Privacy Policy

Introduction

Metal Marvel Pty. Ltd. (ABN 55 699 061 268) ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. By using our website, you consent to the practices described in this policy.

Information We Collect

We collect information that you provide directly to us, including:

• Contact information (name, email address, phone number, delivery address)
• Order details (sign designs, material choices, sizes, text content)
• Portrait reference photos, composition requests, artwork proofs and your approval or revision instructions
• Payment information (processed securely via Stripe — we do not store full card details)
• Account credentials (if you create an account)
• Communications with us (emails, support enquiries)

We also collect technical information automatically, including your IP address, browser type, device information, and pages visited. This helps us improve our website and services.

How We Use Your Information

We use your personal information to:

• Process and fulfil your orders
• Communicate with you about your orders, shipping, and support enquiries
• Provide customer support and respond to your requests
• Improve our website, products, and services
• Send promotional emails and updates (with your consent)
• Comply with legal obligations, including Australian Consumer Law and tax requirements

Payment Processing

All payments are processed securely through Stripe, a PCI-DSS compliant payment processor. We do not store your full credit card details on our servers. Stripe handles all payment data in accordance with their own privacy and security standards.

Portrait Photos and Artwork

We use your portrait reference photos privately to assess your enquiry, prepare AI-assisted artwork with workshop review, obtain your approval and manufacture your portrait. This may involve an AI image-processing provider used by our workshop. Photos and production artwork are stored privately; customer proofs are watermarked and accessed through private email links. We do not automatically publish your photos or artwork in our gallery or marketing. Abandoned uploads are cleaned up after 24 hours. Contact us to request access or deletion, subject to information we need to retain for your order and other obligations.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure server infrastructure, and access controls.

Third-Party Services

We use third-party services to operate our business, including Stripe (payments), Australia Post (shipping), Supabase (database and authentication), and Meta Platforms (Facebook and Instagram advertising and conversion measurement). These services may process your data in accordance with their own privacy policies. We only share the minimum information necessary for them to perform their functions.

Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors come from. You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

Advertising & Conversion Tracking

We use the Meta Pixel and the Meta Conversions API to measure how well our advertising performs on Facebook and Instagram and to reach people who may be interested in our signs. These tools record actions such as pages viewed, designs added to your cart, checkouts started, and completed purchases, together with your IP address and browser details.

Some of this information is sent to Meta from your browser and some directly from our servers. Where we share information with Meta to match a purchase, identifiers such as your email address are hashed (irreversibly scrambled) before they are transmitted. You can manage ad personalisation in your Facebook and Instagram settings, opt out of interest-based advertising, and control cookies through your browser.

Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal obligations)
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at hello@metalmarvel.com.au.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Last updated: July 2026