Privacy policy

Last updated: 3 October 2026

This policy explains what personal information Tinkable Pty Ltd ("Tinkable", "we", "us") collects, why, who we share it with, and the choices you have. We follow the Australian Privacy Principles in the Privacy Act 1988.

Questions or requests: info@tinkable.com.au · 0418 873 436 · 5 Othello Court, Eatons Hill QLD 4037, Australia.

---

1. The short version

• We collect what we need to quote, make and deliver your order, and to answer your messages.
• We use some services based overseas, mainly in the United States, to run our store, email and accounts. This policy names them.
• We use an AI tool (Claude, made by Anthropic in the United States) to help draft replies and quotes. A person on our team checks and sends every message. No decision about you is made by software alone.
• We keep your artwork so you can reorder. You can ask us to delete it.
• We don't sell your personal information.
• We only send marketing emails if you agree, and you can unsubscribe at any time.

2. What we collect

Information you give us:

• your name, email, phone, business name, and billing and delivery addresses
• your order details, quote requests and the messages you send us
• artwork, logos, photos, label schedules and wording you upload or email. These can sometimes include personal information, such as names on a personalised gift.
• your proof approvals and any comments on proofs
• reviews you leave.

Information collected when you use our website:

• device and browser information, IP address and approximate location
• the pages you visit and what you click
• cookies and similar technologies (see section 8).

Payment information: card payments are handled by Shopify Payments. We see the last four digits and the card type, but never your full card number.

We don't ask for sensitive information, such as health information. Please don't send it to us. If it appears in something you send (for example, a memorial engraving), we only use it to make your order.

You can browse our website without giving us your name. We can't take an order or answer a quote request without contact details.

3. How we use your information

We use your personal information to:

• answer your questions and send you quotes
• prepare proofs, make your order and deliver it
• take payment, issue tax invoices and keep business records
• handle returns, repairs and complaints
• keep your artwork and production files so you can reorder
• prevent fraud and keep our systems secure
• improve our website and products
• send you marketing, if you have agreed to it (section 9)
• meet our legal obligations, for example tax record-keeping.

We don't use your information for unrelated purposes without your consent, unless the law requires or allows it.

4. How we use AI

We use Claude, an AI tool made by Anthropic PBC in the United States, to help us work faster. In practice:

• What it does: it helps draft email replies and quotes, and summarises long email threads.
• What it sees: the messages you send us, the details of your request, and sometimes the files you attach. It doesn't see your card details.
• A person is always involved: a member of our team reads, checks and edits every draft before it is sent. Prices come from our own price lists and are checked by a person, not invented by the AI.
• No automated decisions: we don't use software to make decisions about you that significantly affect your rights or interests. For example, software doesn't decide on its own whether to accept your order or what to charge you.
• No training on your data: we use Anthropic's business service. Under its commercial terms, Anthropic doesn't use our customers' messages or files to train its AI models.

If you would rather we didn't use AI for your messages, tell us at info@tinkable.com.au. We will handle your messages without it.

5. Who we share your information with

We share personal information only with businesses that help us run Tinkable, and only what they need. We don't sell your personal information.

Service	What it does for us	Where your data is held
Shopify	Online store, checkout, payments (Shopify Payments), order records	Canada, the United States and other countries
Google Workspace and Gmail	Business email and documents	United States and other countries where Google operates
Google Cloud	Our quote and order management system and its database	Sydney, Australia
Anthropic (Claude)	AI drafting of replies and quotes (section 4)	United States
Xero	Accounting and invoicing records	United States
Australia Post	Delivery within Australia	Australia
FedEx	International delivery, and customs clearance for overseas orders	United States, and the destination country
Judge.me	Product reviews	United States and other countries
Easify	Product options and file uploads on product pages	United States and other countries
ApprovePro	Proof approvals (being replaced by our own approval page, hosted with Google Cloud in Sydney)	United States and other countries
Google Ads and Google Analytics	Advertising and website statistics	United States
Meta (Facebook and Instagram)	Advertising	United States and Ireland
TikTok	Advertising	Singapore, Malaysia and the United States

For international orders, we give the carrier the information customs needs: your name, address, contact details and what is in the parcel. The destination country's customs authority receives it too.

We may also disclose information:

• to our accountant or lawyers, so they can advise us
• if the law requires it, or to protect someone's safety
• to a buyer, if the business is ever sold, under the same privacy protections.

6. Overseas disclosure

Most of the services in section 5 store or process data outside Australia, mainly in the United States. Some also use Canada, Ireland, Singapore, Malaysia and other countries.

We choose established providers, and we use their business terms, which include data protection commitments. Before we use a new service, we check how it protects personal information.

7. How we keep information safe, and for how long

• Our systems are protected with secure logins and two-step verification. Access is limited to people who need it.
• Our quote system is hosted in Australia (Google Cloud, Sydney).
• If we have a data breach that is likely to cause you serious harm, we will tell you and do what the law requires.

How long we keep things:

Information	How long
Orders, invoices and payment records	At least 5 years, as Australian tax law requires
Artwork, proofs and production files	3 years after your last order, so you can reorder. Ask us any time to delete them sooner.
Emails and quote requests that didn't become an order	2 years
Website and advertising data	As set by each provider's cookie settings, generally no more than 26 months

When we no longer need information, we delete it or remove anything that identifies you.

8. Cookies, pixels and advertising

Our website uses cookies and similar tools to:

• run the store and keep your cart (these are needed for the site to work)
• understand how people use the site (Google Analytics and Shopify analytics)
• measure and show our ads (Google Ads, Meta and TikTok pixels).

You can control cookies:

• Cookie banner: where the law requires consent, we ask before setting advertising and analytics cookies. You can change your choice at any time using the "Cookie preferences" link at the bottom of the site.
• Your Privacy Choices page: opt out of advertising that uses information shared with ad partners. We also honour the Global Privacy Control signal where the law requires.
• Your browser: you can block or delete cookies, though parts of the store may stop working.

9. Marketing emails

We only send you marketing emails (news, offers, new products) if you have agreed to receive them, or where the law allows us to contact existing customers. Every marketing email includes an unsubscribe link. We act on unsubscribe requests within 5 business days.

We will still send you emails about your quotes, proofs and orders. These aren't marketing.

10. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it. Email info@tinkable.com.au. We will respond within 30 days. We may need to confirm who you are first. We don't charge for requests.

You can also ask us to delete your artwork and files at any time. We will keep only what the law requires us to keep, such as tax records.

11. Complaints

If you are unhappy with how we have handled your personal information, email info@tinkable.com.au. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied, you can contact:

• Australia: the Office of the Australian Information Commissioner, oaic.gov.au, 1300 363 992
• New Zealand: the Office of the Privacy Commissioner, privacy.org.nz
• Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca, or your provincial privacy commissioner.

12. If you live in the United States

We don't sell personal information for money. Some advertising cookies may count as "selling", "sharing" or "targeted advertising" under some US state laws. You can opt out on our Your Privacy Choices page, and we honour the Global Privacy Control signal. Depending on your state, you may also have rights to access, correct or delete your information. Email us to use them. We won't treat you differently for using your rights.

13. If you live in the UK or European Union

We don't currently sell or deliver to the UK or the EU. If you contact us or use our website from there, the UK GDPR or EU GDPR may apply, and this section explains your rights.

• Who is responsible: Tinkable Pty Ltd (contact details above) is the controller of your personal data.
• Our legal reasons for using your data:
  • Contract: answering your request, quoting, and making and delivering an order.
  • Legal obligation: tax and business records.
  • Legitimate interests: running and securing our business, improving our website, and using AI to help draft replies with a person checking every message. You can object to this.
  • Consent: marketing emails, and non-essential cookies. You can withdraw consent at any time.
• Your rights: you can ask us to access, correct, delete, restrict or transfer your data, or object to how we use it. You can also complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).
• International transfers: we are based in Australia, and some of our providers are in the United States (section 5). Where data protection law requires it, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) in our providers' data processing terms.
• Automated decisions: we don't make decisions about you based solely on automated processing.

14. Children

Our website and products aren't aimed at children. People under 18 should ask a parent or guardian to order for them. If you think a child has given us personal information, contact us and we will delete it.

15. Changes to this policy

We will update this policy when our practices or the law change, and change the "Last updated" date. If a change significantly affects how we use information we already hold, we will tell you by email.

16. Contact

Privacy questions, requests and complaints:
Tinkable Pty Ltd · ABN 37 694 508 177
5 Othello Court, Eatons Hill QLD 4037, Australia
Email: info@tinkable.com.au · Phone: 0418 873 436