Privacy Policy

1. What we collect

• Order information — name, email, phone number, delivery address and order history.
• Payment information — we do not store your card number. Payments are processed by our payment providers under PCI-DSS; we receive a transaction reference and the last four digits only.
• Communications — emails, contact-form messages and call notes, so support requests have context.
• Technical information — IP address, browser type, pages viewed and referring page, from server logs and analytics.
• Marketing preferences — if you subscribe, your email address and whether you opened the message.

We do not collect sensitive information, and we ask that you do not send it to us.

2. Why we collect it

To process and deliver orders; issue tax invoices; provide warranty and support; prevent fraud; meet our legal obligations, including keeping financial records for seven years under Australian tax law; improve the site; and, where you have opted in, send you marketing.

3. Who we share it with

• carriers — Australia Post, Aramex, StarTrack — to deliver your parcel;
• payment providers, to process and refund transactions;
• manufacturers and authorised service agents, where a warranty claim requires it;
• our accountant and IT providers, under confidentiality obligations; and
• government bodies or law enforcement, where legally required.

We do not sell your personal information, and we do not rent or trade our mailing list.

4. Overseas disclosure

Some service providers store data outside Australia, principally in the United States and the European Union (for example our email platform and analytics provider). We take reasonable steps to ensure they handle your information consistently with the Australian Privacy Principles.

5. Cookies and analytics

This site uses cookies and local browser storage for essential functions — keeping your cart between visits and keeping you signed in. We also use analytics to understand which pages are useful. You can block or delete cookies in your browser; the cart will stop persisting if you do, but the store otherwise works normally.

6. Direct marketing

We only email marketing to people who opt in, and every message carries a one-click unsubscribe that we act on immediately. You can also email privacy@mbh-digital.com and ask to be removed.

7. Security

The site is served over HTTPS. Access to order data is restricted to staff who need it and protected by multi-factor authentication. If a data breach likely to cause serious harm occurs, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

8. How long we keep it

Order and invoice records are kept for seven years, as tax law requires. Marketing data is kept until you unsubscribe. Contact messages are kept for two years. After that we delete or de-identify the information.

9. Accessing and correcting your information

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it. Email privacy@mbh-digital.com — we respond within 30 days and do not charge for a reasonable request.

10. Complaints

If you think we have mishandled your information, email privacy@mbh-digital.com or write to The Privacy Officer, MBH DIGITAL STORE PTY LTD, 367 High Street, Northcote VIC 3070, Australia. We acknowledge within 5 business days and aim to resolve within 30 days. If you are not satisfied, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

11. Contact

MBH DIGITAL STORE PTY LTD · ABN 83 683 683 981 · 367 High Street, Northcote VIC 3070, Australia · privacy@mbh-digital.com · (+61) 426 506 887.