Your Cart
🐨


Australian designed.
Gold Coast printed.
Making boring presents nervous since 2017.

PRIVACY POLICY

Your information.
Not ours to be weird with.

This policy explains what personal information Ink + Fold may collect, why we collect it, who we may need to share it with, how long we keep it, and how you can ask to access, correct or complain about the way it is handled.

We do not sell your personal information. We do need to use and disclose some information to make your order, take payment, deliver it, run the website and provide customer support. That is very different from selling your details.
Australian privacy law

SPATZ Conceptz Pty Ltd T/A Ink and Fold is committed to handling personal information responsibly and in accordance with applicable Australian privacy laws. To the extent the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to us, we will handle personal information consistently with those obligations. Nothing in this policy limits any privacy rights that cannot lawfully be excluded.

We don’t sell it Your personal information is not a side hustle.
We collect what we need Orders, support, payments, delivery, accounts + running the website.
Marketing is optional Buying wrapping paper does not automatically mean “email me forever”.
You can contact us Access, correction and privacy questions go to [email protected].
01 · Hello

Who We Are

This Privacy Policy applies to the website https://www.inkandfold.com.au and the personal information handled in connection with Ink + Fold.

The business is SPATZ Conceptz Pty Ltd T/A Ink and Fold, ABN 76104297369.

For privacy questions, requests or complaints, contact: Privacy Contact – Ink + Fold
Email: [email protected]

This policy may be updated from time to time to reflect changes to our website, providers, business practices or legal obligations.

Last updated: 11 August 2026.

02 · The actual information

What Personal Information We May Collect

The information we collect depends on how you interact with Ink + Fold. It may include:

  • your name and contact details, including email address and phone number
  • billing and shipping addresses
  • order details, products purchased, personalisation selections and transaction history
  • account details such as username and encrypted/password-authentication information handled by the website
  • information you provide in enquiries, complaints, return requests or customer-support communications
  • customer-supplied names, wording, dates, photographs and other content required to personalise a product
  • payment status, transaction identifiers and limited payment-related information received from payment providers
  • website and device information such as IP address, browser type, device information, pages viewed, cart activity and approximate location derived from technical information
  • comments, product reviews and other content you choose to submit publicly or to us
  • marketing preferences and records of consent or unsubscribe requests
  • fraud-prevention, security and verification information reasonably required to protect transactions and the website

We do not intentionally request sensitive information unless it is reasonably necessary for a particular purpose and its collection is permitted by law. Please avoid including unnecessary sensitive information in personalisation, photographs, messages or order notes.

03 · How it gets here

How We Collect Personal Information

We generally collect information directly from you when you:

  • place an order or begin the checkout process
  • create or use a customer account
  • upload a photograph or provide personalisation details
  • contact us by website form, email, telephone or social media
  • submit a review or comment
  • join a mailing list or otherwise choose to receive marketing
  • browse and interact with our website

We may also receive information from payment providers, delivery providers, fraud-prevention services, website/security services and other third parties involved in providing a service you have requested.

Some technical information may be collected automatically by cookies, logs, analytics tools and similar technologies.

04 · Why we need it

How + Why We Use Personal Information

We may use personal information for purposes reasonably connected with operating Ink + Fold, including to:

  • create, personalise, print, pack and fulfil your order
  • process and confirm payments
  • arrange delivery, tracking, returns and replacement shipments
  • communicate with you about an order or account
  • respond to enquiries, refunds, complaints, faults and support requests
  • create and manage customer accounts
  • detect, investigate and prevent fraud, misuse and security incidents
  • meet tax, accounting, legal and regulatory obligations
  • operate, secure, troubleshoot and improve the website and store
  • understand website performance and customer experience
  • send marketing where you have consented or where otherwise permitted by law
  • establish, exercise or defend legal claims where reasonably necessary
The important correction to our old policy

We do not use your information only to “process your order”. A functioning online shop also needs information for payment, delivery, security, support, accounts, record-keeping and the other purposes explained here.

05 · Names, faces + very personal wrapping paper

Personalisation, Uploaded Images + Product Photos

If you order a personalised product, we may collect and use the names, wording, dates, photographs and other content you provide for the purpose of creating and fulfilling that order and dealing with related customer support.

Please only upload or provide content that you are authorised to provide and use for the requested product.

If an uploaded image contains embedded metadata such as EXIF location data, that metadata may accompany the file unless it is removed before upload. We recommend removing unnecessary location metadata from photographs before providing them to us.

Finished-product photographs + social media

We may photograph finished products for quality, production records or portfolio purposes. We will not treat the mere act of placing an order as blanket consent to publicly publish identifiable personal information.

We may publish photographs of our products where customer personal information has been removed, obscured, replaced or is not reasonably identifiable.

If a product photograph would display a customer's photograph, full name, address, birth information or other identifiable personal information, we will seek appropriate permission before publishing that identifiable content for promotional or social-media purposes, unless another lawful basis applies.

Translation: your personalised order is not automatically our Instagram content.

Pretty wrapping paper may be photographed. Identifiable customer details deserve a separate privacy decision.

06 · Money stuff

Payments + Fraud Prevention

Payments may be processed by third-party payment providers available at checkout, including providers such as PayPal, Afterpay and card-payment gateways.

Payment providers receive information necessary to authorise, process, manage or refund a transaction. This may include your name, billing details, order amount, transaction information and other information required by the provider.

We do not ask customers to send full card numbers, CVV/CVC codes, PINs, banking passwords or one-time authentication codes by email, contact form or social-media message.

We may receive transaction identifiers, payment status, limited card descriptors and fraud/security results from payment providers. We may use this information to process your order and investigate suspected fraud.

PayPal

Information required to process or support PayPal transactions may be disclosed to and processed by PayPal.

Afterpay

If you choose Afterpay, information required for the transaction is handled by Afterpay under its own terms and privacy practices.

Payments + security
07 · Who else needs some of it

Who We May Share Personal Information With

We do not sell your personal information.

We may disclose information where reasonably necessary to third parties that help us operate the business or provide the service you requested, including:

  • payment gateways, PayPal, Afterpay and other payment or fraud-prevention providers
  • Australia Post and other postal, courier, fulfilment or logistics providers
  • website hosting, ecommerce, security, backup and technical service providers
  • email, customer-service and communications providers
  • analytics, advertising or social-media platforms where those tools are enabled and used lawfully
  • professional advisers such as accountants, insurers, auditors and lawyers where reasonably necessary
  • regulators, courts, law-enforcement bodies or other recipients where disclosure is required or authorised by law
  • a purchaser or adviser in connection with a genuine sale, restructure or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements

We aim to disclose only the information reasonably necessary for the relevant service or purpose.

08 · Emails you actually asked for

Marketing Communications

We may send marketing emails or other commercial electronic messages where you have consented or where sending them is otherwise permitted by law.

A purchase or customer-service enquiry does not, by itself, mean that we will automatically add you to a marketing list where consent is required.

Marketing messages will identify the sender and provide an unsubscribe method. You can unsubscribe using the link or instructions in a marketing message or by contacting us.

We will action valid unsubscribe requests in accordance with the Spam Act 2003 (Cth). Unsubscribing from marketing does not prevent us from sending genuine transactional or service messages required to manage an existing order, account or enquiry.

09 · Tiny browser crumbs

Cookies, Analytics + Tracking Technologies

Our website uses cookies and similar technologies. Depending on the features and services enabled on the site, these may include:

  • essential cookies required for carts, checkout, security, login and website functionality
  • preference cookies that remember settings or account choices
  • analytics and performance technologies used to understand how the site is used
  • advertising, social-media or measurement technologies where enabled

Cookies may collect or generate information such as IP address, device and browser information, pages viewed, referral information, interactions, cart activity and identifiers used by the relevant service.

You can control many cookies through your browser settings and any cookie controls we make available. Blocking essential cookies may prevent parts of the website, cart, account or checkout from working properly.

Where third-party tracking pixels, analytics or advertising tools are used, we aim to configure and disclose them appropriately and to minimise the personal information transmitted where reasonably practicable.

10 · Other websites appearing inside ours

Embedded Content + External Websites

Pages on our site may contain embedded or linked content from third-party services, such as videos, social-media content, images or other website features.

When you interact with third-party embedded content, the third party may collect information, use cookies or other technologies, and process your interaction according to its own privacy policy.

External websites and services are responsible for their own privacy practices. We encourage you to review their privacy information where relevant.

11 · Reviews + comments

Comments, Reviews + Spam Detection

If comments or product reviews are enabled and you submit one, we may collect the information entered into the relevant form together with technical information such as IP address and browser information for moderation, security and spam-detection purposes.

Content you choose to publish as a public comment or review may be visible to other website visitors.

Comments or reviews may be processed by automated spam, moderation or security services where those services are enabled.

We may retain reviews and comments while they remain published and for moderation, dispute, security or record-keeping purposes. You may contact us if you would like to request removal or correction of content you submitted.

12 · The internet has passports

Overseas Service Providers + Data Processing

Some of the third-party platforms and technology providers used to operate an online store may store, process or make information accessible from locations outside Australia.

The location can depend on the provider, its infrastructure and the service being used and may change over time. Where Australian privacy law requires us to identify likely overseas disclosures and it is practicable to do so, we will take reasonable steps to provide the required information.

Where the Australian Privacy Principles apply to an overseas disclosure, we will take the steps required by applicable law in relation to that disclosure.

This section should stay current with your actual website stack.

If we materially change payment, hosting, email, analytics or advertising providers, we may update this policy to reflect those data flows.

13 · How long it hangs around

How Long We Retain Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected or another lawful purpose, including customer service, order history, accounting, tax, fraud prevention, legal claims and regulatory requirements.

Most Australian business and tax records generally need to be retained for at least 5 years, although some records may need to be kept for a different or longer period.

Customer account information may be retained while the account remains active and for a reasonable period afterwards where required for order, security, legal or record-keeping purposes.

Personalisation files and uploaded photographs may be retained for a reasonable period to produce the order, support reprints, respond to customer-service issues and maintain appropriate production records. Where information is no longer required and applicable law requires its destruction or de-identification, we will take reasonable steps to do so.

Deletion from active systems may not immediately remove information from encrypted backups or archival systems. Residual copies may remain until those systems are overwritten or expire in accordance with applicable retention and security processes.

14 · Keeping it safe

Security Of Personal Information

We take reasonable technical and organisational steps appropriate to the circumstances to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Our website uses HTTPS/TLS encryption to help protect information transmitted between your browser and the website. Encryption in transit does not mean that every piece of information is encrypted in every location or that any internet-connected system can be guaranteed to be completely secure.

Access to customer and order information is limited to team members and service providers who need access for functions such as production, fulfilment, refunds, customer support, website administration, accounting or security.

If you create an account, you are responsible for keeping your login credentials confidential and should contact us if you suspect unauthorised use.

Why we changed “SSL protects ALL information”

SSL/TLS protects data while it is travelling between systems. A legally safer privacy policy describes security accurately rather than promising a level of protection no website can guarantee.

15 · If something goes wrong

Data Breaches

If we become aware of suspected unauthorised access to, disclosure of, loss of or other compromise of personal information, we will assess and respond to the incident having regard to its nature, seriousness and our applicable legal obligations.

Where the Notifiable Data Breaches scheme under the Privacy Act applies to us and an incident is an eligible data breach, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

16 · Your information

Access + Correction Requests

You may contact us to ask what personal information we hold about you or to request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Where the Australian Privacy Principles apply, access and correction requests will be handled in accordance with those requirements, including any lawful exceptions.

We may need to verify your identity before providing access to or changing personal information. This protects your information from being handed to somebody who happens to know your name and enjoys administrative chaos.

You may also ask us to delete information. Whether we can delete it will depend on why it is held and whether we need or are legally required to retain it for purposes such as transaction, tax, fraud, dispute or legal records.

Make a privacy request
17 · Privacy complaints

Questions + Complaints About Privacy

If you have a question or complaint about the way Ink + Fold has handled your personal information, please contact:

Privacy Contact – Ink + Fold
SPATZ Conceptz Pty Ltd T/A Ink and Fold
ABN 76104297369
Email: [email protected]

Please explain the issue and provide enough information for us to identify the relevant interaction or account. We may ask for reasonable identity verification before discussing personal information.

We will investigate privacy complaints and respond within a reasonable period having regard to the nature and complexity of the issue.

If the Privacy Act applies to the matter and you are not satisfied with our response, you may be entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC).

OAIC privacy complaints
In short: we need some information. We don’t get to be weird with it. SPATZ Conceptz Pty Ltd T/A Ink and Fold · ABN 76104297369 · Privacy questions: [email protected]