← Back to the website

Privacy Policy

Last updated: 11 October 2026

How we collect, use and protect your personal information. Maddison Avenue Leather is a business name of Dino Biasuzzo, ABN 23 951 720 169. Not registered for GST.

Our approach

We are a small business. Whether or not the Privacy Act 1988 (Cth) strictly applies to us, we handle your personal information in line with the Australian Privacy Principles. We only collect what we need to make and deliver your order and to talk to you about it.

What we collect

• When you order (through Stripe Checkout): your name, email address, phone number (used for delivery), delivery address, billing address if requested, and the details of your order, including your choices and any personalisation text.
• Payment details: entered directly on Stripe's secure page. We never see or store your full card number. Stripe shares with us whether the payment succeeded and the last digits of the card.
• When you email us: your email address and what you tell us.
• Website data: when you visit, our web server and our security provider Cloudflare process technical data such as your IP address and the pages requested, to deliver the site and protect it from attack.

How we use it

• To make, ship and support your order, and send receipts and order messages.
• To respond to your enquiries and any claim under our Refunds & Returns Policy.
• To keep records for tax and business purposes, prevent fraud and keep the website secure.

We do not sell or rent your personal information. We do not send marketing emails or run a newsletter.

Who we share it with

• Stripe: processes payments, issues receipts and helps prevent fraud.
• Australia Post: receives your name, delivery address and contact details so that it can deliver your parcel.
• Cloudflare: delivers and secures our website.
• Microsoft and GoDaddy: provide our business email and domain name, so they handle emails you send us.
• Google: our website loads fonts from Google Fonts, so Google receives your IP address when a page loads.
• Authorities: where the law requires or allows it.

Overseas disclosure

Stripe, Cloudflare, Microsoft and Google operate globally. Your information may be processed or stored outside Australia, including in the United States and other countries where those providers operate. We choose reputable providers and take reasonable steps to make sure they protect your information.

Cookies and tracking

We do not use advertising or analytics cookies. The website keeps your cart in your own browser's storage so that it is there when you return. Stripe and Cloudflare may set cookies that are needed for secure payments and site security.

Security and how long we keep it

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including restricting access and using encrypted connections. We keep order records for at least five years for tax and business record-keeping, then delete or de-identify them unless we need them for a claim or the law requires otherwise.

Access, correction and complaints

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it where we are allowed to. Email [email protected]. We will respond within a reasonable time, usually within 30 days. If you are not satisfied with how we handled a privacy concern, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We may update this policy. The date at the top shows when it was last changed.