This Privacy Policy explains how personal data is collected, used, stored, and shared when using this website, which is operated under the trading name Sunchairlab by EverythingBranded Pty Ltd. This policy has been prepared in strict accordance with applicable statutory privacy principles in Australia and the European Union, including the General Data Protection Regulation (GDPR).

Data Controller Designation:
The legal data controller responsible for the processing of personal data on this platform is EverythingBranded Pty Ltd (operating as Sunchairlab).

1. Information Collected

Personal data may be collected when users interact with the website, including:

  • Contact Details: Information provided through official forms or email communication.
  • Order and Transaction Information: Data entered securely during the checkout process to complete purchases.
  • Device and Browser Information: Technical identifiers used for website access and cybersecurity monitoring.
  • Usage Information: Aggregated data relating to page interactions and browsing journeys.

2. Use of Personal Data

Collected information is utilised strictly for the following operational purposes:

  • Processing, fulfilling, and dispatching product orders.
  • Responding to customer support enquiries within our committed response windows.
  • Managing, maintaining, and securing website functionality.
  • Improving user experience and platform performance via aggregated analytics.
  • Maintaining accurate corporate financial and transaction records for administrative compliance.

3. Payment Processing and Fraud Prevention (Stripe)

Payment transactions on this website are securely handled through Stripe, which acts as our external payment service provider for credit/debit cards and electronic wallet methods, including Visa, Mastercard, American Express, Apple Pay, and Google Pay.

During the secure checkout process, necessary personal, device, and payment-related information is transmitted to Stripe. This data transmission is executed for the essential purposes of authorising financial transactions, mitigating merchant risk, preventing fraudulent activities, and ensuring compliance with international payment network standards. Stripe processes this data independently as an authorised processor in accordance with its own strict data handling, security, and privacy frameworks.

4. Data Retention

Personal data is retained only for the duration necessary to fulfil the specific operational and legal purposes for which it was originally collected:

  • Transaction and Order Records: Retained for up to 7 years to satisfy regulatory accounting and statutory record-keeping obligations applicable in Australia and the European Union.
  • Customer Communication Records: Retained for up to 24 months unless prolonged retention is required for legal or administrative purposes.
  • Website Usage and Interaction Data: Retained for a limited duration, typically up to 12 months.

When personal data is no longer required, it is permanently deleted or securely anonymised in a professional manner consistent with legal frameworks.

5. Cookies and Tracking

This website utilizes cookies to support core operational functions, manage user preferences, and analyse general traffic patterns.

A compliant cookie banner is displayed upon your initial visit. Non-essential cookies are only activated where a user selects the explicit “Accept” option. Users maintain the right to modify or withdraw consent at any time via individual browser configurations. Further precise details are provided in our dedicated Cookie Policy.

6. Data Sharing

Personal data is never shared or sold for unrelated commercial or marketing purposes. Information may be shared strictly on a need-to-know basis with:

  • Stripe, for essential payment processing and fraud risk mitigation.
  • Authorised service providers directly assisting with internal logistics and website operations.
  • Legal, judicial, or regulatory authorities where we are under a statutory obligation to comply.

7. Data Security

Appropriate organisational, technical, and operational security measures are continuously applied to reduce the risk of unauthorised access, alteration, disclosure, or loss of personal data. While no digital infrastructure can eliminate all hypothetical risks, we take every commercially reasonable step to protect all information processed through our storefront.

8. Your Rights

Depending on your geographic location, you may possess enforceable statutory rights under applicable data protection frameworks (including the GDPR), which include the right to:

  • Access the personal data held regarding your identity.
  • Request the immediate correction of inaccurate or incomplete information.
  • Request data erasure where legally applicable.
  • Restrict or object to certain processing activities.

Formal rights requests can be submitted directly using the verified corporate contact information detailed below.

9. Contact Details

For any enquiries relating to this Privacy Policy or your personal data management, please contact us at:

EverythingBranded Pty Ltd
232 Unley Rd, Unley SA 5061, Australia
Email: beach@sunchairlab.com
Phone: +61 468069122