Privacy Policy 

Who we are

Our website address is: www.artisanalandco.com

What personal data do we collect, and why do we collect it

Comments

This website includes commenting functionality on some pages which enables you to post a comment. This website collects personal information when you post a comment, including:

• Your name (which will be displayed as part of your posted comment)

• Your email address (optional, to let you know if someone replies to your comment)

• Your website URL (optional)

This website includes “likes” functionality on some blog posts which enables you to “like” a post. This website collects personal information when you like a post to try to prevent the same person from liking the same post during the same visit, including:

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors can download and extract any location data from images on the website.

Contact forms

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so that they can provide website services to us and help us manage our relationship with you. We also provide this information to Google for storage and with Zapier for data porting.

Cookies

If you leave a comment on our site, you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will set up several cookies to save your login information and screen display choices. Login cookies last two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. The login cookies will be removed if you log out of your account.

An additional cookie will be saved in your browser if you edit or publish an article. This cookie includes no personal data and indicates the post ID of the article you edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use Google Analytics to better understand our website visitor's behaviour while on our site. You can view Google Analytics' privacy policy for more details. 

Who do we share your data with

The information we collect is used to improve the content of this site and the quality of our service and is not shared with or sold to other organisations for commercial purposes. That being said, your information could be shared under the following circumstances:

We use third parties to facilitate our business, including, but not limited to, sending emails and processing payments. In connection with these offerings and business operations, these third parties may access your personal information for use in connection with those business activities.

We may buy or sell assets or business offerings as we develop our business. Customer, email, and visitor information are generally one of the transferred business assets in these types of transactions.

We may also transfer such information during corporate divestitures, mergers, or any dissolution.

If it becomes necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

Notice of New Services and Changes

Occasionally, we may also use the information we collect to notify you about significant changes to this website, new services, and special offers we think you will find valuable. As our customer, you will be allowed to notify us of your desire not to receive these offers by clicking the unsubscribe link in each email.

Online Store

When you buy something on this website, we collect personal information from you to fulfil the order. We may collect information like your:

• Billing and shipping address,

• Details relating to your purchase (for example, your shirt size)

• Email address

• Name

• Phone number

We provide this information to Squarespace, our online store hosting provider, so that they can provide website services to us.  We also provide this information to Australia Post so we can ship your order to you. You can read their privacy policy here. 

Our payment processor is Squarespace, which will collect payment information from you.

Squarespace Payments is a fully integrated, native payment solution provided to us by our online store service provider Squarespace. Squarespace Payments makes use of the following third-party service providers, which will also receive your personal information and process it in accordance with their privacy policies:

• Stripe - payment processing services. You can read Stripe’s privacy policy.

• Sift - fraud monitoring and detection services. You can read Sift’s privacy policy.

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

• Order information like what was purchased, when it was purchased and where it should be sent, and

• Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfil orders, process refunds and support you.

How Do We Secure Information Transmissions?

Email is not recognised as a secure medium of communication. For this reason, we request that you do not send private information to us by email. Some of the information you may enter on this site may be transmitted securely via Secure Sockets Layer SSL, 128 bit encryption services. Pages utilising this technology will have URLs that start with HTTPS instead of HTTP.

Certain disclosures

We may disclose your personal information if required to do so by law or subpoena or if we believe that such action is necessary to:

(a) conform to the law or comply with legal process served on affiliated parties or us; 

(b) protect and defend our rights and property, our site, the users of our site, and/or our affiliated parties; 

(c) act under the circumstances to protect the safety of users of our site, us, or third parties.

How long we retain your data

The comment and its metadata are retained indefinitely if you leave a comment. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users who register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights do you have over your data?

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where do we send your data?

Visitor comments may be checked through an automated spam detection service.

What data breach procedures do we have in place?

We have procedures in place to deal with any potential or real data breaches and will notify you and any applicable regulator/s if a breach occurs if we are legally required to. 

Our contact information

Our full contact details are:

Artisanal & Co.

PO Box 13

Cygnet TAS 7112

Australia

0408 535 356

Contact us via our contact page. 

Our responsibilities as a "controller" under the General Data Protection Regulations (GDPR)

If you are a resident of the European Economic Area ("EEA"), you have certain rights and protections under the GDPR regarding processing your personal information. We are a controller under the GDPR as we collect, use, and store your personal information to enable us to provide you with our goods and/or services and information about them.

We rely on the following lawful means of processing your personal information:

Where it is necessary to fulfil a contract with you, this includes where we collect your personal information to enable us to send you to work we have been contracted for.

Where you have given us valid consent to use your personal information, we will rely on that consent and only use the personal information for the specific purpose for which you have given consent. This includes where we email newsletters or send mobile notifications.

We may also process your personal information to further our legitimate interests where your rights or interests override them. This could include usage statistics, analytics and internal analysis to improve our services.

Your rights

If you are an EEA resident, you have various rights, including the:

• Right to be informed;

• Right of access;

• Right to rectification;Right to object;

• Right to restriction of processing;Right to erasure or to be forgotten;

• Right to data portability; and

• Right not to be subject to automated processing.

If you want to access the personal information we hold about you or ask if the information is correct, please contact us.

In some circumstances, you also have a right to object to or ask that we restrict certain processing activities or delete your personal information. You can contact us if you would like to limit or request the deletion of your personal information or exercise any other rights.

Withdrawing your consent

You can withdraw your consent to our collection or processing of your personal information. You can do so by contacting us or opting out of email newsletters by following the instructions in those emails or by clicking unsubscribe. If you withdraw your consent to using your personal information, you may not have access to our services, and we might not be able to provide you with our services. 

In some circumstances where we have a legal basis to do so, we may continue to process your information after you have withdrawn consent, for example, if it is necessary to comply with an independent legal obligation or if it is necessary to do so to protect our legitimate interest in keeping our services secure.

Our compliance

All personal information stored on our platform is treated as confidential. It is stored securely and is accessed by authorised personnel only. Our collection is limited in relation to what is necessary for the purpose for which the personal information is processed and kept only for so long as is necessary for the purpose for which the personal information was collected. We implement and maintain appropriate technical, security and organisational measures to protect personal information against unauthorised or unlawful processing and use and against accidental loss, destruction, damage, theft, or disclosure. We ensure the encryption and pseudonymisation of personal information, and we have adequate cybersecurity measures in place.

Your acknowledgement

By providing us with your personal information, you consent to us disclosing it to third parties who reside outside the EU. We will ensure that those third parties are GDPR compliant.

Your Consent

By using this site, you consent to our collection and use of your personal information as described in this Privacy Policy. If we change our privacy policies and procedures, we will post those changes on this site to keep you aware of what information we collect, how we use it and under what circumstances we may disclose it.

Updated 30/07/2026