Privacy & cookies
How Vatborn uses information for the website, orders and support.
Vatborn is operated by Brett Mather, sole trader, ABN 11 331 548 016. Business name Vatborn is on the ABN from 9 October 2026. Nowra NSW. Not registered for GST.
UPDATED 15 OCTOBER 2026What this policy covers
This policy covers browsing, guest checkout and the Vatborn contact form. Orders collect your name, email, delivery address, chosen goods and payment/order references. The form collects your name, email and message. We use these to process and deliver purchases, answer enquiries and handle refunds. Do not put card details or unnecessary sensitive information into messages.
Information used to deliver the website
Your browser sends information needed to request a page, such as an IP address, browser/device information, requested URL and connection timing. Our website delivery services may process this information to serve pages, investigate errors, measure delivery performance and protect against misuse.
Avoid putting private details in advert URLs or search terms. Search and filter choices can appear in the page address and normal request information.
Hosting and service providers
Stripe processes card details and payments securely. Vatborn stores payment references and statuses, not your full card number. Zoho handles support and transactional email. Cloudflare delivers and protects the website and may process IP addresses and security logs. The self-hosted Vendure database holds orders, delivery details and payment references.
Hermes alerts notify Brett about new paid orders through his private Telegram Business route. The alert contains the order reference and total; it does not include card details or the delivery address. These providers may process information outside Australia under their service arrangements. No advertising pixels or marketing subscription are enabled.
Protection and retention
Access to order records and private administration is restricted. We keep records needed for purchases, support, disputes and applicable obligations, and limit disclosure to those purposes.
We retain order and tax records for 5 years, support emails for 2 years and security logs for 90 days. Backups are kept on a rolling 30-day basis. Contact [email protected] to request access, correction or deletion. We retain records needed for legal obligations and explain any limits on deletion. Copies in backups expire with the rolling backup cycle. Stripe, Zoho, Cloudflare and Hermes process information for their stated purposes; their own applicable retention obligations also apply.
Privacy enquiries and changes
For privacy questions, access/correction requests or complaints, contact Brett Mather at [email protected], through the contact form or on 0493 017 153. We assess requests under applicable law; legally required records may need to be retained.
We update this page when collection or use changes.