Privacy policy

Last updated: 2 November 2026

Swiftlok Pty Ltd (ABN 17 702 540 387) (“Swiftlok”, “we”, “us”) runs swiftlok.com.au. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for customers in New Zealand, the Privacy Act 2020 (NZ). This policy explains what we collect, why, who we share it with, and your choices.

What we collect

  • Contact and order details: your name, email address, phone number, delivery and billing addresses, order history and any messages you send us.
  • Trade account details: your business name, ABN or NZBN, and contact details.
  • Payment details: confirmation of your payment, and your card type and last four digits. We never see or store your full card number. For bank transfers, we see the payer’s name and payment reference.
  • Website and device information: your IP address, approximate location, device and browser type, the pages you view, items you add to your cart and how you found our website.
  • Email activity: whether you are subscribed to our emails, and whether you open them or click their links.

We do not collect sensitive information, such as health information.

How we collect it

We collect most information directly from you when you place an order, create an account, contact us or sign up to our emails. Website and device information is collected automatically through cookies, pixels and similar technologies (see “Cookies, analytics and advertising” below).

We also receive some information from others: our payment providers confirm your payment and may flag suspected fraud, our delivery partners send us tracking updates, and advertising platforms such as Google and Meta report on how our ads perform.

You can browse our website and ask general questions without telling us who you are, but we need your contact and delivery details to process an order.

Why we use it

We use your information to:

  • process, deliver and support your orders, including returns and warranty claims
  • respond to your questions
  • prevent fraud and keep our website secure
  • keep business, tax and accounting records
  • understand how our website is used and improve it
  • send you marketing emails, if you have agreed
  • measure our advertising and show Swiftlok ads to people who have visited our website or bought from us.

Who we share it with

We share only what each service provider needs to do its job for us:

  • Shopify: our online store, checkout and Shop Pay. Shopify also explains its own handling of your information at shopify.com/legal/privacy.
  • Shopify Payments, PayPal and Afterpay: payments. PayPal and Afterpay also handle your information under their own privacy policies.
  • Australia Post: shipping and delivery.
  • Klaviyo: order and marketing emails.
  • Google (Google Analytics and Google Ads) and Meta (Facebook and Instagram): website analytics and advertising.
  • Anthropic (Claude): AI assistance (see “Our use of AI and automated tools” below).
  • Xero and our accountant: accounting and tax.
  • Our IT providers, such as our email and cloud file storage services.

We may also disclose information where the law requires or allows it, for example to a government agency. We do not sell your personal information.

Information sent overseas

Some of these providers store or process information outside Australia, mainly in the United States, and also in Canada, New Zealand, Singapore and the European Union (mainly Ireland). We take reasonable steps to make sure they protect it.

Cookies, analytics and advertising

Cookies are small files stored by your browser. We and our partners use cookies, pixels and similar technologies to:

  • keep the store working, such as your cart and checkout (these cookies are set by Shopify)
  • understand how people use our website, using Google Analytics
  • measure our ads and show Swiftlok ads to people who have visited our website, using Google Ads and the Meta pixel.

To measure our ads and reach the right audiences, we may also share event information (such as pages viewed and purchases) and hashed (scrambled) contact details, such as your email address or phone number, with Google and Meta, including through Meta’s Conversions API. They use this to match activity to their own users; they do not tell us who you are on their platforms.

Third parties, including Google and Meta, may use cookies and similar technologies to collect information from our website and elsewhere on the internet, and use it to measure and target ads.

You can control this:

Our use of AI and automated tools

We use AI tools, including Claude by Anthropic, to help run our business, for example to draft replies to customer enquiries, look up and summarise orders, and analyse sales and marketing. These tools may process your name, contact details, order history and messages on our behalf. A member of our team stays responsible for, and reviews, any reply or decision about you that an AI tool helps prepare.

Some decisions about you are made, or assisted, by automated systems:

  • Fraud checks: Shopify’s fraud analysis automatically assesses the risk of each order using details such as your IP address, billing and delivery addresses, payment details and order history. If an order is flagged as high risk, we may contact you, hold the order or cancel it. A member of our team reviews the order before we cancel it.
  • Payment approval: Shopify Payments, PayPal and Afterpay use automated checks that can decline a payment without human involvement, and Afterpay decides automatically whether to approve you for its service. These decisions are made under their own terms and privacy policies.
  • Marketing: Klaviyo, Google and Meta automatically choose which emails and ads to show you, including any offers, based on your activity on our website and in our emails.

Marketing emails

We send marketing emails only if you have agreed to receive them, for example by ticking the box at checkout or signing up on our website. Every email includes an unsubscribe link, and we will stop within 5 business days of your request. You can also ask us to stop by emailing support@swiftlok.com.au. We will still send you emails about your orders.

Storage and security

Your information is held on the secure systems of the providers listed above. Card payments are processed by our payment providers to the Payment Card Industry Data Security Standard (PCI DSS). We limit access to people who need it to do their job.

We keep personal information only for as long as we need it. Order and accounting records are kept for 7 years to meet our legal obligations, after which we delete or de-identify them.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (or, for New Zealand customers, the Office of the Privacy Commissioner), as the law requires.

Access, correction and complaints

To access or correct the information we hold about you, or to ask us to delete information we no longer need, email support@swiftlok.com.au. We may need to confirm your identity first. We will respond within 30 days.

To make a privacy complaint, email us with the details. We will look into it and reply in writing within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or, in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).

Changes to this policy

We may update this policy, for example when we start using a new service. The current version is always published on this page with the date it was last updated.

Contact us

support@swiftlok.com.au

Swiftlok Pty Ltd, MBC-1, Unit 1/15 Distribution Ave, Molendinar QLD 4214