Privacy Policy
This notice outlines the records Forge & Tallow Kitchenware Pty Ltd ("Forge & Tallow") gathers on forgetallow.site, how we handle and store them, who accesses the files, and your legal options. We operate under Privacy Act 1988.
About this privacy policy
These rules cover forgetallow.site, incoming orders, and direct correspondence with our workshop. Third-party sites reached through our external links follow their own independent policies.
Data controller and contact details
The designated data controller is Forge & Tallow Kitchenware Pty Ltd, located at 161 James Street, Toowoomba QLD 4350, Australia. Send privacy requests to [email protected] or call +61 7 639 8668.
- Merchant
- Forge & Tallow Kitchenware Pty Ltd
- Registered address
- 161 James Street, Toowoomba QLD 4350, Australia
- [email protected]
- Phone
- +61 7 639 8668
Customer records we record
We store only the specific information required to complete each listed task.
3.1 Information you provide directly
Full name, shipping address, email, and phone number collected at checkout, plus written queries and product feedback. We retain order records through the statutory accounting timeframe, and messages for up to 3 years following the latest exchange.
3.2 Payment and transaction data
Purchase references, item lists, totals, selected settlement options, and dispatch progress. We never collect or store card numbers on this site. Records remain on file through the mandated accounting window.
3.3 Automatically collected information
IP addresses, browser specs, hardware models, visited URLs, referring links, and timestamps logged by our server and site cookies. Raw server logs clear after 30 days; combined site analytics persist for up to 14 months.
3.4 Marketing and advertising data
Marketing source parameters, referring links, and ad identifiers used to trace incoming visits and resulting sales. We keep this attribution data for up to 90 days.
3.5 Records supplied by partner services
Carrier tracking updates and transaction confirmations from our financial handlers, paired directly with your order ticket.
3.6 Children
We do not direct this storefront to users below 18. We do not deliberately retain their records; guardians may contact [email protected] to remove any accidental submissions.
Required checkout fields
We require your name, destination address, email, and telephone number to package, dispatch, and track your purchase. Orders cannot process without these lines. Other fields remain voluntary.
How your records are used
- To fulfill metalwork orders, ship parcels, generate invoices, and handle item returns or reimbursements.
- To reply to workshop queries and transmit parcel notifications via email or SMS text.
- To defend system stability, prevent unlawful transactions, and evaluate store performance.
- To deliver product updates strictly upon direct request. Each mailing includes an opt-out link.
- To comply with national requirements, including mandatory bookkeeping and tax documentation.
Third-party disclosures
We do not trade customer files. Data passes only to the partners named below, each under contractual obligation to follow our direct instructions.
6.1 Payment processing
Selected settlement platforms receive only the variables necessary to clear funds and balance ledgers.
6.2 Shipping and fulfilment partners
Freight couriers obtain your name, physical address, and telephone number so they can route parcels and arrange drop-off times.
6.3 Service providers
Web servers, transactional mail relays, and workshop communication software handle files on our behalf.
6.4 Advertising and analytics partners
Reporting and promotional trackers operate only with your prior approval, sending traffic metrics to vendor systems per our Cookie Policy.
6.5 Legal and regulatory disclosures
We turn over records when ordered by legal statute or when defending claims arising from commercial disputes.
6.6 Business transfers
In the event of an ownership transfer or corporate sale, buyer registries move to the incoming operator under these same terms.
International data transfers
Service partners may handle records beyond Australia. For foreign processing, we enforce standard contractual clauses or official adequacy findings to maintain baseline safeguards.
Your rights and choices
Per Privacy Act 1988, your profile holds access and correction rights.
8.1 Record review, amendment, erasure, and export
You may inspect your stored files, update details, demand removal, request a machine-readable archive, limit or dispute data actions, and retract previous permissions. Rescinding permission leaves past processing valid.
8.2 Marketing choices
All promotional emails contain a direct unsubscribe switch. You can disable analytic and tracking scripts inside the cookie settings at any point.
8.3 Exercising your rights
Submit requests to [email protected]. We may verify your identity before processing the request, and we provide answers within 30 days. Formal complaints may be lodged with the supervisory body in Australia.
Data security
Traffic transmits via encrypted HTTPS. Purchase data sits behind protected access barriers open only to personnel and suppliers running these tasks. We never receive or retain payment card numbers.
Data retention
Purchase summaries and tax invoices remain archived through mandatory accounting windows before purging. Workshop messages stay on file for up to 3 years after the last note. Web server logs clear after 30 days, aggregated site metrics after 14 months, and promotional consents until revoked.
Third-party websites and services
Outbound links pointing toward social media platforms or transaction processors enter systems governed by their own rules. We bear no liability for their data handling.
Changes to this policy
We revise this notice as shop routines or governing regulations shift. The active text remains published right here, marked with its latest revision date at the top.