Privacy Policy

1. Introduction

Surfboard Rack ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website surfboardrack.com and make purchases from our online store.

We are an Australian business and comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). By using our website, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when you:

• Create an account on our website
• Make a purchase (digital products or physical goods)
• Subscribe to our newsletter
• Contact us via email or contact form
• Submit a listing to our directory

This information may include your name, email address, postal address, phone number, and payment information.

Automatically Collected Information

When you visit our website, we may automatically collect certain information including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders (including digital product delivery)
• Communicate with you about your orders and account
• Send you marketing communications (with your consent)
• Improve our website and customer experience
• Comply with legal obligations
• Prevent fraud and maintain security

4. Payment Processing

We use Stripe to process payments. Your payment information is transmitted directly to Stripe using their secure, encrypted systems. We do not store your full credit card details on our servers. Stripe's privacy policy can be found at stripe.com/au/privacy.

5. Cookies and Tracking

We use cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and understand where our visitors come from. You can control cookies through your browser settings. Essential cookies required for the website to function (such as shopping cart functionality) cannot be disabled.

6. Third-Party Services

We may use third-party services that collect, monitor, and analyse data to improve our service. These may include:

• Stripe (payment processing)
• Supabase (data storage)
• Email service providers (transactional emails)
• Analytics services

These third parties have their own privacy policies and we encourage you to review them.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of your information (subject to legal requirements)
• Opt out of marketing communications at any time
• Make a complaint about our handling of your information

To exercise these rights, please contact us using the details below.

9. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Order and transaction records are retained for a minimum of 7 years as required by Australian tax law.

10. International Data Transfers

Some of our third-party service providers may be located outside Australia. By using our website, you consent to the transfer of your information to these countries, which may have different data protection laws. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

11. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

If you are not satisfied with our response to your privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.