Privacy Policy

Last updated 21 August 2026

Litepix Pty Ltd (ABN 23 879 696 271) operates https://store.litepix.com.au. This policy explains what personal information we collect through the store, why we collect it, who we share it with and what you can do about it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What we collect

We collect only what we need to sell you something and support it:

Order details — your name, email address, delivery address and contact phone number, what you bought, what you paid, and the status of the order. We ask for a phone number on every order so the carrier can reach you about a delivery and we can reach you about a problem.
Account details, if you create an account — your name, email address and a one-way hash of your password. We never store the password itself. If you turn on two-factor authentication we also store the secret and backup codes that make it work.
Things you choose to add — product reviews (published with the name on your account), wishlist items, and any message you send us.
Technical information — your IP address and basic request data, used to apply rate limits and to detect abuse, plus download activity against the links issued for digital purchases.
Anonymous usage statistics — for each page you open we record the page address (without anything after the “?”), the website that referred you, the campaign tags on the link if there were any, your country, whether you are on a phone, tablet or computer, and the time. We do not store your IP address or your browser's user-agent string alongside this. Instead we combine them with a secret value that changes every 24 hours and keep only the irreversible result, so we can tell how many separate people visited on a given day without being able to work out who they were — and once the day's secret is deleted, neither can anyone else.

We never see your card details. Payment happens on a page hosted by Stripe, and your card number, expiry and security code go directly to Stripe. What comes back to us is a payment reference and whether it succeeded.

2. Cookies and tracking

The store sets a cookie to remember your cart, and another to keep you signed in if you have an account. Both are necessary for the store to work, and neither is used to build an advertising profile. We do not run third-party advertising or cross-site tracking cookies, and we do not fingerprint your device.

We count visits ourselves, using the anonymous statistics described above. That measurement stores nothing at all on your device — no cookie, no local storage, no identifier — which is why you are not asked to accept anything to browse the store. The statistics are kept on our own systems and are not shared with any advertising network.

We do not run any third-party analytics on the store.

3. How we use it

We use your personal information to:

take payment, and process your order, delivery and any refund;
send transactional email — order confirmations, download links, dispatch notices, refund confirmations, password resets and email verification;
run your account, including order history, downloads, wishlist back-in-stock alerts and reviews;
remind you, if you are signed in and your checkout expired before payment, that your items are still available;
keep the store secure and working — rate limiting, fraud prevention, diagnosing faults;
understand in aggregate which pages and products people look at, and how they found us, so we can improve the store;
meet our legal obligations, including keeping tax and transaction records.

We do not sell your personal information, and we do not send marketing email unless you have asked us to.

4. Who we share it with

We share personal information only with the service providers that make the store run, and only with what they need:

Stripe — payment processing, refunds and fraud screening. Stripe receives your email address and order amount, and collects your card details directly.
Resend — delivery of the transactional emails listed above, which means your email address and the contents of that email.
Cloudflare — storage of product images and digital files in a private bucket, and delivery of your downloads.
Our hosting and database providers — who store the store's data on our behalf.
Delivery carriers — your name, delivery address and contact details, so your order can be delivered.

Some of these providers are located overseas, including in the United States and the European Union, so your information may be stored or processed there. We may also disclose information where the law requires it, or to establish or defend a legal claim.

5. How we protect it

The store is served over HTTPS. Passwords are hashed, admin access is restricted and can require two-factor authentication, digital files sit in a private bucket reachable only through short-lived signed links, and every administrative change to your data is recorded in an audit log. No system is perfectly secure, but if a data breach ever put you at likely serious harm, we will notify you and the Office of the Australian Information Commissioner as the law requires.

6. How long we keep it

Order and payment records are kept for at least seven years, because tax law requires it. Account information is kept while your account is open. Anonymous usage statistics are deleted after 90 days, and the daily secret that makes them countable is destroyed within 48 hours.If you ask us to close your account we will delete or de-identify what we can and keep only those transaction records we are obliged to hold.

7. Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct anything that is wrong, ask us to delete what we are not required to keep, or object to a particular use. Email us and we will respond within a reasonable period — normally 30 days. We may need to verify your identity first.

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. If you are still not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Children

The store is not intended for children, and we do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it.

9. Changes

We may update this policy. The current version is always on this page, with the date it took effect at the top.

10. Contact

Privacy questions and requests: contact us through the store.