Privacy policy

We try to collect as little as we can while still running a business responsibly. This page explains exactly what we hold, why, and what you can ask us to do with it.

Who we are

Boronia & Brick is a sole-trader business in Australia. The controller of any personal information we collect is the business owner, contactable at hello@boroniaandbrick.com.au.

What we collect

When you visit the site:

• Standard request information (IP address, browser type, referrer) via our hosting provider for security and analytics

When you buy a volume:

• The email address you provide at checkout
• The Paddle transaction ID, amount, and currency of your order
• A record of which volumes you own (your “entitlements”)

When you sign in to your library:

• A session cookie used to keep you signed in
• A log of file downloads (entitlement ID, IP address, user agent, timestamp) for abuse detection

We do not see or store your payment card details. Paddle handles all billing as our merchant of record. They issue their own privacy notice that applies to that part of the transaction.

Why we collect it

• To deliver the volumes you bought
• To let you re-download them in future
• To respond to customer support questions you send us by email
• To detect and prevent abuse, fraud, or unauthorised distribution
• To meet our legal and tax obligations

What we don’t do

• We do not send marketing emails unless you have explicitly opted in
• We do not sell, rent, or trade your personal information
• We do not use behavioural advertising or third-party trackers

Who else sees your information

We use a small number of trusted service providers to operate the business:

• Paddle — payments, tax compliance, invoicing (merchant of record)
• Supabase — database and file storage hosting
• Vercel — website hosting
• Resend — sending receipts and download links
• Google Workspace — receiving and replying to customer email

Each of these providers has its own privacy practices. We share only what is needed for them to do their job.

Where your data lives

Our database and file storage are hosted in the Sydney region of Australia. Some of our service providers may process data in other countries (for example, Paddle in the United Kingdom or Resend in the United States) under appropriate cross-border transfer protections.

How long we keep it

• Order and entitlement records: indefinitely while you may want re-downloads, plus a minimum of seven years to meet Australian tax record-keeping obligations
• Download audit logs: 12 months
• Customer support emails: 24 months

Your rights

You can ask us at any time to:

• Tell you what information we hold about you
• Correct anything inaccurate
• Delete your account and personal information (we retain order records as required by tax law)
• Export your data in a portable format

Email hello@boroniaandbrick.com.au and we will respond within 30 days. If you are unsatisfied with our response, you may complain to the Office of the Australian Information Commissioner.

Cookies

We use only the cookies needed for the site to work — primarily the session cookie that keeps you signed in to your library. We do not use analytics, advertising, or tracking cookies.

Changes to this policy

We’ll update the “last updated” date above and, if the changes are material, email existing customers so you can review them.