What we collect, and what we don't.

Who we are

This site is operated by Neotype Studio (registered business name NEOTYPE, ABN 61 877 375 386), a custom print studio in Brisbane, Queensland, Australia. We are the ones responsible for the personal information described below, and info@neotype.au reaches us.

What we don't do

Worth stating first, because it's unusual enough to be worth knowing:

• No session recording, no heatmaps, no data brokers. No Hotjar, no Segment, nothing that watches what you do on a page. What we keep ourselves is a tally of page views and of how many people open a builder, try it, add to cart and start checkout — as daily totals. It records the page and the event, nothing about you: no cookie, no visitor ID, no IP address, no browser fingerprint. It also honours your browser's Do Not Track setting. We use it to see which pages earn their place and where people give up. The two exceptions are Google's tag and Meta's pixel, both described under "Advertising measurement" below, and both of which stay off under Do Not Track.
• We never see your full card details. Payment happens on Stripe's own hosted page; card numbers never reach our servers.
• We don't sell, rent or share your data with anyone for marketing.

What we collect, and why

If you place an order

Your name, email address, phone number, and billing and shipping addresses — collected by Stripe during checkout and passed to us — plus your order details and the artwork you upload. We need these to price the job, produce a proof, print it, send it to the right place and keep a record of the sale.

If you use the contact or quote form

Your name, email address and your message, plus whatever optional detail you add (quantity, size, deadline). Used to answer you, and kept so we have the history if you come back.

If you join the mailing list

Your email address, and nothing else. Every marketing email carries a working one-click unsubscribe link — a real link, not a "reply to be removed" instruction. Unsubscribing is honoured immediately.

While you're using the site

Your cart is held in your own browser's local storage so it survives a refresh. It stays on your device. Our hosting provider processes standard server request data (including IP address) to serve pages and resist abuse, as any web host does.

How you found us

If you arrive from a link that carries campaign tags (the utm_ values you sometimes see in an address) or from an advertisement, your browser's local storage keeps a note of that link and of the site you came from — the first time and the most recent time. It is not an identifier and it says nothing about who you are; it exists so that when an order is placed we can see which listing, post or search brought it, rather than guessing. It stays on your device, is never sent while you're merely browsing, and travels only with an order you actually place — where it sits alongside the order in Stripe. The first-time note is discarded after 30 days, and if your browser sends a Do Not Track signal nothing is stored at all.

Stripe's checkout page also asks, optionally, how you heard about us. Answering is entirely up to you and skipping it changes nothing about your order.

Advertising measurement

When we run ads on Facebook or Instagram we use Meta's pixel and Conversions API to see whether those ads lead to orders. It sets its own cookies (_fbp, _fbc) and reports page views and completed orders with the order total. So the count is right even for browsers that block the pixel, a paid order is also reported from our server, with your contact details hashed — turned into a fingerprint Meta can match against its own records but not read back — plus your IP address and browser user-agent, which Meta requires unhashed to do the same matching. Your artwork and anything you typed in a note are never sent. If your browser sends a Do Not Track signal, no pixel loads at all.

We also run Google's tag (gtag.js), the measurement script behind Google Ads and Google Analytics, so that ads on Google can be judged the same way. It sets Google's own cookies and reports page views, builder views, checkout starts and completed orders with the order total and reference. It is sent no name, email, phone or address, and nothing from your artwork or notes. Under Do Not Track it does not load either.

Who else processes it

We use a small number of providers, each for one job:

• Stripe — payment processing. Handles card details, billing and shipping addresses. Subject to Stripe's own privacy policy.
• Cloudflare — hosting, and the storage holding orders, enquiries and artwork.
• Resend — sends order confirmations, proof emails, enquiry notifications and mailing-list email.
• Google Fonts — the site loads its typefaces from Google's font service, which means Google receives your IP address when a page loads. It is for fonts, not measurement.
• Meta and Google — advertising measurement. See "Advertising measurement" above for what each is sent and in what form.
• Google Customer Reviews — after a paid order, the confirmation page may offer a short Google survey about your purchase. To make the offer, the page gives Google's script your email address, your order reference and the date we expect your order to arrive; Google emails you the survey only if you accept. Our Google rating badge, where shown, loads from Google's servers, so Google receives your IP address when such a page loads, as with fonts.

Some of these providers operate servers outside Australia, so your information may be processed overseas by them in the course of doing those jobs.

How long we keep it

• Uploaded artwork — automatically deleted 90 days after upload, unless you ask us to keep it on file for reorders.
• Order records — kept while we may need them for reorders, warranty, accounting and tax obligations.
• Enquiries — kept so we have the conversation history if you come back.
• Mailing-list address — kept until you unsubscribe.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@neotype.au. We'll respond within a reasonable time and delete whatever we're not legally required to retain — order and tax records being the usual exception.

If you're unhappy with how we've handled your information, tell us first and we'll try to fix it. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

The site is served over HTTPS. Payment happens entirely within Stripe's hosted checkout. Administrative access is password-protected with an email-code sign-in as the recovery path. No system is perfectly secure, and we won't claim otherwise — but the most sensitive data in the whole flow, your card details, is the one thing we deliberately never hold.

Children

This is a shop for businesses and adults. We don't knowingly collect information from children.

Changes

We may update this page. The last-updated date is at the top. Material changes to how we handle existing customers' information will be told to those customers directly, not slipped in here.

Contact

info@neotype.au, or the contact page.