PRIVACY POLICY

OVERVIEW

This Privacy Policy explains how Black Iron Clothing collects, uses, stores and discloses personal information when customers and website visitors:

• visit our website
• purchase products through Shopify checkout
• request a custom quote
• submit a custom order
• upload artwork or design files
• contact us
• interact with our services

Black Iron Clothing respects the privacy of customers and website visitors. Where the Privacy Act 1988 and Australian Privacy Principles apply to Black Iron Clothing, personal information will be handled in accordance with those requirements.

PERSONAL INFORMATION WE COLLECT

Depending on how a person interacts with Black Iron Clothing, we may collect:

• full name
• email address
• telephone number
• billing and delivery address
• order and transaction information
• products, sizes, colours and quantities ordered
• custom-order instructions
• artwork, logos, photographs and design files
• print-position and sizing approvals
• quote requests
• messages, emails and other communications
• refund, return or complaint information
• delivery and tracking information
• website usage, device, browser and technical information
• IP address
• cookie and analytics information
• payment status and transaction confirmation information

PAYMENT INFORMATION

Payments and checkout are processed through Shopify and its supported payment providers.

Black Iron Clothing does not normally receive or store a customer's complete credit-card number, card security code or online banking password. Payment providers may collect and process payment information under their own privacy policies and security requirements.

HOW INFORMATION IS COLLECTED

Personal information may be collected when a person:

• submits a website form
• requests a quote
• places an order through Shopify checkout
• uploads artwork or other files
• approves a design or print placement
• contacts Black Iron Clothing by email, telephone, social media or another communication channel
• makes a return, refund or Australian Consumer Law claim
• visits or interacts with the website

Some technical and website-usage information may be collected automatically through cookies, analytics tools and similar technologies.

PURPOSES FOR USING PERSONAL INFORMATION

Black Iron Clothing may use personal information to:

• provide quotes
• process and fulfil orders
• prepare artwork and product mock-ups
• confirm products, sizes, colours and print positions
• communicate about an order or enquiry
• arrange payment, delivery and tracking
• provide customer support
• manage returns, refunds, complaints and consumer-law claims
• verify transactions and reduce fraud
• maintain business, accounting and taxation records
• improve the website, products and services
• protect the website, business and customers
• comply with legal and regulatory requirements
• send marketing communications where permission has been provided or where otherwise permitted by law

CUSTOM ARTWORK AND UPLOADED FILES

Artwork, logos, photographs, text and design files supplied for a custom order may contain personal or business information.

Black Iron Clothing will use uploaded files for purposes connected with preparing a quote, assessing print suitability, creating a mock-up, producing the approved order, resolving production or customer-service issues, and arranging a requested reprint or repeat order. Customers should not upload unnecessary personal, confidential or sensitive information. Customers must have the appropriate rights or permission to provide and use any artwork, photographs, logos, text or other material submitted to Black Iron Clothing. Uploaded artwork will not be sold to third parties.

DISCLOSURE TO SERVICE PROVIDERS

Black Iron Clothing may disclose or make personal information available to service providers where reasonably required to operate the business or provide an order.

• Shopify and Shopify-supported checkout providers
• payment processors
• website hosting and website-building providers, including GoDaddy
• delivery and postal carriers
• email and communications providers
• accounting and record-keeping providers
• cloud-storage and data-hosting providers
• information-technology and security providers
• professional advisers
• government, law-enforcement or regulatory authorities where required or authorised by law

Service providers may only receive the information reasonably required for the relevant service. Black Iron Clothing does not sell or rent customer personal information.

SHOPIFY

Products, shopping carts, checkout, payments and order processing may be provided through Shopify.

Information entered during Shopify checkout may be collected and processed by Shopify, payment providers and other Shopify service providers. Customers should also review Shopify's applicable privacy information regarding its handling of customer data.

OVERSEAS PROCESSING

Some technology, payment, hosting, cloud, communications and ecommerce service providers operate internationally.

Personal information may therefore be processed or stored outside Australia, including in Canada, Singapore, the United States and other countries where Shopify, GoDaddy or their service providers operate. Privacy protections and legal requirements in those countries may differ from those applying in Australia. Black Iron Clothing will take reasonable steps appropriate to the circumstances when selecting and using service providers that handle personal information.

COOKIES AND WEBSITE ANALYTICS

The website may use cookies, scripts and similar technologies supplied by GoDaddy, Shopify and other authorised service providers.

• operate essential website functions
• maintain the shopping cart and checkout
• remember user preferences
• measure website visits and performance
• understand how visitors use the website
• improve website content and services
• support website security and fraud prevention

Some cookies are necessary for the website and Shopify checkout to function. Visitors may be able to manage optional cookie preferences through the website's privacy controls or their browser settings. Blocking essential cookies may prevent parts of the website, cart or checkout from working correctly.

MARKETING COMMUNICATIONS

Black Iron Clothing will only send marketing communications where consent has been provided or where otherwise permitted by law.

Every electronic marketing message will provide an unsubscribe method where required. A person may unsubscribe at any time using the link in the message or by contacting Black Iron Clothing. Unsubscribing from marketing does not prevent necessary communications about an existing quote, order, payment, delivery or customer-service matter.

INFORMATION SECURITY

Black Iron Clothing takes reasonable steps to protect personal information from:

• misuse
• interference
• loss
• unauthorised access
• unauthorised modification
• unauthorised disclosure

Security measures may include access controls, password protection, secure service providers, restricted staff access and appropriate electronic storage practices. No internet transmission, electronic system or storage method can be guaranteed to be completely secure. Customers should not send passwords, complete payment-card details or other unnecessary sensitive information by email or through general contact forms.

DATA RETENTION

Personal information is retained only for as long as reasonably required for:

• processing and completing an order
• customer service
• requested repeat orders or reprints
• resolving disputes or complaints
• warranty and Australian Consumer Law matters
• accounting, taxation and business records
• fraud prevention
• legal and regulatory obligations

Artwork and custom-order files may be retained while reasonably required for production, support, reprints, record keeping or dispute resolution. When personal information is no longer reasonably required and there is no legal reason to retain it, Black Iron Clothing will take reasonable steps to delete, destroy or de-identify it.

ACCESS AND CORRECTION

A person may request access to personal information held about them or ask for incorrect or outdated information to be corrected.

Requests should be sent to: [email protected]. Black Iron Clothing may need to verify the person's identity before providing access or making a correction. Access may be refused where permitted or required by law. Where appropriate, the reason for refusal will be explained.

DELETION REQUESTS

A person may request deletion of personal information or uploaded artwork.

Information will be deleted where reasonably possible unless it must be retained for an existing order, transaction record, legal obligation, dispute, Australian Consumer Law matter, security purpose or another legitimate business requirement.

THIRD-PARTY LINKS

The website may contain links to third-party websites, services or social-media platforms.

Black Iron Clothing is not responsible for the privacy practices or content of external websites. Visitors should review the privacy policy of any third-party service they use.

PRIVACY COMPLAINTS

A person who has a concern about how their personal information has been handled should contact Black Iron Clothing and provide:

• their name and contact details
• a description of the concern
• relevant order or communication details
• the outcome they are seeking

Black Iron Clothing will review the complaint and respond within a reasonable time. Where the Privacy Act applies and the person is not satisfied with the response, they may be entitled to contact the Office of the Australian Information Commissioner.

POLICY UPDATES

Black Iron Clothing may update this Privacy Policy when its website, technology providers, services, business practices or legal requirements change.

The current version will be displayed on the website with its latest update date.