Privacy Policy
Your privacy matters to us. We're committed to protecting your personal information.
Last updated: January 4, 2025
Our Commitment to Your Privacy
Be Ready Australia (trading as Queensland Ready Kits, ABN 61617343084) operated by Mr Matthew Currington is committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (qldreadykits.com) or purchase our emergency preparedness products.
Quick Navigation
1. Information We Collect
We collect personal information that you provide to us directly, including:
Personal Identification Information
- Full name
- Email address
- Phone number
- Delivery address (street address, suburb, state, postcode)
- Billing address (if different from delivery address)
Payment Information
- Payment card details (processed securely by Stripe - we do not store complete card details)
- Billing address associated with payment method
- Transaction history and order details
Business Information (for Wholesale Inquiries)
- Company name and ABN
- Business address
- Position/role within organization
Automatically Collected Information
- IP address and location data
- Browser type and version
- Device information (desktop, mobile, tablet)
- Pages visited, time spent on pages, and navigation patterns
- Referring website or source of traffic
- Date and time of visits
2. How We Use Your Information
We collect and use your personal information for the following purposes:
Order Processing and Delivery
- Processing your orders and payments
- Arranging delivery of emergency kits to your address
- Sending order confirmations, shipping notifications, and delivery updates
- Handling returns, refunds, and customer support inquiries
Customer Service
- Responding to your questions and support requests
- Providing product information and emergency preparedness advice
- Resolving disputes and troubleshooting issues
Website Improvement
- Analyzing website usage to improve user experience
- Understanding customer preferences and shopping behavior
- Testing new features and optimizing site performance
Legal Compliance
- Complying with Australian Consumer Law and tax obligations
- Maintaining records for accounting and audit purposes
- Responding to legal processes or regulatory requests
3. How We Store Your Information
Your personal information is stored securely using industry-standard security measures:
- Database: Supabase (PostgreSQL with Row Level Security enabled)
- Hosting: Vercel (ISO 27001 certified infrastructure)
- Payment Processing: Stripe (PCI DSS Level 1 compliant)
- Encryption: All data transmitted via HTTPS/TLS encryption
- Access Controls: Restricted access to authorized personnel only
We implement reasonable security safeguards to protect your information from unauthorized access, disclosure, alteration, or destruction.
6. Email Marketing
We may send you marketing emails about emergency preparedness tips, new products, and special offers if you have opted in to receive them.
Opt-In and Opt-Out
- We only send marketing emails to customers who have explicitly opted in
- Every email includes an "unsubscribe" link
- You can opt out at any time without affecting your ability to place orders
- Unsubscribing may take up to 48 hours to process
Transactional Emails: We will still send you essential emails related to your orders (confirmations, shipping updates, receipts) even if you opt out of marketing communications.
7. Your Privacy Rights Under Australian Law
Under the Australian Privacy Principles, you have the following rights regarding your personal information:
Your Rights
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Portability: Request a copy of your data in a commonly used format
- Objection: Object to certain uses of your personal information
- Complaint: Lodge a complaint about our handling of your personal information
To exercise any of these rights, please contact us at privacy@qldreadykits.com
We will respond to your request within 30 days. Some requests may require verification of your identity to protect your privacy and security.
8. Data Security
We take the security of your personal information seriously and implement multiple layers of protection:
Technical Safeguards
- SSL/TLS encryption for all data transmission
- Secure database with Row Level Security (RLS)
- Regular security audits and updates
- Firewall protection and intrusion detection
- Password hashing and encryption at rest
Organizational Safeguards
- Restricted access to personal information (need-to-know basis)
- Staff training on privacy and data protection
- Confidentiality agreements with service providers
- Incident response plan for data breaches
Data Breach Notification: In the unlikely event of a data breach that may result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme.
9. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (tax and accounting requirements) |
| Customer account information | While account is active + 2 years |
| Marketing consent records | Until consent is withdrawn + 2 years |
| Website analytics data | 26 months (anonymized) |
| Support inquiries | 3 years after resolution |
After the retention period expires, we securely delete or anonymize your personal information unless we are required by law to retain it longer.
10. Overseas Data Transfers
Some of our service providers store data on servers located overseas:
- Stripe (USA): Payment processing infrastructure
- Vercel (Global CDN): Website hosting across multiple regions including USA, Europe, and Asia-Pacific
- Supabase (USA/Singapore): Database hosting with options for regional data residency
We take reasonable steps to ensure that overseas recipients handle your personal information in accordance with Australian Privacy Principles. These service providers:
- Have robust security and privacy policies
- Comply with international data protection standards
- Are contractually obligated to protect your information
By using our website and services, you consent to the transfer of your personal information to these overseas locations for the purposes described in this policy.
11. Complaints and Contact Information
If you have questions, concerns, or complaints about how we handle your personal information, we encourage you to contact us first:
Privacy Contact
- Email: privacy@qldreadykits.com
- Website: qldreadykits.com
- Business Name: Be Ready Australia (trading as Queensland Ready Kits)
- ABN: 61617343084
- Operated by: Mr Matthew Currington
- Location: Sippy Downs, Queensland, Australia
We will investigate your complaint and respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner (OAIC)
- Phone: 1300 363 992
- Email: enquiries@oaic.gov.au
- Website: www.oaic.gov.au
- Mail: GPO Box 5218, Sydney NSW 2001
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Any changes will be posted on this page with an updated "Last Updated" date at the top.
For significant changes that materially affect how we use your personal information, we will notify you via email (if you have provided your email address) or through a prominent notice on our website.