Privacy

• Your name, email address and shipping address, when you place an order.
• What you bought, what you paid, and the status of the order.
• Anything you choose to put in an email to us.

We do not ask for a date of birth, a phone number or an account password. There is no customer login on this site.

Card details are entered on Stripe’s own checkout page and are never sent to, stored by, or visible to us. We receive confirmation that a payment succeeded, the amount, and the last four digits Stripe chooses to show. Stripe’s handling of your data is governed by their privacy policy.

Only what the shop needs to work. Your bag is kept in your own browser’s local storage so it survives a refresh, and it never leaves your device except as the list of items sent to create a checkout. Stripe sets its own cookies on its checkout page for fraud prevention.

No advertising cookies, no analytics, no third-party trackers, no pixels. That is why there is no cookie banner.

• Stripe — payment processing.
• Supabase — the database holding orders and the catalogue, hosted in Sydney.
• Vercel — hosting for the website itself.
• The postal carrier — name and address only, so it can be delivered.

We do not sell, rent or share your details with anyone else, and we do not send marketing email unless you have asked for it.

Order records are kept for seven years, because Australian tax law requires it. Emails are kept as long as they are useful and then deleted.

Email hello@trinketory.com and we will send you everything we hold about you, correct it, or delete it — other than order records we are legally required to keep. We will reply within 30 days.

Trinketory is an Australian business and handles personal information in line with the Australian Privacy Principles under the Privacy Act 1988. If you think we have got something wrong, tell us first — and if you are not satisfied with the response, you can complain to the Office of the Australian Information Commissioner.