Aimee & Me is a small cookie business based on the Sunshine Coast, Queensland. We take privacy seriously and handle personal information with care. If you have a question about this policy or your information, email aimee@aimeeandme.com.
What we collect
Depending on how you use the website, we may collect:
- your name, email address, phone number, delivery address, and chosen pickup details;
- your order, personalisation, event date, design request, notes, and messages;
- order references, payment status, and Stripe transaction references;
- your email address and consent preferences if you choose to join our email list;
- basic website activity, such as pages and products viewed, basket and checkout actions, timestamps, and browser information; and
- information used to protect the website from misuse, including a temporary one-way hash made from a connection address when the contact form is used.
Card details are entered on Stripe's checkout page. Aimee & Me does not store your full card number or card security code.
Browser storage and site activity
The website stores your basket choices in your browser so they are still there as you move between pages. It also creates a random browser identifier to estimate visits and understand actions such as viewing a product, adding an item to the basket, or starting checkout. This website activity is not used for third-party targeted advertising and is not recorded under your name or email address.
You can clear browser storage through your browser settings. Doing so may empty your basket and create a new visit identifier.
Why we use information
We use personal information only where reasonably needed to:
- answer an enquiry or prepare a custom-order quote;
- take payment and make, personalise, deliver, or arrange pickup of an order;
- provide customer support and deal with an order problem;
- keep appropriate business, transaction, tax, and legal records;
- protect the website and prevent spam or misuse;
- understand how the shop is used and improve it; and
- send launches, cookie news, or offers when you have chosen to receive them.
Sending an enquiry or placing an order does not automatically subscribe you to marketing.
Who we share it with
We share only what is reasonably needed with services that help us run Aimee & Me. These include Stripe for payment processing and Cloudflare for website hosting, data storage, and security. Information may also be shared with a delivery provider, an email service you have asked us to use, professional advisers, or an authority when required or permitted by law.
We do not sell or rent customer information.
Overseas processing
Stripe, Cloudflare, and other service providers may use systems or support teams outside Australia. The countries involved can depend on the provider and how its network operates. You can ask us for the information we have about the providers involved in handling your information.
Storage, security, and retention
Information may be stored in the website's protected administration systems, in service-provider systems, and, for basket details, in your browser. We use reasonable administrative and technical safeguards, but no online system can be guaranteed completely secure.
We keep order and transaction records for the periods reasonably required for business, tax, legal, and dispute purposes. Enquiries, marketing preferences, and website activity are kept only while reasonably needed for their purpose. When information is no longer needed, we take reasonable steps to delete it or remove identifying details.
Your choices
You can ask what personal information we hold about you, request a correction, withdraw marketing consent, or raise a privacy concern by emailing aimee@aimeeandme.com. We may need to confirm your identity before providing order or contact information.
Every marketing email will include an unsubscribe option. You can also ask us directly to stop, and we will action the request as soon as reasonably possible and within the period required by law.
Privacy concerns
Please email us with enough detail to understand the concern. We will acknowledge it and respond within a reasonable time. If the Privacy Act 1988 applies to the matter and it remains unresolved after we have had a reasonable opportunity to respond, you may contact the Office of the Australian Information Commissioner.
Updates to this policy
We may update this policy when the website, our services, or our legal obligations change. The current version and its update date will always appear on this page.