Privacy Policy

Last updated: 22 June 2026

Digital Education Systems (ABN 46 685 560 963), which operates steampunk.au ("we", "us", "our"), respects your privacy. This policy explains what personal information we collect, how we use and protect it, and your rights. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

• Account & seller details: name, email address, phone number, password (stored encrypted), and for sellers, business name, location and address details.
• Content you provide: product listings, shop descriptions, images, festival/event submissions, and messages you send us.
• Payment information: payments are processed by Stripe and PayPal. We don't see or store your full card numbers — those go directly to the payment provider. We do keep records of transactions (such as amounts and references).
• Technical information: basic data your browser sends (such as IP address and browser type) and a session cookie used to keep you logged in.

2. How we collect it

We collect information directly from you when you create an account, apply to sell, list items, submit an event, make a payment or contact us — and automatically through your use of the Site (for example, the login session cookie).

3. Why we use it

• To create and manage your account and seller shop.
• To review applications and operate the Marketplace.
• To process payments and keep transaction records.
• To send you service emails (for example, confirmations and account notices).
• To respond to your enquiries and moderate submissions.
• To maintain the security of the Site and to meet our legal obligations.

4. Cookies

We use a session cookie so you can stay logged in. We don't use third-party advertising or tracking cookies. You can block cookies in your browser, but parts of the Site (like logging in) may not work.

5. When we share information

We don't sell your personal information. We share it only where needed to run the service:

• Payment providers (Stripe, PayPal) to process payments.
• Our hosting and email providers to run the Site and send emails.
• Sellers when you buy from or enquire with them (for example, your contact details so they can fulfil an order).
• Authorities where required by law.

6. Overseas disclosure

Some of our service providers (such as Stripe and PayPal) may store or process information outside Australia. Where that happens, we take reasonable steps to ensure your information is handled consistently with the APPs.

7. Security

We take reasonable steps to protect your information, including encryption of sensitive credentials and secure connections. No online service is completely secure, but we work to keep your data safe and to limit access to it.

8. Access & correction

You can view and update much of your information from your account. To request access to, or correction of, other personal information we hold about you, contact us using the details below.

9. Keeping your information

We keep personal information for as long as needed to provide the service and to meet legal, tax and record-keeping obligations, then take reasonable steps to delete or de-identify it.

10. Complaints

If you have a privacy concern, please contact us first and we'll do our best to resolve it. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes

We may update this policy from time to time. The "last updated" date above shows when it last changed.

12. Contact

For any privacy question or request, reach us through our Contact page or at counsel@steampunk.au.