Privacy Policy

ViPicks Privacy Policy

Effective Date: 1 August 2025 | Last Updated: 7 August 2025

1. Introduction

ViPicks Pty Ltd ("ViPicks," "we," "us," or "our") is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform at vipicks.com.au and related services (the "Platform").

We are bound by the Australian Privacy Principles under the Privacy Act 1988 (Cth)

2. Open and Transparent Management (APP 1)

We manage personal information in an open and transparent way. This Privacy Policy sets out:

  • The kinds of personal information we collect and hold
  • How we collect and hold personal information
  • The purposes for which we collect, hold, use and disclose personal information
  • How you can access and correct your personal information
  • How you can complain about a privacy breach
  • Whether we disclose personal information overseas

3. Anonymity and Pseudonymity (APP 2)

You have the option to interact with us anonymously or using a pseudonym where practicable. However, we may not be able to provide you with all services if you choose not to identify yourself. For example:

  • You can browse the Platform without creating an account
  • You cannot make purchases or sell items without providing identification
  • Legal and regulatory requirements may require us to collect identifying information

4. Collection of Personal Information (APP 3 & 4)

4.1 Information We Collect

We collect the following types of personal information:

Account Information:

  • Name, email address, phone number
  • Billing and shipping addresses
  • Date of birth (for age verification)
  • Government-issued ID (for seller verification)

Transaction Information:

  • Purchase and sales history
  • Payment information (processed by Stripe)
  • Shipping and delivery details
  • Communications between buyers and sellers

Technical Information:

  • IP address and device information
  • Browser type and version
  • Time zone and location data
  • Platform usage data and preferences

4.2 How We Collect Information

  • Directly from you: When you create an account, make purchases, or contact us
  • Automatically: Through cookies and similar technologies
  • From third parties: Payment processors, shipping partners, identity verification services
  • Social media: If you connect your social media accounts

4.3 Unsolicited Information (APP 4)

If we receive personal information we did not request, we will determine whether we could have collected it under APP 3. If not, we will destroy or de-identify the information as soon as practicable, unless required by law to retain it.

5. Notification of Collection (APP 5)

When we collect personal information, we will take reasonable steps to notify you of:

  • Our identity and contact details
  • The purposes for collection
  • The main consequences if information is not provided
  • Third parties to whom we may disclose information
  • Any law requiring collection
  • How to access our Privacy Policy

6. Use and Disclosure (APP 6)

6.1 How We Use Your Information

  • To provide and improve our Platform services
  • To process transactions and payments
  • To verify identity and prevent fraud
  • To communicate with you about your account
  • To send marketing communications (with consent)
  • To comply with legal obligations
  • To resolve disputes and enforce our Terms
  • To analyze Platform usage and improve user experience

6.2 Who We Share Information With

We may share your information with:

  • Other users: As necessary for transactions (e.g., shipping address to sellers)
  • Service providers: Payment processors (Stripe), shipping partners (Sendle), cloud storage (AWS)
  • Professional advisers: Lawyers, accountants, auditors
  • Government agencies: When required by law or court order
  • Business transfers: In case of merger, acquisition, or asset sale

We will never sell your personal information to third parties

7. Direct Marketing (APP 7)

We may use your personal information for direct marketing where:

  • You have consented to receive marketing communications
  • You would reasonably expect us to use your information for marketing
  • We provide a simple opt-out mechanism in each communication

You can opt-out of marketing communications at any time by:

  • Clicking "unsubscribe" in any marketing email
  • Updating your communication preferences in account settings
  • Contacting us at privacy@vipicks.com.au

8. Cross-border Disclosure (APP 8)

We may disclose personal information to overseas recipients, including:

  • Cloud storage providers (United States - AWS)
  • Payment processors (United States - Stripe)
  • Customer support tools (United States)
  • Analytics providers (United States - Google Analytics)

Before disclosing information overseas, we ensure the recipient is subject to laws or binding schemes that protect your information similarly to the APPs, or we obtain your consent.

9. Government Identifiers (APP 9)

We do not adopt government identifiers (such as tax file numbers or driver's license numbers) as our own identifiers. We only collect and use government identifiers where:

  • Required by law (e.g., for tax reporting)
  • Necessary to verify your identity
  • Authorized by regulation or court order

10. Data Quality and Security (APP 10 & 11)

10.1 Data Quality (APP 10)

We take reasonable steps to ensure personal information we collect is accurate, up-to-date, complete, and relevant. You can update your information through your account settings or by contacting us.

10.2 Data Security (APP 11)

We protect personal information through:

  • SSL encryption for data transmission
  • Secure servers with restricted access
  • Regular security audits and updates
  • Employee training on data protection
  • Two-factor authentication options
  • PCI DSS compliance for payment data

10.3 Data Retention

We retain personal information for as long as necessary to:

  • Provide our services
  • Comply with legal obligations (typically 7 years for financial records)
  • Resolve disputes and enforce agreements

When no longer needed, we destroy or de-identify personal information securely.

11. Access and Correction (APP 12 & 13)

11.1 Accessing Your Information (APP 12)

You have the right to request access to personal information we hold about you. To request access:

  • Log into your account to view most information
  • Contact us at privacy@vipicks.com.au for additional access
  • We will respond within 30 days
  • We may charge a reasonable fee for providing access

11.2 Correcting Your Information (APP 13)

If you believe personal information we hold is incorrect, incomplete, or outdated:

  • Update it through your account settings
  • Contact us to request correction
  • We will correct information within 30 days or explain why we cannot
  • You may request we notify third parties of corrections

12. Data Breach Notification

Under the Notifiable Data Breaches scheme, we will notify you and the Office of the Australian Information Commissioner (OAIC) if a data breach occurs that is likely to result in serious harm.

If a breach occurs, we will:

  • Assess the breach within 30 days
  • Notify affected individuals as soon as practicable
  • Provide recommendations to reduce harm
  • Report to the OAIC as required

13. Cookies and Tracking Technologies

13.1 Types of Cookies We Use

  • Essential cookies: Required for Platform functionality
  • Performance cookies: Help us understand Platform usage
  • Functionality cookies: Remember your preferences
  • Marketing cookies: Deliver relevant advertisements

13.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect Platform functionality.

14. Children's Privacy

ViPicks is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware we have collected information from a child under 18, we will delete it immediately.

15. Third-Party Links and Services

Our Platform may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing personal information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the updated policy on the Platform
  • Sending an email notification
  • Displaying a prominent notice on the Platform

Continued use after changes constitutes acceptance of the updated policy.

17. Complaints and Contact Information

17.1 Making a Complaint

If you have a privacy complaint:

  1. Contact our Privacy Officer at privacy@vipicks.com.au
  2. We will acknowledge your complaint within 48 hours
  3. We will investigate and respond within 30 days
  4. If unsatisfied, you may complain to the OAIC

17.2 Contact Details

Privacy Officer

ViPicks Pty Ltd

Email: privacy@vipicks.com.au

17.3 External Complaints

Office of the Australian Information Commissioner (OAIC)

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

Website: www.oaic.gov.au

Address: GPO Box 5218, Sydney NSW 2001

18. Your Rights Under Australian Privacy Law

Summary of Your Rights:

  • Know what personal information we collect and why
  • Access your personal information
  • Correct inaccurate information
  • Opt-out of direct marketing
  • Request deletion where appropriate
  • Lodge a complaint about privacy breaches
  • Be notified of eligible data breaches
  • Remain anonymous where practicable