1. Who this policy applies to

​

This policy applies to anyone who visits our website (dropbearmtb.com.au), joins our waitlist, places an order, contacts us directly, or interacts with us through our social media channels.
 

2. What information we collect- Information you give us

​

When you join the waitlist, place an order, or contact us, we may collect:

• your name

• email address

• postcode or delivery address

• any messages or enquiries you send us

• whether you’ve indicated interest in testing, purchasing, or distribution opportunities Information collected automatically

• When you visit our website, certain data is collected automatically through cookies and

• analytics tools, including:

• IP address and general location (country/region level)

• browser type and device information

• pages visited and time spent on the site

• referral source (how you found us)

 

We use Google Analytics for this purpose. This data is aggregated and used to understand

how people use our site so we can improve it. We do not use retargeting cookies or serve

ads based on your browsing behaviour.
 

3. How we use your information

​

We use your personal information to:

• fulfil orders and manage your customer account

• send you order confirmations, shipping updates, and warranty-related

• communications

• send marketing emails about Dropbear MTB products and updates (only with your

• consent, and only if you have opted in)

• improve our website and understand how it is being used

• respond to your enquiries

• comply with our legal obligations

 

We will not use your information for any purpose that is incompatible with the reason it was

collected.

​

4. Email marketing

​

If you join our waitlist or opt in to marketing communications, we will send you emails about

our products, launches, and updates. We use an email marketing platform (currently Klaviyo) to manage these communications.

​

You can unsubscribe at any time using the link at the bottom of any email we send you. We

do not share your email address with third parties for their own marketing purposes.

​

5. Who we share your information with

​

We only share your personal information with third parties where necessary to operate our

business. This includes:

​

• Shopify – our e-commerce platform, which processes orders and stores customer data on servers located in the United States. Shopify is certified to recognised international security standards.

• Google Analytics – for website analytics. Data is processed in accordance with Google’s privacy policy.

• Klaviyo – for email marketing. These platforms process data in the United States.

• Australia Post or third-party couriers – for order fulfilment and delivery (name and

• delivery address only).

• Our accountant or legal advisers – where required to comply with legal or financial obligations.

• We do not sell your personal information. We do not share it with advertisers or data brokers.

 

6. Overseas disclosure

​

 Some of the third-party services we use – including Shopify and Klaviyo – store and process data in the United States. By using our website or services, you consent to your personal information being transferred to and processed in the United States.

 These providers are required to handle your information in accordance with applicable

privacy laws and are subject to binding contractual obligations to protect your data.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy

Principles.

​

7. How we store and protect your information
 

Customer data associated with orders is stored and managed through Shopify, which uses

industry-standard encryption and security measures. Waitlist and marketing data is stored

within our email marketing platform, Klaviyo and our own servers, hosted locally.

We take reasonable precautions to protect personal information from misuse, loss,

unauthorised access, modification, or disclosure. We will notify you as soon as practicable if

we become aware of a data breach that is likely to result in serious harm.

We retain your information for as long as it is needed for the purpose for which it was

collected, or as required by law. When it is no longer needed, we will take reasonable steps

to destroy or de-identify it.

 

8. Cookies

 

Our website uses cookies to support basic functionality (such as keeping items in your cart)

and to collect anonymous analytics data via Google Analytics. We do not use cookies for

advertising or retargeting purposes. You can disable cookies through your browser settings, though this may affect the functionality of some parts of the site.

​

9. Your rights
 

You have the right to:
 

• request access to the personal information we hold about you

• ask us to correct information that is inaccurate, out of date, or incomplete

• ask us to delete your personal information (subject to any legal obligations we have

• to retain it)

• withdraw consent to marketing communications at any time

To exercise any of these rights, please email us at hello@dropbearmtb.com.au. We will

respond within a reasonable timeframe and at no charge to you.

​

10. A note on the Privacy Act

​

The Australian Privacy Act 1988 and the Australian Privacy Principles (APPs) apply to

organisations with an annual turnover of more than $3 million, as well as to certain smaller

organisations that handle health information or trade in personal information. Depending on our turnover and activities at the time you interact with us, we may or may not be subject to mandatory compliance.

 

Regardless of our legal obligations at any given time, we are committed to handling your

personal information in a manner consistent with the Australian Privacy Principles. We

believe that’s simply the right way to operate.

 

11. Children’s privacy
 

Our website and products are not directed at children under the age of 13. We do not

knowingly collect personal information from children. If you believe we have inadvertently

collected information from a child, please contact us and we will take steps to delete it.

​

12. Links to other websites
 

Our website may contain links to third-party websites (such as social media platforms or

review sites). This privacy policy applies only to our own website. We are not responsible for

the privacy practices of other sites and encourage you to read their privacy policies.

 

13. Changes to this policy
 

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this document. If we make material changes, we will notify you by email or by a notice on our website. Your continued use of our website after any changes constitutes your acceptance of the

updated policy.

​

14. Contact us
 

If you have any questions about this policy, or want to make a privacy-related request,

please get in touch:
 

Sorensen Engineering Pty Ltd

Trading as Dropbear MTB

Brookvale, NSW, Australia

Email: hello@dropbearmtb.com.au