New pieces every drop. Be first to hear · Get the email

Privacy policy

Last updated: 7 November 2026

This policy explains what personal information Susaura collects when you visit our website, buy from us or join the drop email list, what we do with it, and the choices you have. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

You can reach us through our Contact page or at admin@susaura.com.

What we collect

  • When you buy: your name, email address, delivery address, billing address and, if you give it, your phone number. We also keep the details of your order.
  • When you pay: card and wallet payments are handled by our payment providers. We never see or store your full card number. We receive a confirmation that the payment went through, the card brand, the last four digits and a transaction reference.
  • If you create an account: your name, email address and password (stored in scrambled form), plus your saved addresses and order history.
  • If you sign in with Apple or Google: we keep your Apple or Google account ID, the email address you chose to share with us (Apple may give us a private relay address instead of your own) and the name they share with us, which we save as the first and last name on your account (Apple only sends your name the first time you sign in). That is all we keep: no access tokens, no profile photo, and we don’t keep your Apple or Google password or get any other access to your Apple or Google account. Creating an account, and signing in this way, are both optional: you can always check out as a guest.
  • If you join the drop email list: your email address and the time you signed up.
  • If you write to us (for example through the “Find me a piece” form or by email): your name, email address and what you tell us. For a piece request that includes the maker, type, size, budget and notes you give.
  • When you visit the site: basic technical information such as your browser, device type, the pages you view and roughly where you are, collected by privacy-friendly analytics (see our Cookies and analytics page).

Why we collect it

  • To take payment, pack and post your order, and send you receipts and updates about it.
  • To answer your questions, handle returns and refunds, and look into problems with a parcel.
  • To prevent fraud and keep the shop secure.
  • To send you the drop email, but only if you asked for it.
  • To understand how people use the site so we can improve it.
  • To keep the records the law requires, including tax and consumer law records.

Drop emails and the Spam Act

We only send you marketing email if you’ve asked for it. When you check out there’s a box to receive the drop email. It’s never ticked for you, and you can leave it unticked and still buy. You can also sign up with the form on the site.

Every marketing email says it’s from Susaura and has an unsubscribe link that works straight away. If you unsubscribe, we stop sending marketing email to that address, and we process the request within 5 business days at the latest. Order emails (like your receipt and shipping update) are not marketing, so you’ll still get those for the orders you place.

Who we share information with

We share information only as needed to run the shop. We don’t sell your personal information.

  • Payment providers (card and wallet payments, and PayPal) process your payment and check it for fraud.
  • Apple or Google, if you choose to sign in with them. They know that you signed in to Susaura, and handle your details under their own privacy policies.
  • Australia Post receives your name, delivery address and, if you gave them, your phone number and email so they can deliver your parcel.
  • Our website, email and hosting providers store the shop’s data and send our emails.
  • Our accountant or bookkeeper may see order records for tax and accounting.
  • Authorities, if the law requires us to.

Some of these providers store or process information outside Australia, for example in the United States or Europe. Before we choose a provider we look at how they protect information, and we take reasonable steps to make sure they handle it in line with the Australian Privacy Principles.

Keeping your information safe

The shop uses HTTPS. Payments go through providers that meet card industry security standards. We limit who can see customer information, keep our software up to date and use strong passwords. No system is completely secure, so if we ever have a data breach that is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner as the law requires.

How long we keep it

We keep order and payment records for at least five years because the law requires it for tax purposes. We keep email list details until you unsubscribe. We keep messages you send us for as long as it takes to deal with them, plus a reasonable time afterwards in case you write again. When we no longer need information, we delete it or de-identify it.

Seeing and correcting your information

You can ask to see the personal information we hold about you, and to correct it if it’s wrong. Contact us or write to admin@susaura.com. We may need to check who you are first, and we’ll reply within 30 days. If you have an account, you can also update your details yourself.

Complaints

If you’re unhappy with how we’ve handled your information, contact us or write to admin@susaura.com, and we’ll look into it and reply within 30 days. If you’re still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Children

Our shop is for adults. We don’t knowingly collect personal information from children. If you think a child has given us information, write to us and we’ll delete it.

Changes to this policy

We’ll update this page if the way we handle information changes, and change the date at the top.