Privacy policy

This policy says what personal information Kastomised collects when you use kastomised.com, why we collect it, who else handles it, how long it is kept, and how you can see or correct it. We are an Australian business and we sell within Australia. We handle personal information in line with the Australian Privacy Principles. The business behind this site is named on this page, under “Who runs this site”.

The short version

• We collect what we need to make, send and support your order, and no more.
• Your card details go to Stripe. They never reach us.
• This site sets one cookie, for your cart. It has no advertising or analytics scripts.
• The only emails this site sends are about an order.
• We do not sell personal information.

When you browse

This site has no accounts and no sign-in. You can look around without telling us who you are.

The site is hosted by Cloudflare. As with any website, Cloudflare receives your IP address and basic details of your browser so it can send you each page, and it keeps technical logs of requests to the site. The 3D models and their pictures are also loaded from Cloudflare.

When you add a design code to your cart, your IP address is used to limit how many codes can be tried in a minute, so that codes cannot be guessed. It is not saved with your cart or with an order.

When you design a product

“Design yours” takes you to our product designer at go.kastomise.com. The designer is run by Kastomise, which handles what you put into it on our behalf. To make your preview and the files we print from, the designer receives:

• the photos you upload, with each photo's file name;
• the text you type;
• the options, layouts and colours you choose;
• a record of the design you confirmed: when you confirmed it, and which previews were on your screen.

When you save a design you get a design code, such as KD-7F3K9Q2M. The code is how your design reaches your cart here.

Kastomise's own privacy policy says how it keeps this information:

• It is stored in Sydney, Australia, with Amazon Web Services and Supabase. Preview pictures are delivered through a network with locations around the world.
• The photos you upload are deleted automatically seven days after you upload them. After that they exist only as part of your design's preview and print files.
• Each preview and print file made while you design is set to expire 30 days after it is made.
• When you save a design, a copy of its preview and print files is kept so we can download them. A saved design that has not been ordered is deleted, with its files, 90 days after it was saved.
• A design you order is kept, with its files, while we use Kastomise.
• The designer's pages set no cookies. They count visits without cookies, and they load fonts and code from public networks (Google Fonts and jsDelivr), which receive your IP address when your browser asks for those files.

Read Kastomise's privacy policy for the detail. Please do not put sensitive information, such as health details, into a design.

Your cart

Your cart is kept in a cookie in your browser (see “Cookies” below). It holds the codes of the designs you added and how many of each you want. For a product bought as it is, it holds the product, the option you chose and the price you were shown. It holds no name, email or address.

To show your cart, our server asks Kastomise for each design by its code: the product, your choices, the price and the preview pictures.

When you pay

Payment happens on Stripe's own checkout page, not on this site. We send Stripe what is in your order: the products, your choices, the design codes, the amounts, the shipping cost and the order number. You give Stripe your name, your email address, your delivery address and your card or other payment details. Without them we cannot take or deliver your order.

Your card details never reach us. Stripe tells us your name, your email address, your delivery address, whether the payment went through, and its own reference numbers for the payment. Stripe handles your information under Stripe's privacy policy.

Your order

We keep a record of each order in our order database, which is held by Cloudflare. A paid order's record holds:

• your name, your email address and your delivery address;
• what you bought: the products, your choices, the design codes and the quantities;
• the amounts: the items, the shipping, the GST and any refund;
• the order's number, its status and its dates;
• Stripe's reference numbers for the payment.

It does not hold your card details or a phone number. If you start a checkout and do not pay, we keep what was in the cart, and nothing about you.

When your order is paid, we tell Kastomise the order number, the quantity and your name for each design on it, so the right files are made for the right order.

Each order has a status page. Its address is in your order email, and it is long and hard to guess. Anyone who has that address can see the order, including your email address and delivery address, so share it with care.

We use your name and delivery address to send your order, and we give them to the carrier that delivers it.

Emails

We email you when your order is paid, if a payment does not go through, and if we refund you. These emails are sent through Resend, an email service. Resend receives your email address and what the email says: your name, your order and your delivery address. A copy of each new order is emailed to us the same way.

If you email us, we keep your message and your address so we can answer you and help with your order.

Cookies

This site sets one cookie:

• kcart: your cart, as described above. It is set when you put something in your cart and lasts 45 days from the last change. The site's server reads it; scripts on the page cannot. It is signed so that it cannot be altered.

Your browser also remembers how far down each page you had scrolled, so that going back returns you to the same place. That is kept in the tab's own storage and is gone when you close the tab.

This site has no advertising cookies, no analytics scripts and no social media trackers. Stripe's checkout page and the Kastomise designer are separate sites with their own practices, described in their own policies.

Who else handles your information, and where

We share personal information only with the services that help us run the shop. Some of them store or handle information outside Australia.

• Kastomise (the product designer): your designs, and the order number, quantity and name for a design you buy. Stored in Australia, as described above.
• Stripe (payments): your name, email address, delivery address, payment details and order. Stripe handles information in the United States and other countries.
• Cloudflare (hosting and the order database): your orders, and your IP address and browser details when you visit. Cloudflare runs a worldwide network, so this information can be stored or handled outside Australia, including in the United States. See Cloudflare's privacy policy.
• Resend (order emails): your email address and the contents of your order emails. Resend handles information in the United States. See Resend's privacy policy.
• The carrier that delivers your order: your name and delivery address.

We may also disclose information where the law requires it.

How long we keep it

• Orders. We keep order and tax records for as long as Australian tax law requires, which is generally five years.
• Designs. Kastomise keeps and deletes designs as described under “When you design a product”.
• Your cart. The cart cookie lasts 45 days from the last change, or until you clear your browser's cookies.
• Emails and other messages. We keep them while they are needed for your order and any follow-up.

Seeing or correcting your information

You can ask us what personal information we hold about you, and ask us to correct anything that is wrong. To ask, email hello@kastomised.com from the email address on your order, or tell us your order number. We will reply within 30 days.

You can delete the cart cookie at any time in your browser's settings. Your cart will then be empty, and any design you saved can be added again with its code.

Complaints

If you think we have mishandled your personal information, email hello@kastomised.com and tell us what happened. We will look into it and reply within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this page when what we collect or how we handle it changes. The date at the top of the page shows when it last changed.

Contact us

Questions about this policy or your information? Email hello@kastomised.com.