Privacy Policy
Your privacy matters to us. This policy explains how we collect, use, and protect your personal information.
Last updated: April 2026
What Information We Collect
Account Information
- Full name
- Email address
- Phone number
- Company name and ABN (trade accounts)
- Account password (encrypted)
Order Information
- Delivery and billing addresses
- Order history and details
- Payment information (processed securely via Stripe — we do not store card numbers)
- Communication preferences
Website Usage Data
- IP address and browser type
- Pages visited and time spent on site
- Referring website or search terms
- Device type and operating system
How We Use Your Information
We use the personal information we collect for the following purposes:
- Processing and fulfilling your orders, including delivery and pickup
- Sending order confirmations, shipping notifications, and status updates via email
- Sending OTP verification codes for account registration and password resets
- Managing your account, including trade account applications and approvals
- Responding to your enquiries, questions, and support requests
- Improving our website, products, and customer experience
- Complying with our legal and regulatory obligations
- Detecting and preventing fraud or unauthorised access
How We Protect Your Information
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it:
- All data transmitted between your browser and our website is encrypted using SSL/TLS (HTTPS)
- Passwords are securely hashed using industry-standard encryption (bcrypt) — we never store plain-text passwords
- Payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor — we never see or store your full card details
- Access to personal information is restricted to authorised personnel only
- Our servers and databases are protected by firewalls and access controls
- We conduct regular security reviews of our systems and processes
Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Payment processing: Stripe (to process your payments securely)
- Email delivery: Our email service provider (to send order confirmations, OTPs, and notifications)
- Delivery partners: Shipping and freight companies (to deliver your order — name, address, and phone number only)
- Legal requirements: When required by law, regulation, or legal process
- Business transfers: In the event of a merger, acquisition, or sale of business assets
Cookies & Tracking
Our website uses cookies and similar technologies to enhance your browsing experience:
- Essential cookies: Required for the website to function (login sessions, shopping cart)
- Analytics cookies: Help us understand how visitors use our website (page views, traffic sources)
- Preference cookies: Remember your settings and preferences (language, region)
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
Your Rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your personal information (subject to legal obligations)
- Opt out of marketing communications at any time
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached
To exercise any of these rights, please contact us using the details below.
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Account information: For the duration of your account, plus 2 years after account closure
- Order information: 7 years (as required by Australian tax law)
- Website usage data: 12 months
- Marketing preferences: Until you opt out or close your account
Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
Contact Us About Privacy
If you have questions about this Privacy Policy or wish to exercise your rights, contact us:
Email: sales@metfold.com.au
Phone: (03) 9732 0148
Address: 51 McDougall Road, Sunbury, Victoria 3429
You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
