Privacy Policy

Last updated: 29 September 2026

BrandnBundle respects your privacy. This policy explains how we collect, use, store and disclose personal information when you use this website or contact us. We aim to handle personal information consistently with the Australian Privacy Principles where they apply.

Information we collect

When you send an enquiry or request a merch-pack quote, we may collect your name, email address, company, phone number, delivery postcode, required delivery date, enquiry message, product selections, quantities and packaging or branding requirements.

Our website and hosting services may also record technical information needed to operate and protect the site, such as your IP address, browser and device information, request times, pages requested and security events. The enquiry form also uses a protected form token and a one-time request reference to reduce misuse and duplicate submissions. When you submit the required consent checkbox, we record the wording accepted, its version, the form type, request reference, server receipt date and time, and connection IP address (which may identify a hosting proxy). This record accompanies your enquiry in our business email system to document permission to respond; it is not permission for unrelated marketing.

Please do not send payment-card details, government identifiers, health information or other sensitive information through the enquiry forms.

How we collect and use information

We usually collect information directly from you when you use a form, email us or otherwise communicate with us. We use it to respond to enquiries, prepare and manage quotes, confirm products and availability, plan branding, packaging and delivery, provide requested products or services, prevent misuse, maintain business records and meet legal obligations.

We do not sell personal information. We do not use enquiry details for unrelated marketing unless you separately agree or the use is otherwise permitted by law.

Who we may share information with

We may share the minimum information reasonably needed with service providers that help us operate the website, email and business systems, and with relevant product suppliers, decorators, packers, couriers or professional advisers when needed to prepare a quote, fulfil an agreed order, protect our rights or comply with law.

Some technology or service providers may process or store information outside Australia. Their locations can depend on changing provider infrastructure, so it is not always practicable to identify every country. We consider privacy and security when selecting and using providers.

Browser storage, cookies and analytics

Necessary storage. The site works without optional analytics. It uses first-party browser storage only where needed for features you request: bnb-enquiry-products-v1 keeps your product shortlist until you submit or clear it; bnb-general-enquiry-draft-v1 and bnb-custom-bundle-draft-v1 keep unfinished form fields until submission or browser-data clearing; the bnb-form-drafts browser database temporarily keeps a selected logo until submission, removal or browser-data clearing; and bnb_privacy_choice_v1 remembers your analytics choice for up to 180 days. These items stay in your browser until the stated event and are not advertising cookies.

Optional analytics. Only after you choose “Accept analytics”, we load PostHog as our analytics provider and processor in its EU data region. We send limited events for visits, public page paths and titles, referring domain, and anonymous product views or clicks (product ID, name, category, URL and action), together with typical browser family/version, device type and operating system. Consent also enables click heatmaps and privacy-masked session replay so we can understand how public pages are used. PostHog uses an anonymous identifier held only in page memory; we do not call identify, create a lasting analytics cookie or use fingerprinting. PostHog may process the connection IP to deliver the service, security controls and approximate location; our project is configured not to retain the raw IP as an event property. EU-region information may be accessed from Australia and processed by PostHog and its service providers across borders under their applicable safeguards.

We retain these limited analytics events for up to 12 months. We do not sell them or use them for advertising, cross-site tracking or customer profiles. All text and element attributes are masked for replay; every form and input is masked, and names, email addresses, phone numbers, addresses, messages, passwords, payment data and query-string values are not recorded. Console and network-payload capture, surveys and product impressions remain disabled. Private, administrator, account, customer, login, portal, checkout and payment routes are excluded.

You can choose “Use necessary only” and continue using the whole site. Use the persistent Privacy choices control in the footer to change or withdraw your choice. Withdrawal immediately stops future analytics capture and clears BrandnBundle analytics storage where feasible. You can also contact info@brandnbundle.com.au about analytics or privacy.

Product images may be delivered by approved supplier image services, which receive standard technical request information such as your IP address and browser details. The site does not currently offer customer accounts or online payment checkout.

Storage, security and retention

Information may be held in our website, hosting, email and business systems. We use reasonable technical and organisational safeguards designed to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. No internet transmission or storage system can be guaranteed completely secure.

We keep personal information only for as long as reasonably needed for the purposes described above, including quote and customer service follow-up, business records, dispute handling and legal or accounting requirements. We then delete, de-identify or securely dispose of it where reasonably practicable.

Access, correction and complaints

You may ask to access or correct personal information we hold about you, or make a privacy complaint, by emailing info@brandnbundle.com.au. Please provide enough detail for us to identify the relevant information or concern. We may need to verify your identity before acting on a request.

We will consider and respond to privacy requests or complaints within a reasonable time. If you are not satisfied with our response and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy when our information-handling practices or legal obligations change. The current version and its update date will remain available on this page.