Last updated: 29 July 2026
nivisto (ABN 98 432 476 237) runs this website and sells handmade leather goods through it. This page explains what personal information I collect, why, and what I do with it.
I’m a one-person business. Your information isn’t a product I sell and it never will be.
What I collect
When you place an order: your name, email address, postal address, phone number if you give it, and what you ordered including any personalisation text.
When you pay: I do not see or store your full card number. Payments are processed by WooCommerce Payments (Stripe) and PayPal, who handle the card data directly. I see the amount, the currency, whether it succeeded, and the last four digits.
When you use the contact form: your name, email address, and whatever you write to me.
When you browse: standard analytics data — pages viewed, roughly where in the world you are, what device and browser you used, and how you arrived. This is collected through Google Analytics and Jetpack, and it’s aggregated, not tied to your name.
Cookies: the site uses cookies to keep your basket working between pages, to remember your currency, and for analytics. You can block cookies in your browser, but the basket won’t work properly if you do.
Anti-spam: the contact form uses Google reCAPTCHA, which collects device and behaviour signals to tell humans from bots. Google’s own privacy policy applies to that data.
Why I collect it
- To make and post your order
- To email you about your order
- To answer your questions
- To keep the records the ATO requires
- To understand which pages people actually use, so I can improve the site
I will not add you to a mailing list because you bought something. If I ever start a newsletter, you’ll have to ask to join it.
Who it’s shared with
Only where it’s needed to get your order to you, or to run the site:
- Australia Post and international partner carriers — name and delivery address
- WooCommerce Payments (Stripe) and PayPal — payment processing
- My web host, HostGator — the site and its database live on their servers
- Google (Analytics, reCAPTCHA) and Automattic (Jetpack, WooCommerce) — site analytics, spam protection and store software
- Optimole — the service that resizes and delivers the images on this site, which receives your browser’s request for each image
Some of these providers store data outside Australia, including in the United States and the European Union. I never sell, rent or trade your information to anyone.
How long I keep it
Order and transaction records: 7 years, as required for tax purposes.
Contact form messages: 2 years, then deleted.
Analytics data: as long as Google Analytics is configured to retain it, currently 14 months.
Security
The site runs over HTTPS, so everything you send is encrypted in transit. Payment card data never touches my servers. Administrator access is restricted and password-protected. No system is perfectly secure, but I take it seriously.
Your rights
You can ask me to:
- Tell you what personal information I hold about you
- Correct anything that’s wrong
- Delete your information, where I’m not legally required to keep it
Email nick@nivisto.com and I’ll respond within 30 days. If you’re not happy with how I’ve handled a privacy issue, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
This site isn’t aimed at children and I don’t knowingly collect information from anyone under 16.
Changes
If this policy changes, the new version goes up here with a new date at the top.
Contact
nivisto
ABN 98 432 476 237
nick@nivisto.com
Rockdale, NSW, Australia