What we collect, what we don't.

Who runs this site

Terraliving is a small Sunshine Coast business. The data controller for the purposes of the Australian Privacy Act 1988 is the Terraliving founder, contactable at hello@terraliving.com.au.

What we collect

• Email address — only if you sign up to the Earth Letter or place an order.
• Order details — your name, shipping address, the items in your order, and an order reference. Held to fulfil your order and meet Australian record-keeping requirements.
• Payment information — collected and processed by Stripe directly. We do not see, store, or have access to your full card number. Stripe gives us back only the order amount, last four digits of the card, and a confirmation token.
• Communications you send us — emails to hello@terraliving.com.au are read by the founder and a small team. They are retained as long as is reasonable to provide ongoing customer service.

We do not collect health data, demographic data, individual browsing history, or any data via third-party advertising scripts. We do not run Facebook Pixel, Google Ads remarketing, TikTok Pixel, or similar.

Cookies

A small first-party cookie is used to keep the shopping cart working as you move between pages. We do not use third-party tracking cookies or behavioural advertising cookies. You can clear cookies in your browser at any time without affecting your ability to use the site, except the cart will reset.

Analytics

We use Cloudflare Web Analytics to see basic, aggregate traffic — how many people visit and which pages they read. It is privacy-first by design: it sets no cookies, builds no profile of you, and cannot track you across other websites. It reads standard request data (such as your IP address and browser type) only to count visits, never to identify you. Because there are no cookies and no behavioural tracking, no consent banner is required.

Who sees your data

The minimum number of third-party services needed to run the shop. None of them sell or share your data:

• Stripe — payment processing. Operates under PCI-DSS Level 1. Subject to its own privacy policy.
• Resend — transactional email (order confirmation, shipping notification) and the Earth Letter newsletter. Holds your email address and the message content. Subject to its own privacy policy.
• Neon — managed Postgres database where order records are stored.
• Vercel — site hosting and serverless function execution. Receives standard server logs (IP, user agent, request path) which are retained briefly for operational and security purposes.
• Cloudflare — privacy-first, cookieless web analytics (visit and page-view counts). Receives standard request data (IP, user agent) to tally visits; sets no cookies and builds no cross-site profile. Subject to its own privacy policy.
• Australia Post / Sendle — shipping. Receives your name, shipping address, and parcel weight in order to deliver your order.

How long we keep things

• Order records — 7 years, the minimum retention period required by the Australian Taxation Office for tax records.
• Newsletter email addresses — until you unsubscribe. Every Earth Letter contains a one-click unsubscribe link.
• Customer emails — typically 2 years, longer if there's an ongoing matter.
• Server logs — typically 30 days, longer if a security investigation requires it.

Your rights

Under Australian privacy law, you can ask us to:

• Show you what personal information we hold about you.
• Correct anything that's wrong.
• Delete what you'd like deleted, subject to legal retention requirements (we have to keep order records 7 years; everything else we can delete).
• Stop sending you the Earth Letter at any time.

Email hello@terraliving.com.au for any of these. We aim to respond within 7 days.

Complaints

If you're not happy with how we've handled your data, you can raise a complaint with the Office of the Australian Information Commissioner at oaic.gov.au. We'd rather you talk to us first — but the option is yours.

Changes to this policy

When this policy changes materially, we'll note the new "Last updated" date at the top, and mention significant changes in the next Earth Letter.