Privacy
How we handle the details you give us. Last updated 25 October 2026.
What we keep
- Your name, mobile number, date of birth and, if you give it, your email.
- Your password, scrambled so nobody can read it, not even us.
- The address and delivery notes on each order, what you ordered and the cash you paid.
- That your photo ID was checked, when, how and by whom. We never keep a copy of your ID or its number.
- The texts and emails we send you.
Why we need it
- To check you're 18 or over. The law doesn't let us sell tobacco to anyone younger.
- To deliver your orders and collect payment.
- To text or email you about your account and your orders. You can turn these off on your Account page.
- To keep the business records the law asks for.
Without your name, mobile number, date of birth and address, we can't deliver to you.
Who sees it
- Our office staff, to look after your account and orders.
- Your driver, who sees your name, address, mobile number, delivery notes and the amount to pay, only for their own deliveries.
- ClickSend, which sends our texts, and SMTP2GO, which sends our emails.
- Google, which suggests addresses as you type and puts each delivery run in driving order. It gets addresses, never names.
We don't sell your details or use them for advertising.
Outside Australia
Google is based in the United States. Our text and email services may also handle messages outside Australia.
Cookies
Cookies keep you logged in and remember this device, so someone else guessing your password can't lock you out. Staff screens also remember the label size. There are no advertising or tracking cookies.
How long we keep it
We keep your account and orders while you're a member. Orders are business records, which tax law says we keep for 5 years. Backup copies of the shop are deleted after 6 months.
Keeping it safe
Only our team can see your details. The office sees members and orders, and each driver sees only their own deliveries. The site only works over a secure connection, and the backups we keep away from our server are encrypted.
Seeing or fixing your details
Your Account page shows the details we hold for you. To get a copy of everything, or to fix something, get in touch. We'll answer within 30 days.
Complaints
If you think we've mishandled your details, tell us and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.