Privacy
Policy.

01Who we are

This website (office2outback.com) is run by Office 2 Outback (ABN 47 563 704 459), based in Western Australia, Australia.

For anything privacy-related you can reach us at office2outback@gmail.com. Postal address available on request.

This policy explains what personal information we collect when you visit the site, sign up to the newsletter, or buy something from the store — and what we do (and don't do) with it. It's written under the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). If you're visiting from the EU/UK, the relevant sections on your rights and international transfers apply to you too.

02What personal data we collect, and why

We collect different bits of information depending on what you actually do on the site. Here's the full list — no hidden categories.

We don't knowingly collect anything from anyone under 16, and we don't collect "sensitive information" as defined by the Privacy Act (health, racial or ethnic origin, political views, etc.) — none of that is relevant to selling 4WD gear or running a YouTube channel.

03Orders, accounts & the store

The store runs on WooCommerce (a WordPress plugin). When you buy something or create an account, WooCommerce stores your order history, shipping address, and contact details so we can fulfil the order and so you can look back at past orders next time you log in.

Payments

We accept payments through two services: Woo Payments (which handles credit/debit cards, Apple Pay, Google Pay and similar) and PayPal (for PayPal account payments). In both cases your card or PayPal credentials are entered directly into the processor's secure form — they never touch our servers, and we have no way to see or store them. We only receive a confirmation that payment succeeded, the last four digits of your card (for receipts), and the billing address you entered.

Print-on-demand products

Some products in our store (apparel, stickers, prints) are fulfilled by Printify. When you order one of these, your name, shipping address, and order details are sent automatically to Printify, who passes them on to the print partner closest to you. Their privacy policy is at printify.com/privacy-policy.

What we send you

We use your email and address to send you order confirmations, shipping updates, and the occasional follow-up if there's a problem with your order. These are transactional emails — you'll get them as long as you have an open order with us, regardless of newsletter status.

Accounts

If you create a store account, we keep your name, email and order history until you ask us to delete it. You can update or delete your account anytime by logging in, or by emailing us.

04Cookies & analytics

Cookies are small text files your browser stores so a site can remember things between page loads. We use them sparingly.

The cookies we use

• WordPress / WooCommerce session cookies — keep your cart full, keep you logged in, and remember which products you've viewed. Expire when you close your browser or shortly after.
• Analytics cookies — we use Google Analytics 4 to understand which articles get read and which videos drive traffic. The data is aggregated — we can't tie a page view to your name.

Embedded content

Some posts embed videos from YouTube or links to Instagram / Facebook. These embeds can set their own cookies and track your interaction with them as if you had visited those sites directly. Their privacy policies apply to that activity.

Opting out

You can block or delete cookies in your browser settings. Note that turning off cookies will break things like the shopping cart and account login. For the full list of cookies we use and how to manage each category, see our Cookie Policy.

05Contact forms & uploaded media

If you reach out to us through the contact form on the site, we receive your name, email, and whatever you wrote. The form is powered by WPForms, which stores submissions in our WordPress database on Hostinger.

If your message also opts you in to our newsletter, your name and email are passed automatically via make.com to Mailchimp so we can add you to the list. Otherwise your contact-form submission stays within WordPress.

We use what you send us to reply, and we keep the thread for as long as it's useful — typically up to 12 months — then delete it. You can ask us to delete it sooner anytime.

Blog comments are disabled on this site, and we don't allow visitors to upload media (photos, videos). If either of those changes, this section will be updated.

06Who we share your data with

We do not sell, rent, or trade your personal information. We share specific bits of data with specific service providers, only when it's necessary to run the site and the store. They each have their own privacy policy.

We may also disclose information if we're legally required to — for example, in response to a valid subpoena or court order from an Australian authority.

07How long we keep your data

Different bits of data hang around for different lengths of time. Roughly:

• Order & account records — kept for 7 years after the last order, because Australian tax law requires us to keep business records that long.
• Newsletter subscribers — kept until you unsubscribe (one-click link in every email).
• Contact form messages — typically deleted after 12 months.
• Analytics data — retained for up to 26 months in aggregated form in Google Analytics, then auto-deleted.
• Server logs — IPs and request logs kept by Hostinger for up to 30 days for security and debugging, then rotated out.

08What rights you have over your data

You can ask us to:

• Show you a copy of the personal information we hold about you.
• Correct anything that's wrong or out of date.
• Delete your account and personal data (where we're not legally required to keep it — e.g. tax records).
• Export the data you've given us in a portable format.
• Unsubscribe from the newsletter (one click, no questions).
• Withdraw consent for anything you previously agreed to.

To exercise any of these, email office2outback@gmail.com from the address tied to your account. We'll respond within 30 days.

If we can't sort out a privacy issue between us, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

09Where your data is sent

Some of the services we use are based overseas — primarily in the United States (Google Analytics, Mailchimp, Printify, make.com, Woo Payments, PayPal) and the European Union. That means your data may be transferred outside Australia in the course of normal site operation. For print-on-demand orders, your shipping details may be sent to whichever Printify print partner is closest to you, which could be inside or outside Australia depending on the product.

We pick providers that are reputable and that publish their own privacy standards. Where applicable, transfers from the EU/UK rely on the relevant Standard Contractual Clauses or adequacy decisions in those providers' terms.

10How we protect your data

We take reasonable, sensible steps:

• The whole site is served over HTTPS — anything you type into a form is encrypted in transit.
• Card and PayPal payments are handled by Woo Payments and PayPal — both PCI-DSS-compliant. We never store card numbers ourselves.
• Admin accounts use strong unique passwords and two-factor authentication where available.
• WordPress core, WooCommerce, and plugins are kept up to date.
• Database backups are encrypted and kept on a separate, access-restricted service.

No system is bulletproof, and we won't pretend otherwise — but we try to be the boring, low-drama kind of website on this front.

11If a data breach happens

Under Australia's Notifiable Data Breaches scheme, if we have a breach that's likely to cause serious harm to anyone affected, we'll:

• Contain it as quickly as we can.
• Notify the affected people directly, via the email address on file.
• Notify the Office of the Australian Information Commissioner.
• Explain what happened, what data was involved, and what you should do.

12Changes to this policy

If we change how we collect or use data, we'll update this page and bump the "Last updated" date at the top. For meaningful changes that affect your rights, we'll also email anyone who has an account or a newsletter subscription with us.

13Contact us

Anything you want to ask, correct, or have deleted — flick us an email. We're a small operation, so it's a real person on the other end.