PRIVACY POLICY

The Sound Of Breaking Glass Pty Ltd (ABN: 99 655 830 934), trading as SHPSHFTR ("SHPSHFTR", "we", "us", "our"), is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and applicable New South Wales legislation. This policy outlines how we collect, use, and protect your personal information.

1. INFORMATION WE COLLECT

We may collect the following types of information:

• Wallet addresses when you connect to our platform
• Transaction data related to purchases and sales on our platform
• Payment information for physical artwork purchases (processed securely via Stripe - we do not store your full card details)
• Shipping information for physical artwork deliveries (name, address, contact details)
• Contact information if you reach out to us directly
• Shipping information (name, address, phone) for physical artwork orders
• Usage data including pages visited, time spent, and interaction patterns
• Device and browser information for security and optimisation purposes

2. HOW WE USE YOUR INFORMATION

We use collected information for the following purposes:

• Processing transactions and managing your account
• Communicating with you about your purchases, events, and platform updates
• Improving our services and user experience
• Detecting and preventing fraud or unauthorised activity
• Complying with legal obligations

3. BLOCKCHAIN DATA

Ethereum is a public blockchain. When you interact with digital artworks, NFTs or Ethereum (ETH) payments through SHPSHFTR, information including wallet addresses and transaction details may be recorded publicly on Ethereum. Once confirmed, these blockchain records are immutable and cannot be altered or deleted by SHPSHFTR.

4. COOKIES AND TRACKING

We use cookies and similar technologies to enhance your experience, analyse usage patterns, and remember your preferences. You can manage cookie preferences through your browser settings, though this may affect some functionality.

5. THIRD-PARTY SERVICES

We use trusted third-party service providers where necessary to operate the SHPSHFTR platform, process transactions and provide our services.

• Stripe: For processing credit and debit card payments, PayTo payments, refunds and related payment services. SHPSHFTR does not store your full card details or online banking credentials.
• Ethereum: For digital artwork ownership, NFT transactions and Ethereum (ETH) payments where enabled. Transactions recorded on Ethereum are publicly visible and immutable.
• Shipping and logistics providers: Where required to deliver physical artworks, we may provide information such as your name, delivery address, phone number and relevant order details to the provider responsible for delivery.
• Connected galleries and sellers: Where an artwork is supplied or fulfilled by a participating gallery or seller, we may provide the information reasonably necessary to process, fulfil and support your order.

We may also use service providers for infrastructure, security, communications, analytics and other operational functions. Personal information is disclosed only where reasonably necessary for those services.

6. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. DATA RETENTION

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Information recorded on Ethereum is part of an immutable public blockchain and cannot be altered or deleted by SHPSHFTR.

8. YOUR RIGHTS

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (where applicable)
• Opt out of marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner

9. INTERNATIONAL TRANSFERS

As we use global technology and service providers, personal information may be transferred to or processed in countries outside Australia. Ethereum is a decentralised public blockchain and information recorded on it is not stored or controlled by SHPSHFTR in a single geographic location. We take reasonable steps to ensure appropriate safeguards are in place where required for the handling of personal information by our service providers.

10. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.

11. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy Officer at privacy@shpshftr.com