Privacy policy

1. Who is responsible

Sawmill Gully Spirits is the registered business name of John Allan Atkinson, ABN 35 593 182 309. This draft describes the intended information-handling approach for the business and its website. It will take effect only after review, completion of the contact details and publication of an approved live version.

A privacy contact and service address are still to be confirmed. The contact page in this preview does not send messages. Please do not use it for a real privacy request or enter sensitive information.

2. What this preview does

The local website does not accept orders, payments, account sign-ins, enquiries or mailing-list subscriptions. Names, email addresses and marketing choices entered in the welcome form are not sent, logged or saved by the form; the fields are cleared when the offer is claimed or dismissed. The contact form only demonstrates validation.

The browser remembers the adult-entry acknowledgement, sample bag and welcome-offer state in session storage. Offer timing also remembers up to 30 seconds of active browsing and whether the collection or a product has been viewed, within the tab/session. A local timestamp suppresses the automatic offer for 14 days after dismissal. No analytics, advertising pixels or third-party marketing trackers are included. The local web server handles the technical requests needed to display the site. External links take you to services with their own privacy practices.

3. Information the live store would collect

Once the store is connected, information will be collected only for identified purposes. The final configuration must be checked against the following proposed categories:

• Name, email, telephone number and delivery/billing addresses for enquiries, purchases and delivery.
• Order, payment-status, refund and correspondence records. Payment processing will use the configured Shopify checkout/payment providers; the custom storefront is not intended to receive full card details.
• Date of birth and minimum necessary age or recipient-check records for lawful alcohol sales and delivery. Do not send identity documents through an ordinary enquiry or marketing form.
• Marketing preferences, consent records and unsubscribe requests where you choose to receive news.
• Technical and security information, such as request, device or error data, where necessary to run and protect the service. Optional tracking would be described and configured before use.

4. How and why information is used

Information may come directly from you, from an authorised recipient you nominate, or from the checkout, payment, delivery and support services used to fulfil your request. It would be used to answer enquiries, administer accounts and orders, process payments/refunds, deliver goods, prevent fraud, meet legal duties and maintain the website.

You may browse without placing an order or joining a mailing list. Some details are necessary to complete an alcohol purchase or delivery; if they are not supplied, that service may be unavailable. Marketing is a separate choice. A purchase, enquiry or account sign-in will not be treated as permission for ongoing promotional email.

5. Shopify and other service providers

The planned store uses Shopify for commerce and hosted customer accounts, with Shopify Messaging proposed for email marketing. Relevant information may also need to be handled by payment providers, delivery services, website hosting/support providers and professional advisers, or disclosed when lawfully required.

Shopify supplies the platform; Sawmill Gully Spirits remains responsible for its dealings with customers and its own data-handling choices. The actual apps and services must be identified before launch. The proposed approach is to limit provider access to what their task requires and avoid a separate duplicate customer database.

6. Overseas handling

Using Shopify may involve processing outside Australia. Shopify identifies group entities and service providers in locations including Canada, Singapore and the United States, with other locations depending on the services used. Its published provider list describes corporate locations and is not a complete map of this store’s particular data flows.

Before live collection, the business must confirm and describe its likely overseas recipients and countries, including those introduced by installed apps and hosting. This draft does not promise that information stays in Australia or treat use of the website as blanket consent to every overseas disclosure.

7. Marketing choices

The proposed welcome offer and ongoing news subscription are separate. Ongoing promotional emails will use a clear opt-in choice and a working unsubscribe option. An unchecked choice will not enrol a new subscriber or cancel an existing subscription.

Unsubscribe requests will be actioned within five working days. Unsubscribing is free and will not require an account sign-in or extra personal details. Necessary order or service messages may still be sent where appropriate; they will not be used to bypass marketing choices. The preview currently sends neither type of message.

8. Storage, security and retention

The proposed controls include limited staff/provider access, secure connections and collecting only what is needed. No online service can promise absolute security. Retention will be based on the purpose of collection and applicable accounting, alcohol-delivery, dispute and other legal duties.

Records will be deleted or de-identified when no longer needed, subject to lawful retention and backup processes. Unsubscribe suppression records may need to be kept so that a preference is respected. The exact schedule, age-check handling and provider deletion processes must be confirmed before this policy is activated.

9. Access, corrections and complaints

You may ask the business to explain its handling of your information, request access, seek a correction or raise a complaint through the privacy contact to be published before launch. Identity checks will be proportionate to the request. If a request cannot be met, the business will explain the applicable reason and available next steps.

The proposed complaint process is to acknowledge the concern, investigate and aim to provide a substantive response within 30 days, with an update if more time is reasonably needed. Where the Privacy Act applies, unresolved privacy complaints may be taken to the Office of the Australian Information Commissioner after first giving the business an opportunity to respond. This draft does not restrict any other available complaint or legal rights.

10. Updates and contact details

The approved policy will show its current date and explain material changes to the way information is handled. Proposed new uses or optional services will be reviewed before activation. Final contact details and the confirmed live data flows are required before this draft can become the operating policy.