacy materials describe cross-border transfers and that personal information may be transferred to countries with different data protection laws.

If you want current details about the main providers we use and likely processing locations, contact us and we will provide what we can.

9. Cookies, analytics and similar technologies

We use cookies and similar technologies to:

• enable core site functions (cart, checkout, security)

• remember preferences

• understand how visitors use the site (analytics)

• help improve performance and user experience

You can control cookies through your browser settings. Blocking some cookies may affect site functionality.

10. Marketing choices

If you opt in to receive marketing communications, we will send updates such as offers and product news. You can opt out at any time using the unsubscribe mechanism in the message or by contacting us.

We aim to comply with Australian spam rules (consent, identification, unsubscribe).

Where the Privacy Act applies, direct marketing must follow APP 7 (including stopping direct marketing on request).

11. Data retention and de-identification

We keep personal information only for as long as needed for the purposes in this policy, including:

• fulfilling orders and providing support

• maintaining business and transaction records (including records we may be required to keep under taxation/record-keeping obligations) (Australian Taxation Office)

• handling disputes, chargebacks, and fraud prevention

• meeting legal and regulatory requirements

Where the Privacy Act applies, APP 11 requires reasonable steps to destroy or de-identify personal information when it is no longer needed for a permitted purpose (subject to exceptions).

We may create and retain de-identified and aggregated data (which does not identify you) for analytics, reporting, and improving our services.

12. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure (for example, access controls, staff practices, and secure systems where appropriate).

No method of transmission or storage is 100% secure. To the extent permitted by law, we do not guarantee absolute security; however, we will respond to incidents in line with our legal obligations.

13. Data breaches

If we experience a data breach, we will assess and respond. If the Privacy Act and the Notifiable Data Breaches scheme apply to us, we must notify affected individuals and the OAIC when a breach is likely to result in serious harm.

14. Access and correction

If the Privacy Act applies, you may request access to the personal information we hold about you and request corrections. APP 12 and APP 13 set out these rights and how they operate (including limited grounds to refuse access in specific circumstances).

We may need to verify your identity before providing access or making changes.

15. Complaints

If you have a privacy complaint, contact us first and we will try to resolve it. If the Privacy Act applies and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC).

16. Children

Our website and products are not directed to children. If you believe a child has provided us personal information without appropriate consent, contact us and we will take reasonable steps to address it.

17. Changes to this policy

We may update this Privacy Policy from time to time by posting the updated version on our website. The “Last updated” date will change accordingly.

18. Contact us

To ask questions, request access/correction, or make a privacy complaint, contact us via our website contact page:

Contact: https://www.sneakysboardstore.com.au/contact

Last updated: 2026/02/13