Privacy Policy

Etchly takes your privacy seriously. This policy explains what information we collect, why we collect it, how we use it, and your rights to access or correct your data.

Last updated: April 2026 — Compliant with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Who we are

This privacy policy applies to etchly.com.au, operated by Inscribe Australia Pty Ltd (ABN to be displayed in invoice / contact pages), 27 Northgate Drive, Thomastown VIC 3074. In this policy “we”, “us”, “our”, and “Etchly” refer to Inscribe Australia Pty Ltd.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What information we collect

We collect personal information that's necessary to fulfil your order, run our website, and communicate with you. Specifically:

Information you give us

Account details — name, email address, password (stored encrypted), optional phone number
Billing and delivery information — billing address, delivery address, company name (for invoicing)
Order content — the artwork, text, and specifications for the labels you order
Payment information — we do not store card details. Payments are processed by PayPal which holds card and account information directly under their own privacy policy
Communications — contact form submissions, emails, support messages

Information collected automatically

Technical data — IP address, browser type, device type, operating system, referring URL
Usage data — pages visited, time spent, search terms, click paths within our site
Cookies — see the Cookies section below

Why we collect it and how we use it

We use your personal information only for the purposes for which it was collected, or for closely related purposes. Specifically:

To process and fulfil your orders, including arranging shipping and accepting payment
To communicate with you about your order, your account, our service, or your enquiries
To provide proof artwork for approval and respond to artwork-related queries
To improve our website, products, and customer experience
To detect and prevent fraud, abuse, and security incidents
To comply with our legal and regulatory obligations
With your express opt-in consent, to send you marketing communications about new products, special offers, and updates — you can opt out at any time

We do not sell your personal information to third parties. Ever. Your data is collected to provide you with the service you've asked for — nothing else.

Who we share your information with

We share personal information only where it's necessary to provide the service or as required by law:

PayPal — to process payments. PayPal handles your card details under their own privacy policy.
Australia Post, TOLL, Couriers Please — to deliver your orders. We share name, delivery address, phone, and parcel weight only.
Google Cloud / Firebase — our hosting and database provider. Data is stored on Google's secure infrastructure (currently in the United States) under Google's enterprise security and privacy controls.
Australian government agencies — only where required by law, court order, or to protect our legal rights.

How we protect your information

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure:

All data in transit between your browser and our servers is encrypted using TLS (HTTPS).
Customer data is stored in Google Cloud Firestore with strict server-side security rules: customers can only access their own data; staff access is role-restricted.
Passwords are never stored in plain text — they are hashed by Firebase Authentication using industry-standard algorithms.
SMTP and API keys are stored in Google Cloud Secret Manager, not in application code or databases readable by staff.
Access to admin systems is two-factor where possible and audited via deployment logs.

No system is perfectly secure. If you ever suspect your account has been compromised, change your password immediately and email us so we can investigate.

Cookies

We use cookies and similar local-storage technologies to:

Keep you signed in — essential session cookies set by Firebase Authentication
Remember your shopping cart and wishlist — stored in your browser's local storage
Remember your theme preference (dark / light mode)
Operate reCAPTCHA on our contact form to protect against spam

You can disable cookies in your browser settings, but the site will not function correctly without them — you won't be able to sign in, add items to a cart, or place orders.

We do not currently use third-party advertising or tracking cookies.

How long we keep your information

We keep your personal information only for as long as necessary to provide the service and to comply with our legal obligations:

Account data — retained while your account is active. You can request deletion at any time (see below).
Order records — retained for at least 7 years to comply with Australian taxation and consumer law obligations.
Contact form messages — retained for up to 12 months for support continuity, then deleted.
Technical / log data — typically retained for 90 days.

Your rights

You have the right to:

Access the personal information we hold about you
Correct any information that's inaccurate or out of date
Request deletion of your account and associated personal data (subject to legal retention obligations for completed orders)
Withdraw consent for marketing communications at any time — either via the unsubscribe link in any email or by contacting us
Lodge a complaint if you believe we've mishandled your information

To exercise these rights, sign in to your Etchly account (most data can be reviewed and corrected directly), or email info@etchly.com.au from the address registered on your account. We'll respond within 30 days.

Account deletion

You can delete your Etchly account from your account page. Account deletion:

Has a 30-day grace period — if you change your mind, sign in within 30 days and your account is restored.
After 30 days, deletes your authentication credentials, profile data, saved designs, cart, and wishlist permanently.
Order records are kept for 7 years for legal compliance, but are anonymised — your name and personal details are stripped where the law allows.

Children

Our service is intended for customers aged 18 and over. We do not knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided us with personal information, please contact us immediately so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always available at this URL. Significant changes will be communicated via email to account holders or via a banner on the site. The “Last updated” date at the top reflects the most recent revision.

Complaints

If you have a privacy complaint, please contact us first — we genuinely want to put it right. Email info@etchly.com.au with the subject “Privacy Complaint” and we'll investigate and respond within 30 days.

If you're not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner: www.oaic.gov.au or call 1300 363 992.

Contact us

For any privacy-related question, contact:

Inscribe Australia Pty Ltd
27 Northgate Drive, Thomastown VIC 3074
Email: info@etchly.com.au
Phone: (03) 9465 7631

FAQs Shipping Info Returns Policy Privacy Policy Terms & Conditions Contact Us