Privacy Policy

Papyrus & Pixel is an Australian digital greeting-card business.

For questions about this Privacy Policy or the personal information we hold, you can contact us at contact@papyrusandpixel.com.

Where applicable, we handle personal information in accordance with Australian privacy requirements and other privacy laws that may apply to our activities.

Depending on how you use Papyrus & Pixel, we may collect the following information:

• Account information, such as your email address and information required to create and authenticate your account.
• Order information, such as your order reference, card selected, purchase amount, currency, payment status and transaction date.
• Card personalisation information, including recipient names, sender names, greetings and personal messages that you choose to include in a card.
• Payment and transaction information required to process and manage your purchase.
• Technical information, which may include browser information, device information, IP address, security logs, request logs and diagnostic information generated when you use the website.
• Communications with us, including information you provide when requesting support, reporting a problem, suggesting an occasion or contacting us about a bulk or organisational order.

A personalised Papyrus & Pixel card may contain information about its intended recipient, including their name and other wording entered by the purchaser.

Papyrus & Pixel does not currently require a recipient's email address or phone number in order to deliver a card. After purchasing a card, the buyer receives a unique card link and decides how and when to send it to the intended recipient.

Please only include personal information in a card that is appropriate for the intended recipient to receive.

Payments are processed using Stripe. When you complete checkout, payment information is entered through Stripe's payment services.

Papyrus & Pixel may receive information associated with the transaction, such as payment status, transaction identifiers, purchase amount and other information needed to manage your order.

Stripe handles payment information in accordance with its own privacy, security and legal practices.

We may use personal information to:

• create and manage customer accounts;
• create and store personalised cards;
• process and record purchases;
• provide access to purchased cards;
• maintain customer order history;
• provide customer support;
• investigate technical problems, suspected misuse, fraud or security incidents;
• administer bundle, bulk or organisational purchases;
• operate, maintain and improve the reliability and security of our website and services; and
• meet accounting, tax, legal and regulatory obligations.

We use trusted third-party services to operate Papyrus & Pixel. These currently include:

• Supabase for database services, authentication and storage;
• Stripe for checkout, payment processing and payment-related fraud prevention;
• Vercel for website hosting and delivery; and
• Google Workspace for Papyrus & Pixel business email.

These providers may process information on our behalf or, in some circumstances, for their own purposes in accordance with their respective privacy policies.

Our primary Papyrus & Pixel application database is currently hosted through Supabase in its Sydney, Australia region.

Some of the technology providers supporting Papyrus & Pixel operate internationally. As a result, certain personal information or technical data may be processed, stored or accessed outside Australia where those providers or their subprocessors operate.

We use established service providers and aim to limit the information shared with them to what is reasonably required for the relevant service.

We retain personal information for as long as reasonably necessary to provide Papyrus & Pixel services, maintain customer accounts and order records, provide support, manage disputes or suspected misuse, and meet accounting, tax and legal requirements.

Purchased cards are intended to remain accessible for at least 12 months from the date of purchase.

Information associated with a purchase may need to be kept for longer than the card-access period where reasonably necessary for business, financial, security or legal record-keeping.

We may also retain limited records where necessary to establish, exercise or defend legal rights or prevent misuse of our services.

Papyrus & Pixel and the services supporting our website may use cookies, browser storage or similar technologies where required for functions such as account sign-in, security, checkout and maintaining website sessions.

Third-party services involved in authentication, hosting or checkout may also use cookies or similar technologies in accordance with their own privacy policies.

We will not automatically add a card recipient to a Papyrus & Pixel marketing list simply because someone sends them a card.

If Papyrus & Pixel offers marketing subscriptions, newsletters or promotional emails, those communications will be managed separately from the normal card-order process and will include appropriate options to unsubscribe where required.

We take reasonable steps to protect personal information against loss, misuse, unauthorised access, modification or disclosure.

We use established service providers and technical controls appropriate to the nature of the service. Access to administrative functions and customer information is restricted to authorised access.

However, no website, online transmission or storage system can be guaranteed to be completely secure.

You may contact us to ask about personal information we hold about you or to request access to or correction of that information.

We may need to verify your identity before providing access to, changing or deleting information associated with an account or purchase.

Some information may need to be retained where required or permitted by law, including transaction, accounting and business records.

Requests can be sent to contact@papyrusandpixel.com.

If you have a question or concern about how Papyrus & Pixel handles personal information, please contact us at contact@papyrusandpixel.com and provide enough information for us to understand and investigate the issue.

We will review privacy concerns in good faith and aim to respond within a reasonable period.

Depending on the circumstances and where you live, you may also have the right to raise a concern with an appropriate privacy or data-protection authority.

Papyrus & Pixel is based in Australia but our digital cards may be purchased, sent and viewed internationally.

Depending on where you live, local privacy laws may give you additional rights. Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be excluded.

We may update this Privacy Policy when our services, technology, service providers or legal obligations change.

The current version will be published on this page and the "Last updated" date will be changed when appropriate.

For privacy questions, access or correction requests, complaints or other privacy-related enquiries, contact:

Papyrus & Pixel
Email: contact@papyrusandpixel.com