Privacy Policy
This policy explains how Get Ya Rocks Off Crystals handles information in connection with this catalogue, enquiries and direct orders. Last updated 16 October 2026.
Contact and scope
Get Ya Rocks Off Crystals, ABN 36 401 987 418, Central Arcade, Bunbury WA 6230. Privacy enquiries can be made through the form on our About & Visit page, Facebook Messenger or in person at the shop. This policy describes our practices; whether particular Privacy Act obligations apply depends on the law and our circumstances.
Information we collect
The contact form asks for your name, email address, subject and message. If you order directly, we may also need contact, delivery and transaction details. A hashed network identifier is used to limit repeated form submissions. Hosting services may process technical information such as IP addresses, requests and security logs. Please do not submit payment-card details, passwords or sensitive health information through the form.
Why we use it
We use enquiry information to answer you, discuss products, arrange orders or collection, keep relevant records and prevent misuse. You can browse without submitting a form. You may enquire using a nickname, but we need a working reply address to respond and sufficient details to fulfil an order. Sending an enquiry does not subscribe you to marketing.
Storage, service providers and overseas handling
Form messages are saved to our private shop enquiries inbox, hosted using OpenAI Sites and Cloudflare services. Access is restricted to authorised shop administration. When email notifications are enabled, a copy of your enquiry is sent to our private shop mailbox using Resend and our email provider so we can respond. Email, messaging and delivery providers process information needed for their services when used. PayPal processes book payments and delivery details on its own checkout pages; we receive the transaction and delivery information needed to fulfil the purchase. This website does not collect or store payment-card details. PayPal has its own privacy practices. These providers operate internationally, including in the United States, and information may be processed or stored outside Australia. Contact us for current service-provider arrangements. We do not sell enquiry details or publish them on the catalogue.
Maps, external links and cookies
The Google map loads only after you choose to load it; opening directions also connects to Google. Google then handles technical data under its own privacy practices. Facebook Messenger and external book sites have separate privacy policies. We have not added advertising pixels or newsletter tracking to this catalogue. Google Fonts is requested when pages load to display typefaces and may receive technical request information. Hosting, security and owner sign-in services may use necessary cookies or similar technology. Browser settings can affect these technologies and some features may stop working when blocked.
Retention and security
We use access controls and reasonable security measures, but no internet service is risk-free. Contact-form messages older than 12 months are removed when the enquiries service is next used; messages can be deleted sooner by shop administration. Email correspondence and order, complaint or financial records may be kept separately for business needs or legal requirements. Provider backup or security-log retention can differ from the live enquiries inbox.
Your choices and requests
Use the contact form on our About & Visit page, Facebook Messenger or visit the shop to ask what enquiry information we hold, request access, correct it or request deletion. We may verify identity before acting. We respond within a reasonable time and explain if a legal requirement prevents deletion or disclosure. You can contact us through another channel if you do not wish to use the form.
Concerns and complaints
Send privacy concerns through the contact form on our About & Visit page, or raise them in person, with enough detail for us to investigate. We aim to respond within 30 days; if more time is needed, we explain why. If an applicable privacy law gives you an external complaint right, you can contact the relevant regulator, including the Office of the Australian Information Commissioner where it has jurisdiction.
Changes
We update this policy when our practices change and show the update date here. Material new uses of previously collected information will be handled as required by applicable law.