Privacy Policy

Last updated: 31 July 2026

nivisto (ABN 98 432 476 237) runs this website and sells handmade leather goods through it. This page explains what personal information I collect, why, and what I do with it.

I’m a one-person business. Your information isn’t a product I sell and it never will be.

What I collect

When you place an order: your name, email address, postal address, phone number if you give it, and what you ordered including any personalisation text.

When you pay: I do not see or store your full card number. Payments are processed by WooCommerce Payments (Stripe), PayPal, and Afterpay if you pay in instalments — they handle the card data directly. I see the amount, the currency, whether it succeeded, and the last four digits.

If you choose Afterpay, your agreement for the instalments is with Afterpay rather than with me. They run their own identity and eligibility checks and apply their own privacy policy to that. I’m told whether the payment succeeded, not the detail of their assessment.

When you use the contact form: your name, email address, and whatever you write to me.

When you join the mailing list: your email address, and nothing else. It’s stored on this site rather than with a mail service, and it isn’t linked to your orders or to anything you’ve browsed.

When you browse: standard analytics data — pages viewed, roughly where in the world you are, what device and browser you used, and how you arrived. This is collected through Google Analytics and Jetpack, and it’s aggregated, not tied to your name.

Cookies: the site uses cookies to keep your basket working between pages, to remember your currency, and for analytics. You can block cookies in your browser, but the basket won’t work properly if you do.

Anti-spam: the contact form uses Google reCAPTCHA, which collects device and behaviour signals to tell humans from bots. Google’s own privacy policy applies to that data.

Why I collect it

  • To make and post your order
  • To email you about your order
  • To answer your questions
  • To keep the records the ATO requires
  • To understand which pages people actually use, so I can improve the site

I will not add you to the mailing list because you bought something. Ordering and subscribing are separate — the only way onto the list is to type your address into the form yourself. To come off it, email me and you’re off the same day.

Who it’s shared with

Only where it’s needed to get your order to you, or to run the site:

  • Australia Post and international partner carriers — name and delivery address
  • WooCommerce Payments (Stripe), PayPal and Afterpay — payment processing. Afterpay only if you choose to pay in instalments.
  • My web host, HostGator — the site and its database live on their servers
  • Google (Analytics, reCAPTCHA) and Automattic (Jetpack, WooCommerce) — site analytics, spam protection and store software

Some of these providers store data outside Australia, including in the United States and the European Union. I never sell, rent or trade your information to anyone.

How long I keep it

Order and transaction records: 7 years, as required for tax purposes.
Contact form messages: 2 years, then deleted.
Mailing list: until you ask to come off it, and then straight away.
Analytics data: as long as Google Analytics is configured to retain it, currently 14 months.

Security

The site runs over HTTPS, so everything you send is encrypted in transit. Payment card data never touches my servers. Administrator access is restricted and password-protected. No system is perfectly secure, but I take it seriously.

Your rights

You can ask me to:

  • Tell you what personal information I hold about you
  • Correct anything that’s wrong
  • Delete your information, where I’m not legally required to keep it

Email nick@nivisto.com and I’ll respond within 30 days. If you’re not happy with how I’ve handled a privacy issue, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

This site isn’t aimed at children and I don’t knowingly collect information from anyone under 16.

Changes

If this policy changes, the new version goes up here with a new date at the top.

Contact

nivisto
ABN 98 432 476 237
nick@nivisto.com
Rockdale, NSW, Australia