Privacy

This policy explains what personal information Astral Attic, a registered business name run from Brisbane, Australia (ABN 19 632 797 274) collects, why, and what we do with it.

WHAT WE COLLECT

• When you order: your name, email, shipping and billing address, and phone number if you give it.
• When you send a request for a made-to-order piece: your name, email and the details you write.
• When you sign up for letters or a restock alert: your email address.
• When you email us: whatever you choose to tell us.
• When you visit the site: technical details such as your IP address and browser, kept in our hosting provider's logs for security and fixing problems.

We never see or store your card details. Payments are handled by Stripe.

HOW IT'S USED

To make and send your order, keep you updated about it, answer your messages and requests, prevent fraud, and keep the records the law requires. We only send letters and restock alerts if you sign up for them, and every one has an unsubscribe link. We never sell your information.

WHO IT'S SHARED WITH

Only the services we need to run the shop: Stripe (payments), Australia Post (delivery), Cloudflare (website and image hosting), Railway (our order database), Resend (order and newsletter emails) and our email provider. Some of these store information outside Australia, mainly in the United States.

COOKIES

The site sets one cookie to remember your cart, which lasts 30 days. At checkout, Stripe sets its own cookies to help prevent fraud. Your day or night setting is saved in your browser and never sent to us. We don't use advertising or tracking cookies.

HOW LONG WE KEEP IT

Order records are kept for five years, as Australian tax law requires. Email sign-ups are kept until you unsubscribe. Requests and messages are kept while they're useful for your order, then deleted.

ACCESS, CORRECTION AND COMPLAINTS

You can ask to see, correct or delete your information at any time by emailing hello@astralattic.com.au. If you're unhappy with how we've handled your information, tell us first and we'll reply within 1–2 business days. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.