Privacy Policy

iPress Pty Ltd (“iPress”, “we”, “us”) is committed to protecting personal information. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and where it applies, the EU and UK General Data Protection Regulation.

This policy explains what we collect, why we collect it, who we share it with, and how you can access or correct it. It applies to our website, partner portal, Print API and production services.

• Business contact details: names, email addresses, phone numbers and postal addresses of the people we deal with at our partners and suppliers.
• Account details: company name, ABN or tax number, login email, and records of your acceptance of our agreement.
• Payment details: cards are saved and processed by Stripe. We never see or store full card numbers, only the card brand, last four digits and expiry.
• Order information: the recipient names, delivery addresses, phone numbers and email addresses that partners send with orders, along with the print files, photos and text to be printed.
• Technical information: API request logs, IP addresses, browser type and pages visited, collected when you use our website, portal or API.
• Correspondence: emails, calls and messages you send us.
• Job applications: your name, contact details, qualifications and work history.

Providing information is generally voluntary, but without it we may not be able to open an account or fulfil orders.

When a partner sends us an order, we handle their customers’ personal information on the partner’s behalf. We use it only to produce, pack and deliver that order, to handle reprints and delivery issues, and to keep the records the law requires. We do not market to your customers or use their photos for any other purpose.

Partners are responsible for collecting their customers’ information lawfully and for telling customers that it will be shared with a print and fulfilment provider. We handle it in line with our agreement with the partner and, where agreed, the partner’s own privacy policy.

• to produce and deliver orders and provide tracking;
• to open and manage accounts, issue credentials, bill and collect payment;
• to provide support, troubleshoot integrations and improve our services;
• to protect our systems and detect fraud or misuse;
• to meet our legal, tax and accounting obligations;
• to send service updates and, with your consent, news and offers (you can unsubscribe at any time);
• to assess job applications.

We share personal information only as needed with:

• carriers and couriers (such as Australia Post and DHL), to deliver orders;
• Stripe, to save cards and process payments;
• IT, hosting, email and software providers that support our systems;
• professional advisers, such as accountants, auditors and lawyers;
• a buyer of our business, who would be bound to handle it in line with this policy (you would be told);
• government, regulators or law enforcement where the law requires or allows it.

We do not sell personal information.

Our production and most of our systems are in Australia. Some service providers, such as payment and email providers, may store information overseas, including in the United States. For international orders, the recipient’s details are shared with carriers in the destination country. Where we disclose information overseas, we take reasonable steps to ensure it is protected in a way that is consistent with the Australian Privacy Principles.

We keep print files and order information only for as long as we need them to produce and deliver orders, handle reprints and enquiries, and meet our legal obligations. Financial records are kept for as long as tax law requires.

Partners can ask us to delete files and order data sooner, or agree a retention schedule that matches their own privacy policy. When information is no longer needed, we securely delete or de-identify it. If a partner relationship ends, we return or securely destroy that partner’s customer information unless the law requires us to keep it.

Our website and portal use cookies to keep you signed in, remember your settings and understand how the site is used. You can disable cookies in your browser, but the portal will not work without its sign-in cookie.

We protect personal information with measures including encrypted connections, access controls, restricted database permissions, secured servers and staff confidentiality. No internet transmission is completely secure, and we cannot control the security of other websites you visit.

If we become aware of a data breach that is likely to cause serious harm, we will notify the affected partners and individuals, and the Office of the Australian Information Commissioner, as the law requires.

Account holders can view and update most of their details in the portal. You can also ask our Privacy Officer for access to, or correction of, the personal information we hold about you. We may need to verify your identity first, and there are limited exceptions under the Privacy Act. If you are a partner’s customer, please contact that business first; we will work with them to respond.

If the GDPR applies to you, you have the right to access, correct, delete, restrict or transfer your personal information, to object to its use, and to complain to your local data protection authority. Contact our Privacy Officer to exercise these rights.

Our services are for businesses and are not directed at children. Photos of children may appear in files that partners send for printing; these are handled only to fulfil the order, as described in section 3.

If you have a concern about how we have handled your personal information, please contact our Privacy Officer. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy from time to time. The current version is always on this page.

Privacy Officer, iPress Pty Ltd, 43 Lakeside Avenue, Reservoir VIC 3073, Australia. Email hello@ipressprinting.com.au or call +61 3 9988 7818.