Privacy policy

We may collect your name, email address, phone number, shipping address, organisation details, member code, consent choices, order history, and correspondence. If you create an account, Convex Auth stores the authentication record. With analytics consent, PostHog may collect device, page, referral, and interaction data. Masked session replay is a separate optional choice and is disabled on checkout and account pages.

We use personal information to operate membership discounts, authenticate accounts, process orders, arrange shipping, send transactional member-code and order messages, respond to enquiries, provide COA documentation, improve the site where consent allows, and meet legal obligations. Marketing email is sent only when you opt in; transactional code, security, and order email does not require marketing consent. We do not sell personal information.

We use Convex and Convex Auth for application data and accounts, Resend for email delivery, Stripe and connected checkout services for card payment, and PostHog for consented analytics. These providers may process or store information outside Australia, including in the United States or other locations where they or their subprocessors operate. We take reasonable steps required by APP 8 to select and configure providers appropriately and to protect information from misuse, interference, loss, and unauthorised access.

We disclose only what is reasonably needed to payment processors, shipping carriers, authentication, hosting, analytics, and email providers to operate the service. Optional analytics and replay remain off until you consent after passing the age gate. We may also disclose information where required by law.

You can decline analytics, marketing, and replay while continuing to use essential cart, age-gate, authentication, and checkout functions. You can withdraw marketing consent using the unsubscribe option in marketing email or by contacting us. Withdrawing marketing consent does not stop transactional member-code, security, or order messages.

You may request access to, or correction of, your personal information by contacting support. We will respond in line with the Australian Privacy Principles.

Privacy requests: contact@theprotocolau.com