This policy explains what Ecoleaf Packaging Pty Ltd (ABN 61 697 762 066) collects when you use ecoleafpackaging.com.au, why we collect it, and who else sees it. We've written it to describe what the website actually does, rather than to cover every theoretical possibility.

What we collect

When you create an account: your name, business name, ABN, email address, phone number, and your delivery and billing addresses. Your password is stored in hashed form — we can't see it, and neither can anyone else with access to our database.

When you place an order: the items and quantities you ordered, the prices, your delivery and billing addresses, and any order notes you add.

When you contact us: your name, business name, email, phone number, the products you're interested in, and your message.

Automatically: standard website analytics — pages visited, how you arrived, approximate location, and device and browser type.

Your card details

Payments are processed by eWAY, an Australian payment provider. Your card number and CVV are encrypted inside your own browser before they are sent anywhere, using eWAY's encryption library. That means the raw digits of your card are never transmitted to, processed by, or stored on Ecoleaf's servers at any point. We couldn't retrieve your card number if we wanted to.

eWAY handles the payment itself under its own privacy policy and PCI-DSS obligations.

How we use your information

  • To take, process, pack and deliver your orders
  • To issue tax invoices and process payments and refunds
  • To contact you about an order, a delivery or a returns claim
  • To provide your account, order history and saved favourites
  • To answer enquiries you send us
  • To understand how the website is used, so we can improve it
  • To meet our record-keeping obligations, including tax and GST records
  • To send you offers, product news or other marketing, where you haven't opted out

Marketing emails

We may send you occasional emails about new products, price changes or offers. Every marketing email includes an unsubscribe link, and you can also just reply and ask us to stop, or email sales@ecoleafpackaging.com.au. Opting out of marketing won't stop the emails you actually need — order confirmations, tax invoices and delivery updates.

Who else sees your information

We share your details only where it's needed to run the business:

  • eWAY — to process card payments and refunds.
  • Delivery couriers — your name, delivery address and phone number, so they can deliver your order and contact you if they can't find you.
  • Google — we use Google Analytics to understand website usage (linked to Google Ads so we can see which advertising works), and Google Maps address autocomplete on our checkout. If you use the address suggestions, what you type into the address field is sent to Google to generate them. You can ignore the suggestions and type your address manually.
  • Where the law requires it — for example, a valid request from a government authority.

We do not sell your personal information, and we don't rent or trade our customer list. Some of these providers, including Google, store and process data on servers outside Australia.

Cookies and browser storage

The site uses three things stored in your browser:

  • A login cookie — set when you sign in, lasts 30 days, and is marked httpOnly so scripts running in the page can't read it. Signing out removes it.
  • Your cart — kept in your browser's local storage so your items are still there if you close the tab and come back. It stays on your device.
  • Analytics cookies — set by Google Analytics to count visits and understand usage.

You can clear or block cookies in your browser settings. Blocking them will sign you out and may empty your cart, but you'll still be able to browse the site.

How we keep it safe

The site is served over HTTPS, passwords are hashed, login tokens are held in httpOnly cookies, and card data is encrypted in your browser before it leaves your device. No system is perfectly secure, but we don't hold the piece of data that would matter most in a breach — your card number.

How long we keep it

We keep order and invoice records for at least seven years, because Australian tax law requires it. Account details are kept while your account is open. Contact-form enquiries are kept while they're useful for following up with you.

Seeing, correcting or deleting your information

You can see and update most of your details yourself in your account. For anything else — a copy of what we hold, a correction, or deletion — email sales@ecoleafpackaging.com.au and we'll respond within a reasonable time. We may need to keep order and invoice records even after an account is closed, for the tax reasons above.

Questions or complaints

Contact us first and we'll try to sort it out:
sales@ecoleafpackaging.com.au · 0485 697 846
Ecoleaf Packaging Pty Ltd, Unit 4, 83 Motivation Drive, Wangara WA 6065

If you're not satisfied with our response, you can raise it with the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. Material changes will be reflected here before they take effect.

Related

Terms & conditions · Shipping & delivery · Returns & refunds