Privacy

Who we are

Zen Like a Panda is a small Australian business run by one person. "We" and "us" mean Zen Like A Panda Pty Ltd. You can reach us any time at [email protected], or from our contact page.

When you buy something

Checkout runs on Stripe, not on this site. You type your name, email, delivery address and card details into Stripe's own secure page, and Stripe passes us back what we need to send your order: your name, email, delivery address and what you bought.

Your card number never touches this website and we never see it or store it. Stripe handles that end of it, and Stripe's own privacy policy covers what they do with it.

We use your details to pack and post your order, to email you about that order, and to keep the sales records the tax office requires us to keep.

When you join the mailing list

We collect your email address, and only your email address. It's held by EmailOctopus, who run the list for us.

• It's double opt-in: you'll get a confirmation email, and you're not on the list until you click the link in it.
• Every email we send has a one-click unsubscribe link.
• Unsubscribing removes you from the list. You can also just email us and we'll do it for you.
• Buying something doesn't sign you up for anything — the two are entirely separate.

How we count visits

This site uses Cloudflare Web Analytics, a cookieless tool that counts visits in aggregate. It does not use cookies, does not identify individual visitors, and does not follow you across other sites.

What we don't do

• We don't sell your details. Not to anyone, not ever.
• We don't share them either, except with the people who make the order happen: Stripe for payment, EmailOctopus for the mailing list, and Australia Post, who need an address to deliver to.
• This site sets no cookies, and there are no advertising trackers on it. Nothing follows you around after you leave.
• We don't email you marketing you didn't ask for.

Where your details are held

Stripe and EmailOctopus are both overseas companies and store data on servers outside Australia. That's the trade-off of using them, and it's a normal one for a business this size, but you should know before you hand anything over.

How long we keep it

Order records are kept for as long as Australian tax and business record rules require — currently five years. Mailing list addresses are kept until you unsubscribe.

Seeing, fixing or deleting your details

Email [email protected] and ask. We'll tell you what we hold, correct anything wrong, and delete what we're not legally required to keep. There's no charge and no form to fill in.

As a small business we're not automatically covered by the Privacy Act 1988, but we handle your details the way the Australian Privacy Principles say we should. If you think we've got it wrong, tell us first — and if we can't sort it out between us, the Office of the Australian Information Commissioner takes complaints at oaic.gov.au.

Children

The cards are for children; this shop isn't. We sell to adults, and we don't knowingly collect anything from a child. If you think we've ended up with a child's details, email us and we'll delete them.

If this policy changes

We'll update this page and change the date at the bottom of it. If a change matters to people already on the mailing list, we'll say so in an email rather than quietly editing the page.