Privacy Policy

Paleta Wholesale ("we", "us", "our") operates the order.paleta.com.au B2B ordering portal. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

• Account details: your name, business name, email address, and mobile phone number.
• Order data: products ordered, quantities, prices, notes, and delivery details.
• Authentication data: one-time codes, passkey credentials, and session cookies.
• Technical data: IP address, device type, and basic browser information for security and abuse prevention.

2. How we use your information

• To process and fulfil wholesale orders.
• To authenticate you and secure your account.
• To send order confirmations and operational notifications.
• To comply with our legal and tax obligations.

We do not sell your personal information, and we do not use it for third-party marketing.

3. Who we share data with

We share only what is necessary with the service providers that run the platform: Google Firebase (database, authentication, hosting), Resend (transactional email delivery), and Stripe (payment processing, when applicable). Each of these providers handles your data under their own privacy terms and security commitments.

4. Data retention

We retain order and account records for as long as your account is active and for a reasonable period afterwards to meet our tax, accounting, and legal obligations.

5. Security

We use industry-standard security controls including encrypted transport (HTTPS), encrypted storage at our cloud provider, short-lived authentication tokens, and server-side authorisation on every request.

6. Your rights

You can request access to, correction of, or deletion of your personal information at any time. You can also withdraw consent or close your account. Contact us using the details below.

7. Contact

For any privacy enquiry, request, or complaint, email hello@paleta.com.au. We aim to respond within 30 days.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above will reflect the most recent revision.