Privacy policy

This policy describes information handling by JS Supply Co in connection with this storefront, enquiries, purchases and customer support. Our legal operator and available contact details appear below. It also explains the distinction between information submitted to us, information stored only in your browser and information processed by service providers.

Privacy legislation applies according to the business, activity and circumstances. This policy does not claim an exemption from obligations that apply to us or promise rights that are unavailable under applicable law. Shopify and other independent services may also have their own privacy notices.

Depending on your interaction, you may provide your name, email address, phone number, billing and delivery addresses, order details, correspondence and feedback. Project enquiries can include room measurements, product choices, a proposed budget, site access information and other details you choose to share. Trade enquiries can include a business name and ABN.

Provide only what is needed for the request. Avoid including identity documents, health information, passwords or full payment-card details in a general enquiry. If you provide another person’s contact or delivery details, ensure you have authority to do so and tell them how those details will be used.

Storefront and service-provider systems can process technical information needed to deliver and protect the service, such as IP address, device/browser information, request logs, session identifiers and checkout activity. Search terms you submit are used to find matching information. Orders generate transaction, fulfilment, payment-status and support records.

The theme also keeps saved product identifiers, local planning choices and a limited history of product/category interactions in your browser. These local features are described in Cookies & preferences. They are not automatically a synced customer-account wishlist.

• To answer enquiries, prepare requested quotations and communicate about your project.
• To process payments and orders, arrange delivery and provide order updates.
• To manage returns, warranty enquiries, complaints and safety-related communications.
• To operate accounts and the storefront, diagnose faults, reduce fraud and protect security.
• To keep transaction and other records required for business administration and applicable law.
• Where permitted and enabled, to send requested marketing and understand use of our services.

Choosing not to provide information can limit the relevant service: for example, delivery needs an address and an email enquiry needs a reply contact. Browsing most product and editorial pages does not require an account.

Our storefront is built for Shopify. Checkout, authentication, account functions and associated infrastructure process information needed to provide those services. Payment information is entered through the payment interface; do not send it to our contact form. JS Supply may receive transaction status and limited payment-related information needed to manage an order.

When you independently use Shop or other Shopify consumer services, Shopify may process information under its own terms. Read Shopify’s consumer privacy policy for those services and their choices. Provider policies do not replace our responsibility for our own handling of customer information.

Information relevant to the service may be handled by hosting and commerce providers, payment providers, delivery and logistics companies, suppliers arranging fulfilment, service or warranty agents, and professional advisers. For example, a carrier needs delivery and contact details, while an installer or supplier may need the product and issue details to assess a requested service.

Information may also be disclosed where required or authorised by law, to address a safety concern or to establish or defend legal rights. A supplier receiving information for an order does not obtain unrestricted permission to send unrelated marketing.

Cloud and service-provider operations may involve processing or disclosure outside Australia. The actual providers, locations and purposes depend on the services used for the order or interaction. Contact us to request information about the providers involved in your dealings with JS Supply. Any applicable overseas-disclosure obligations remain relevant even where a service is supplied through a third party.

The service-provider information accompanying this policy should be read alongside it. It must reflect the services actually enabled, rather than a generic list of analytics or advertising companies.

An enquiry, quotation request or purchase is not, by itself, an instruction to subscribe you to every marketing channel. Commercial email and SMS messages must use consent or another permission allowed by law, identify the sender and provide an unsubscribe method. We honour unsubscribe requests within the legally required period, including five working days for requests covered by the Spam Act.

Use the unsubscribe option in a message or contact us. Essential service communications, such as an order update, response to an enquiry or safety notice, are handled separately from optional marketing. Cookie choices do not automatically unsubscribe an email address.

Records are kept for the purposes for which they are needed, including active orders, customer support, accounting, disputes and applicable legal retention requirements. The appropriate period depends on the record rather than one universal deletion deadline. Information no longer required should be securely deleted or de-identified where the law permits.

Reasonable safeguards are needed to protect personal information, but no online service can promise absolute security. Restrict access to your account, use the legitimate sign-in route and tell us about suspicious communications. Do not share sign-in codes. Browser-local saved data can be removed separately; clearing it does not delete an order held in Shopify.

Contact us to request access to information we hold about you, correct inaccurate details or ask for deletion where available. Describe the information or interaction involved so we can locate it. We may need proportionate identity verification to avoid disclosing information to the wrong person; do not send identity documents unless a secure process has been agreed.

Legal record-keeping, security or dispute requirements can prevent immediate deletion of some records. Where a request cannot be met, we explain the reason and any available review or complaint route as required. Contact Shopify separately for information it controls through its independent consumer services.

Use Feedback & complaints or our contact details below and mark the request as a privacy concern. Describe what happened, when, the information involved and the outcome you seek. We aim to assess privacy complaints and provide a substantive response within 30 days; if additional investigation is needed, we will explain the next steps.

Where the matter falls within its jurisdiction, you can contact the Office of the Australian Information Commissioner if you are dissatisfied after giving us a reasonable opportunity to respond. Other rights and complaint avenues remain available where applicable.

The review date identifies this version. We update the policy when our services, providers or practices materially change. New uses of information must still comply with applicable notice, consent and legal requirements; publishing revised wording does not retrospectively authorise an incompatible use. Contact us if you need the version relevant to a previous interaction or need this information in a more accessible form.