Skip to content
Paperbark Kids

Legal

Privacy Policy.

Your data belongs to you. We collect only what we need to run the marketplace, we tell you what we do with it, and we let you take it with you if you leave.

Version 0.1 (draft)Effective

1. Who we are

This policy describes how Paperbark Kids Pty Ltd (“Paperbark Kids”, “we”, “us”) collects, uses, stores, and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What we collect

We only collect what we need to run the service. That includes:

  • Account data: email address, name, postcode, phone number (optional), profile photo (optional), and password.
  • Listing and transaction data: items listed, prices, photos, descriptions, messages, reviews, orders, and dispute history.
  • Payment and payout data: bank or card details are handled by our payments partner (Stripe); we receive only tokens and summaries, never full card numbers.
  • Shipping data: delivery addresses and tracking numbers, shared with our shipping partner (Sendle) to generate labels and track parcels.
  • Device and usage data: IP address, browser type, device identifiers, and interactions with the platform (pages visited, features used).

3. How we use your information

  • To operate the marketplace: listings, messages, payments, shipping, payouts.
  • To verify identity and detect fraud or misuse.
  • To provide customer support and resolve disputes.
  • To send transactional emails (receipts, shipping updates, dispute outcomes).
  • To send marketing emails only where you have opted in. You can unsubscribe at any time.
  • To improve the product through analytics on de-identified or aggregated data.

4. Who we share it with

We share personal information only as needed to run the service:

  • Stripe: payment processing, payouts, tax reporting where applicable.
  • Sendle: shipping label generation and tracking.
  • Resend: transactional and marketing email delivery.
  • Supabase: database, authentication, and file storage.
  • Sentry / PostHog: error monitoring and product analytics.
  • Other users: your public profile (handle, city/state) and listings are visible to other Paperbark Kids users.
  • Law enforcement: where required by a lawful request, court order, or to protect rights, property, or safety.

We do not sell your personal information.

5. Where your data is stored

We host infrastructure in Australian regions where possible. Some of our providers (e.g. Stripe, Sentry) operate globally and may process data outside Australia. Where data is transferred overseas, we take reasonable steps to ensure it’s handled consistently with the Australian Privacy Principles.

6. How long we keep it

We keep personal information for as long as your account is active, plus the period needed to meet our tax, accounting and legal obligations (typically seven years for financial records). You can request deletion at any time (see below).

7. Your rights

You can, at any time:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or out-of-date information.
  • Request deletion of your account and associated data.
  • Export your data in a machine-readable format.
  • Opt out of marketing emails.
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, email hello@paperbarkkids.com.au. We’ll respond within thirty days.

8. Cookies and tracking

We use strictly necessary cookies to keep you signed in and to secure the platform. We use privacy-respecting analytics to measure product usage; we do not use third-party ad tracking or behavioural advertising pixels.

9. Children

Paperbark Kids is intended for adults. You must be at least 18 to use the platform. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email us and we will remove it promptly.

10. Security

We use industry-standard security practices: encrypted transport (TLS), encrypted at rest, hashed passwords, access controls, principle-of-least-privilege, regular audits. No system is perfectly secure; we’ll notify affected users and the OAIC of any notifiable data breach as required by law.

11. Changes to this policy

We’ll announce material changes by email and on the platform at least thirty days before they take effect.

12. Contact

Questions, requests, or complaints: hello@paperbarkkids.com.au. Postal address available on request.