Privacy policy and data handling

Information the Company Collects

The Company collects personal information from users only when they voluntarily provide it through the website's contact form or by directly communicating with the Company by email or other means. The Company also collects certain non-identifying technical information automatically when users access the website, including browser type, device type, and pages visited. This information is used solely for the purpose of maintaining and improving the website's performance and is not linked to any personally identifiable data unless the user has also submitted a contact form.

Name and email address submitted through the website contact form or direct email correspondence with the Company.
The content of messages sent to the Company through the website, including any craft-related questions or project submissions.
Technical data collected automatically, including IP address, browser type, device type, and pages visited during a session on this website.
Cookie data as described in the Company's Cookie Policy, including session cookies and analytics cookies where the user has not opted out through browser settings.
Any additional personal information voluntarily provided by the user in the course of contacting or corresponding with the Company, including postal location details where relevant to a query.

The Company does not collect sensitive personal information such as financial details, government identification numbers, or health-related data. Users are advised not to submit such information through any form or communication channel on this website, as the Company has no requirement for it and cannot guarantee its security in that context.

How the Company Uses Collected Information

Personal information collected through the contact form or direct correspondence is used solely to respond to the user's enquiry, provide relevant information about hammered flower printing techniques, and maintain an ongoing correspondence where the user has indicated they welcome it. The Company does not use personal contact details for unsolicited commercial communications. Email addresses provided through the contact form are retained only for as long as is necessary to fulfil the purpose for which they were provided, unless the user has explicitly requested ongoing correspondence or community updates from the Company.

Automatically collected technical data is used to monitor website performance, identify technical errors, and understand how visitors navigate the site in aggregate terms. This data is reviewed periodically to inform decisions about content structure and site improvements. The Company does not use automatically collected technical data to build individual user profiles, to serve targeted advertising, or to share with third-party marketing organisations. Where analytics services are used, they are configured to anonymise user data to the extent technically possible under Australian privacy law.

Rights of Website Users

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, users have certain rights with respect to their personal information held by the Company. These include the right to request access to personal information the Company holds about them, the right to request correction of inaccurate or incomplete information, and the right to request that the Company delete personal information where it is no longer required for the purpose for which it was collected. Users also have the right to make a complaint to the Office of the Australian Information Commissioner if they believe their privacy rights have been breached. The Company will respond to all privacy-related requests within a reasonable timeframe and in accordance with applicable Australian law.

Right of Access

Users may request a copy of the personal information the Company holds about them at any time by contacting the Company using the details provided on the Contact page of this website.

Right to Rectification

Where personal information held by the Company is inaccurate, incomplete, or out of date, users may request that it be corrected or updated promptly.

Right to Erasure

Users may request deletion of their personal information where it is no longer necessary for the purpose for which it was originally collected by the Company.

Right to Portability

Users may request that personal information they provided to the Company be supplied to them in a commonly used and machine-readable format where technically feasible.

How the Company Shares Personal Information

The Company does not sell, rent, or trade personal information to third parties under any circumstances. Personal information collected through this website is not shared with marketing organisations, data brokers, or advertising networks. The Company does not use personal contact details to build audience profiles for commercial purposes.

The Company may share personal information with trusted third-party service providers who assist in operating this website, including hosting providers and analytics services, where those providers are bound by appropriate data handling obligations consistent with Australian privacy law. The Company may also disclose personal information where required to do so by law, court order, or at the direction of a regulatory authority with jurisdiction over the Company's operations. In all such cases, the Company will disclose only the minimum information required to satisfy the legal obligation.

Security of Personal Information

The Company takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. The website is maintained with standard security measures appropriate to the nature and volume of personal information collected. Contact form submissions are transmitted using encryption where the user's browser supports it, and stored securely with access limited to authorised personnel only. The Company reviews its data security practices periodically to ensure they remain appropriate.

While the Company applies reasonable security measures, no method of electronic transmission or storage is entirely secure, and the Company cannot guarantee the absolute security of personal information transmitted via the internet. Users transmit personal information through this website at their own risk. If a user has reason to believe that their personal data has been compromised in connection with this website, they are encouraged to contact the Company immediately using the details provided on the Contact page.

Privacy Policy