Privacy Policy

Who we are

Heated Comfort is operated by Max Albert (ABN 27 115 848 004), trading as Heated Comfort. This policy explains what personal information we collect, why we collect it, and what we do with it.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

We also collect basic technical information when you visit the site — IP address, browser type, pages viewed — through our hosting provider's standard logs. This is used to keep the site running and secure.

How we use it

• Processing and delivering your order
• Sending order confirmations and shipping updates
• Responding to your questions, returns and warranty claims
• Meeting our record-keeping obligations under Australian tax law
• Detecting and preventing fraudulent transactions

We do not sell, rent or trade your personal information to anyone.

We'll only send you marketing email if you've asked us to, and every marketing email has a working unsubscribe link. Order and shipping emails aren't marketing — you'll get those regardless because they're part of the transaction.

Who we share it with

We share the minimum necessary with:

• Stripe — payment processing. Stripe is bound by its own privacy policy and PCI-DSS obligations.
• Cloudflare — website and application hosting.
• Our shipping carrier and supplier — your name, address and phone number, solely so your order can be packed and delivered.

Some of these providers store or process data outside Australia, including in the United States. By ordering, you consent to that overseas disclosure. We take reasonable steps to use providers with appropriate protections in place.

We may also disclose information where we're required to by law.

Cookies

We use only what the site needs to function — session and security cookies set by our host, and cookies set by Stripe during checkout to process your payment securely and detect fraud.

We don't use analytics or advertising cookies, and we don't track you across other sites.

You can block or delete cookies in your browser settings, but checkout may not work correctly if you do.

How long we keep it

We keep order records for seven years, which is what Australian tax law requires. Support emails are kept for 2 years. Anything we no longer need is deleted or de-identified.

Security

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. Our site is served over HTTPS, payment credentials are held only by Stripe, and access to order data is restricted.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we're not legally required to keep it. Email us and we'll respond within 30 days.

We may need to verify your identity before releasing information. There's no charge for a reasonable request.

Complaints

If you think we've mishandled your personal information, email us first and we'll investigate and respond within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Contact us