Who this applies to
This policy applies to Business IT Supply, the Australian online store at businessitsupply.com. Contact us through the contact form if you have a privacy question, access request, correction request, or complaint.
The policy is written to align with the Australian Privacy Principles under the Privacy Act 1988. Before public launch, the final legal entity details and ABN should be added here.
Information we collect
Depending on how you use the site, we may collect:
- contact details such as name, business name, email address, phone number and ABN;
- quote and order details such as SKUs, quantities, delivery postcode, project notes and stock-confirmation context;
- renewal-audit details you submit, such as device type, licence or warranty dates, and support-risk notes;
- checkout and payment metadata from Stripe, but never raw card numbers;
- delivery, RMA, warranty and support correspondence;
- site usage data such as search terms, product views, logs, device/browser details and security events.
We do not intentionally collect sensitive information unless you choose to include it in a free-text enquiry. Please avoid sending passwords, network secrets, raw customer datasets, or confidential diagrams unless we specifically ask for them through an agreed secure channel.
How we use information
- prepare, verify and send quotes;
- confirm stock, ETA, freight, compatibility and pricing before payment;
- process hosted Stripe checkout and keep order records;
- respond to enquiries, warranty claims, returns and support requests;
- run renewal-audit and procurement-risk tools you submit;
- detect spam, abuse, fraud, security issues and operational errors;
- improve catalogue search, product data quality and storefront reliability;
- send service messages about quotes, orders, returns or warranties.
We only send marketing where allowed by law and where there is a business reason to keep you informed. You can ask us to stop at any time.
Storage, security and retention
We use Cloudflare-hosted infrastructure, access controls, server-side validation and audit-friendly records for leads and orders. We keep quote, order, support and warranty records for as long as needed for business, tax, warranty, legal and dispute-resolution purposes, then delete or de-identify them where practical.
No internet service can be guaranteed perfectly secure. If we become aware of a data incident that requires notification, we will handle it under applicable Australian law.
Access, correction and complaints
You can ask to access or correct personal information we hold about you. We may need to verify your identity before acting on the request. If you believe we mishandled your information, contact us first so we can investigate and respond.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.