Privacy policy

This policy explains what personal information HIPERSPEC (ABN 53 687 022 591) collects when you visit hiperspec.com, place an order, leave a review or contact us, and what we do with it. We handle personal information in line with the Australian Privacy Principles, and with the GDPR and UK GDPR where they apply to you.

What we collect

• Orders. Your name, email address, phone number, billing and delivery addresses, and what you bought. Payment details are collected by Shopify and its payment providers at checkout. We never see or store your full card number.
• Reviews. The name you give, your email address, your rating and comment, a photo if you attach one, and your order number if you supply one. Your name, rating, comment and photo are published. Your email address and order number are not. Before a photo is published we remove the details your camera stores inside it, such as where it was taken.
• Messages. Your name, email address, order number if you give one, and whatever you write to us through the contact form or by email.
• Browsing. Your IP address, your approximate location (down to your city) worked out from it, your device, its model and your browser, the pages you view, the products you look at and add to your cart, and your chosen country and currency. Analytics and advertising data is collected only if you consent. See our Cookie policy.
• Advertising matching. If you accept advertising cookies, the Meta Pixel and the Google tag look for details you enter in our forms, such as your name, email address and phone number, hash them, and send the hashed values to Meta and Google to match your visit to a Meta or Google account.
• Google signals. If you accept advertising cookies and are signed in to a Google account that allows ad personalisation, Google links your visit to that account. This lets us see visits across your devices as one, in reports that never identify you, and show our ads to people who have visited before.

How we use it

We use your information to take payment and deliver your order, to send order and shipping updates, to answer your questions, to publish your review and check whether it comes from a verified buyer, to prevent fraud and abuse of our forms, to meet our legal and tax obligations, and, with your consent, to understand how the site is used, measure our advertising and show our ads to people who have visited before.

We do not sell your personal information, and we send marketing emails only if you have asked to receive them. You can unsubscribe at any time from the link in any marketing email.

Who processes your data

We use Shopify to run the shop and process orders, and Supabase to store product reviews. Shopify’s own privacy policy governs what it does with data collected during checkout; this policy governs everything else.

We also share information with the following providers, only as far as each needs it to do its job:

• Vercel, which hosts this website.
• Resend, which delivers messages sent through the contact form.
• Couriers and postal services, which receive your name, address and contact details to deliver your order.
• Afterpay and Klarna, which show their instalment offers beside our prices in the countries where they are available. Their scripts load from their own servers, so they receive your IP address and browser details. If you choose to pay with one of them at checkout, its own privacy policy covers the information you give it.
• Google and Meta, which provide analytics and advertising measurement, only if you have consented to those cookies. With advertising consent, both also receive the hashed form details described above and use them under their own privacy policies, Meta to match visits to Facebook and Instagram accounts and Google to match them to Google accounts, including through Google signals. You can see and delete what Google holds about your activity at myactivity.google.com, and turn off ad personalisation at myadcenter.google.com.

We may also disclose information where the law requires it.

Storage outside your country

We are based in Australia, and several of the providers above store data in other countries, including the United States. When your information is transferred overseas we take reasonable steps to make sure it is handled consistently with this policy and the law that applies to you.

How long we keep it

Order records are kept for seven years, as Australian tax law requires. Reviews are kept for as long as they are published. Messages are kept for up to two years after our last reply. Analytics data is kept for up to 14 months.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct or delete it, withdraw consent you have given, or object to how we use it. Email contact@hiperspec.com and we will respond within 30 days. We may need to keep some information where the law requires it, such as order records.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the data protection authority in your own country.

Children

This site is not directed at children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date it was last updated at the top.