1. About this policy
This policy explains how Owningo ("we", "us") handles personal information. We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), whether or not the Act strictly applies to a business of our size. Visitors from South Africa should also read section 12.
Orders are quoted and invoiced by the company named in your quote, a company registered outside Australia. It receives the details it needs to quote, invoice and ship your order, as set out in sections 6 and 7.
Questions about privacy can go to hello@owningo.com.
2. What we collect
We only collect what we need to answer enquiries and prepare quotes:
- Your contact and business details: your name, business name, work email, phone number (optional), type of business, where your order ships to and when you need it on the shelf.
- Your quote basket: for each product, the quantity band you chose, the exact number of units (if you give one), the packaging and logo method, your note for that product and whether you would like a sample.
- Optional quote details: your delivery postcode, the price basis you prefer (for example FOB or delivered), a target unit cost, whether you already have logo artwork, whether you are open to a pooled order, anything you write in the notes, and any figures you chose to attach from our landed cost estimator.
- Record of your request: the enquiry reference we give you, the time you sent it and that you agreed to this policy.
- Correspondence: emails and messages you send us, and our replies.
- Spam and duplicate protection: to stop the form being flooded and to make sure pressing send twice does not send your enquiry twice, we keep a one-way hash of your IP address (a scrambled code that cannot be turned back into the address) with the time of each request, a random submission id created by the form, and a fingerprint (hash) of the enquiry's contents. To make sure the form cannot be used to flood someone's inbox, we send at most one confirmation email to an address in any 24 hours, and keep a one-way hash of that address with the time it was sent. We do not store your IP address itself with your enquiry.
- Technical information: our hosting provider automatically records basic request data such as IP address, browser type and the pages requested, for security and to keep the site running. We do not currently use analytics or advertising cookies.
We do not ask for, and do not want, sensitive information such as health information. Please do not include it in your notes.
3. How we collect it
Directly from you, when you submit the enquiry form, email us or talk to us. We do not buy contact lists. If someone else gives us your details (for example a colleague who refers you), we will tell you how we got them when we first contact you.
4. Your quote basket stays in your browser
The products you add to your quote basket are saved in your own browser's local storage so the basket survives page loads. That basket is not sent to us until you submit a request for quote. You can clear it at any time by removing the products or clearing your browser's site data.
5. Why we use it
- To reply to your enquiry and prepare specs, samples and quotes.
- To arrange and follow up orders, samples, production checks and freight on your behalf.
- To keep business records we are required to keep, and to protect the site from misuse.
- To send you updates you have asked for, such as news of a pooled order you registered interest in.
We will not use your information for anything unrelated without your consent, unless the law requires or allows it.
6. Who we share it with
- The company that invoices your order: to quote and invoice your order we share your name, business name, contact details, the products, quantities and delivery details with it. Its details are in section 1.
- The manufacturer: to quote and produce your order we share your business name, the products, quantities, specifications, branding artwork and delivery details. We only share your personal contact details with the manufacturer when they are needed for the order, for example on an invoice or shipping document.
- Service providers: businesses that run parts of our service for us, under obligations to protect the information:
- Vercel, which hosts this website and handles the form when you press send.
- Supabase, the database where we store each enquiry, hosted in its Sydney, Australia region.
- Resend, the email service that delivers your enquiry to our inbox and sends you a short confirmation email.
- Freight forwarders and customs brokers, when they are needed for your order.
- Where required by law: for example to a regulator or court.
We do not sell personal information.
7. Overseas disclosure
Some of the people and services we share information with are outside Australia (APP 8):
- Outside Australia: The overseas company that invoices your order. The details it needs to quote, invoice and ship your order (section 6) are disclosed to it, and it may store and handle them outside Australia.
- China: our manufacturing partner. Information needed to quote and make your order (section 6) is disclosed to it.
- United States and other countries: Resend (email) and Vercel (hosting) are United States companies. The contents of your enquiry pass through their systems, and copies of the emails may be stored on servers in the United States or other countries where they operate.
Your stored enquiry record is kept in Australia (Supabase, Sydney region), but the company that provides that database, and its support staff, may be located overseas. Before we disclose personal information overseas we take reasonable steps to make sure the recipient handles it consistently with the APPs, including choosing providers with contractual data protection terms. If you would rather we did not send your details overseas, tell us before you send an enquiry and we will work out another way to quote, though an order still needs the factory to know what to make.
8. Direct marketing
We only send marketing messages if you have asked for them or would reasonably expect them, and every message tells you how to opt out. Reply "stop" or email hello@owningo.com and we will stop.
9. Storage, security and retention
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, including access controls and reputable providers. Enquiries are stored in a database that is not open to the public: only our own server can add records, and only we can read them.
- Enquiry and order records: kept for as long as needed to quote and fulfil orders and for our legal and tax obligations, then deleted or de-identified.
- The IP address hash used to limit repeated sends, and the email address hash used to limit confirmation emails: no longer needed after 24 hours. They are deleted automatically the next time anyone uses the enquiry form after that, so when the form is quiet they can stay a little longer, until that next use. They are never stored with your enquiry.
- The submission id and contents fingerprint used to stop duplicates: kept with the enquiry record.
- Your quote basket before you send it: only in your own browser (section 4).
10. Access, correction and dealing with us anonymously
You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@owningo.com. We will respond within 30 days. We may need to confirm your identity first. You can ask general questions without giving your name, but we need business contact details to prepare a quote.
11. Complaints
If you think we have mishandled your information, email hello@owningo.com with the details. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Visitors from South Africa
If you are in South Africa, the Protection of Personal Information Act 2013 (POPIA) gives you rights similar to those above, including access, correction, objection to direct marketing and deletion where the law allows. Contact us at hello@owningo.com to use them. You may also complain to the Information Regulator of South Africa.
13. Changes to this policy
We may update this policy as the business grows, for example if we change a service provider or add a customer system. The date at the top shows the latest version. See also our website terms.