Legal

Sub-processors

To run our store we rely on a small number of trusted third-party services. This page lists each one, what it does, and where it is located. Some operate outside Australia — where they do, we take reasonable steps to make sure your information is handled consistently with the Australian Privacy Principles.

Who we share data with

Service	Purpose	Location	Transfer mechanism	Data shared
Afterpay	Buy-now-pay-later instalments	AUAustralia	Domestic (AU)	order, payment
Cloudflare	DNS, WAF and bot protection	USOverseas	Disclosure only	usage
PayPal	Pay-in-4 and wallet checkout	USOverseas	Disclosure only	order, payment
Resend	Transactional email delivery	USOverseas	Disclosure only	contact, order
Stripe Payments	Card payment processing	USOverseas	Disclosure only	order, payment
Supabase	Database and authentication hosting (ap-southeast-2)	AUAustralia	Domestic (AU)	account, order, contact
Vercel	Application hosting and content delivery	USOverseas	Disclosure only	usage

Changes to this list

We update this list when we add, remove or change a sub-processor. If you have questions about how we share your information, see our privacy policy.