Privacy Policy
Last updated: 8 July 2026
The Cinnamon Estate respects your privacy. This policy explains what we collect, why, and the choices you have. We handle personal information in line with the Australian Privacy Principles.
What we collect
- Order details. When you check out, we collect your name, email, shipping address and phone number so we can fulfil and send your order.
- Payment information. Payments are processed securely by Stripe. We never see or store your full card number; Stripe handles that.
- Preferences you share. If you answer our short welcome questions and choose to leave your name and email for a voucher, we save those answers so we can serve you better. This only happens after you accept our privacy banner.
- Messages. If you use the contact form, we keep your name, email and message so we can reply.
- Website analytics. Only if you accept the privacy banner, we use Google Analytics to understand how the site is used (pages viewed, general location, device). If you decline, no analytics are loaded.
- On your device. We store a small amount of information in your browser (a session id, your preferences and your privacy choice) so the site works and remembers your settings. You can clear this any time with the "Reset my preferences" link in the footer.
How we use it
To take and fulfil your orders, to reply to you, to send your welcome voucher if you asked for it, and to improve the website. We do not sell your personal information to anyone.
Your consent
Analytics and preference collection only run after you accept the privacy banner. If you decline, nothing about your visit leaves your device, and you can still browse and shop normally.
Who we share it with
We use a small number of trusted services to run the shop, and only share what each needs to do its job:
- Stripe processes payments.
- Google provides our analytics and stores preference and contact submissions in a private spreadsheet.
- Cloudflare hosts and delivers the website.
- Etsy, if you choose to buy there, under Etsy's own privacy policy.
Cookies and analytics
We do not use advertising cookies. Google Analytics sets its own cookies only after you accept the banner, to measure site usage. You can decline, or clear cookies in your browser at any time.
Keeping your information
We keep personal information only as long as we need it to run the business and meet our legal obligations, then remove it. We take reasonable steps to protect it from misuse and loss.
Your rights
You can ask us to access, correct or delete the personal information we hold about you. Email [email protected] and we will help.
Children
Our shop is intended for adults. We do not knowingly collect information from children.
Changes
We may update this policy from time to time. The date at the top shows when it last changed.
Contact
Privacy questions or requests: [email protected].