Privacy policy
Petabite Pty Ltd | ABN 60 688 673 494
Last updated: 24 February 2026
1. Introduction
Petabite Pty Ltd (ABN 60 688 673 494) (“Petabite”, “we”, “us”, “our”) is committed to protecting the privacy of your personal information. We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act).
This Privacy Policy explains how we collect, hold, use, and disclose your personal information, and how you can access or correct that information or make a complaint about our handling of it.
By using our website (www.petabite.com.au), placing an order, creating an account, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
2. Privacy Contact
If you have any questions about this Privacy Policy or our handling of your personal information, you can contact our Privacy Officer:
Privacy Officer: Bill Song, Founder
Email: info@petabite.com.au
Phone: 0410 888 603
Address: Suite 23060, 837 Bourke St, Docklands VIC 3008
Hours: Monday to Friday, 9:00 AM – 5:00 PM AEST
3. What Personal Information We Collect
The types of personal information we may collect depend on how you interact with us. We collect only the information that is reasonably necessary for our business functions and activities.
3.1 Information you provide to us
| Interaction | Information Collected |
|---|---|
| Account registration | Name, email address, password |
| Orders and purchases | Name, email address, phone number, delivery address, order history, product preferences |
| Subscriptions | Subscription preferences (product, quantity, delivery frequency), renewal dates |
| Contact and enquiries | Name, email address, and any information you include in your message |
| Collaboration enquiries | Name, contact details, professional background, area of expertise |
3.2 Information collected automatically
When you visit our website, we may automatically collect technical and usage information, including:
Device and browser information: device type, operating system, browser type and version, screen resolution.
Network information: IP address, approximate geographic location (city/region level).
Usage data: pages visited, time spent on pages, referring URL, clickstream data, search queries on our site.
Cookies and similar technologies: see Section 9 (Cookies and Tracking Technologies) below for full details.
3.3 Payment information
We do not collect or store your credit card numbers, bank account details, or other payment credentials. All payment processing is handled directly by our third-party payment providers (Stripe and PayPal). These providers may collect payment information in accordance with their own privacy policies. We receive only a transaction confirmation, a truncated card reference (e.g. last four digits), and transaction amount.
3.4 Sensitive information
We do not intentionally collect sensitive information (as defined in the Privacy Act), such as health information, racial or ethnic origin, political opinions, or religious beliefs. If you provide sensitive information to us voluntarily (for example, in a customer enquiry), we will treat it with the highest level of care and only use it for the purpose for which it was provided.
4. How We Collect Personal Information
We collect personal information primarily from you directly, including when you visit our website, create an account, place an order or subscribe, contact us via our contact form, email, or phone, sign up for marketing communications, or interact with us on social media.
We may also collect personal information from third parties, including our payment processors (Stripe and PayPal), subscription management platform (Recharge), analytics providers (Google Analytics), and delivery partners, where this is reasonably necessary for our business operations.
Where it is reasonable and practicable to do so, we will collect personal information directly from you. If we receive unsolicited personal information, we will determine within a reasonable period whether we could have collected it under APP 3, and if not, we will destroy or de-identify it as soon as practicable.
5. Why We Collect, Hold, Use, and Disclose Personal Information
We collect, hold, use, and disclose your personal information for the following purposes:
| Purpose | Description |
|---|---|
| Order fulfilment | To process, dispatch, and deliver your orders and manage subscription renewals. |
| Account management | To create and manage your customer account, including subscription preferences. |
| Customer service | To respond to your enquiries, complaints, or feedback and to provide after-sale support. |
| Product improvement | To understand how our products are used and to improve our formulations, packaging, and customer experience. |
| Website operation | To operate, maintain, and improve our website, including security, performance, and user experience. |
| Marketing | To send you information about our products, promotions, and news where you have consented or where we have a reasonable expectation of interest. You may opt out at any time (see Section 8). |
| Legal compliance | To comply with our legal obligations, including under the Australian Consumer Law, tax legislation, and the Privacy Act. |
| Fraud prevention | To detect and prevent fraudulent or improper activity on our website or in relation to our products. |
If we wish to use your personal information for a purpose not listed above, we will seek your consent unless the use is otherwise permitted under the Privacy Act.
6. Disclosure to Third Parties
We may disclose your personal information to the following categories of third parties, only to the extent necessary for the purposes described in Section 5:
| Provider | Function | Location | Purpose |
|---|---|---|---|
| Stripe | Payment processing | United States | Processes credit/debit card payments on our behalf. |
| PayPal | Payment processing | United States / Singapore | Processes PayPal payments on our behalf. |
| Recharge | Subscription management | United States | Manages recurring subscription orders, renewals, and customer subscription preferences. |
| Shopify | E-commerce platform | Canada / United States | Hosts our website and online store; processes order data. |
| Google Analytics | Website analytics | United States | Collects anonymised website usage data to help us understand how visitors interact with our site. |
| hCaptcha | Security / bot prevention | United States | Verifies that contact form submissions are made by humans, not automated bots. |
| Meta Platforms (Facebook) | Advertising and analytics | United States | Tracks website activity to deliver and measure advertising on Facebook and Instagram. |
| Google Ads | Advertising | United States | Tracks conversions and enables remarketing across Google’s advertising network. |
| Australia Post and courier partners | Delivery and logistics | Australia | Ships orders to your delivery address. |
We require our third-party service providers to handle personal information in a manner consistent with this Privacy Policy and the APPs. We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
We may also disclose personal information where required or authorised by law, including to law enforcement agencies, regulatory bodies, or courts.
7. Overseas Disclosure of Personal Information
As set out in Section 6, some of our third-party service providers are located outside Australia, primarily in the United States, Canada, and Singapore. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles your information in a manner consistent with the APPs, including by entering into contractual arrangements that require the recipient to comply with obligations substantially similar to the APPs.
If you consent to an overseas disclosure and the overseas recipient handles your information in breach of the APPs, you may not be able to seek redress under the Privacy Act. We will not seek your consent to overseas disclosure solely for this purpose.
8. Direct Marketing
We may use your personal information to send you marketing communications about our products, promotions, or news. We will only do so where you have consented (for example, by subscribing to our mailing list) or where we have a reasonable expectation of interest based on your existing customer relationship with us.
You may opt out of receiving marketing communications at any time by clicking the unsubscribe link in any marketing email, contacting us at info@petabite.com.au, or updating your communication preferences in your account portal.
We will process your opt-out request promptly and at no cost to you. Opting out of marketing communications will not affect transactional communications relating to your orders or subscription.
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to provide and improve our services. A cookie is a small text file stored on your device by your web browser.
9.1 Types of cookies we use
| Cookie Type | Purpose | Provider |
|---|---|---|
| Essential cookies | Required for the website to function (e.g. shopping cart, session management, security). These cannot be disabled. | Shopify |
| Analytics cookies | Help us understand how visitors use our website by collecting anonymised usage data such as pages visited, time on site, and traffic sources. | Google Analytics |
| Functional cookies | Remember your preferences (e.g. region, language) and improve your browsing experience. | Shopify |
| Security cookies | Protect the site from automated abuse and verify human interactions with forms. | hCaptcha |
| Advertising cookies | Track your browsing activity to deliver relevant ads on Facebook and Instagram, and to measure ad campaign performance. These cookies are only set with your consent. | Meta Platforms (Facebook) |
| Advertising cookies | Track conversions from Google Ads campaigns and enable remarketing to show relevant ads across Google’s network. These cookies are only set with your consent. | Google Ads |
9.2 Managing cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may affect the functionality of our website, including your ability to place orders. For more information on managing cookies, visit your browser’s help documentation.
10. Data Security
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include encrypted data transmission (SSL/TLS) across our website, secure hosting through our e-commerce platform provider, restricted access to personal information on a need-to-know basis, regular review of our information handling practices, and use of PCI-DSS compliant payment processors.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
11. Data Retention
We retain your personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, or as required by law. In general, we apply the following retention periods:
Order and transaction records: retained for a minimum of 7 years to comply with Australian tax and accounting obligations.
Account information: retained for the duration of your account and for a reasonable period afterwards to enable reactivation or respond to queries.
Marketing preferences: retained until you withdraw consent or opt out.
Website analytics data: retained in anonymised form in accordance with Google Analytics’ data retention settings (default 14 months).
When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it.
12. Your Rights
Under the Privacy Act and the APPs, you have the following rights in relation to your personal information:
Access (APP 12): You may request access to the personal information we hold about you. We will respond to your request within 30 days. In most cases, access will be provided free of charge, though we may charge a reasonable fee for retrieval and preparation if the request is complex or resource-intensive.
Correction (APP 13): You may request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond to your request within 30 days.
Opt-out of marketing: You may opt out of receiving direct marketing communications at any time (see Section 8).
Anonymity (APP 2): Where it is lawful and practicable, you may interact with us without identifying yourself or by using a pseudonym. However, we may not be able to process orders or provide certain services if you choose not to identify yourself.
To exercise any of these rights, please contact us using the details in Section 2. We may need to verify your identity before processing your request.
13. Notifiable Data Breaches
If we become aware of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act. This includes notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable.
14. Complaints
If you believe that we have breached the APPs or handled your personal information inappropriately, you are entitled to make a complaint.
Please first contact our Privacy Officer using the details in Section 2. We will acknowledge your complaint within 7 days and aim to investigate and respond within 30 days.
If you are not satisfied with our response, or if you believe we have not adequately addressed your concerns, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Post: GPO Box 5218, Sydney NSW 2001
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or other factors. The current version will always be available on our website at www.petabite.com.au/policies/privacy-policy.
Where changes are material, we will take reasonable steps to notify you, such as by posting a notice on our website or sending you an email. We encourage you to review this Privacy Policy periodically.
16. Definitions
APPs means the Australian Privacy Principles set out in Schedule 1 of the Privacy Act 1988 (Cth).
Personal information has the meaning given to it in the Privacy Act 1988 (Cth), and broadly means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true and whether or not it is recorded in a material form.
Sensitive information has the meaning given to it in the Privacy Act 1988 (Cth), and includes information about health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, and biometric data.
OAIC means the Office of the Australian Information Commissioner.