Skip to content

Privacy policy

This policy explains what YaMug collects when you use this site, why we collect it, and what we do with it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

When you shop

To take an order we collect your email address, the recipient's name, and the delivery address. We keep a record of what you bought and what you paid so we can fulfil the order, handle returns, and meet our tax and record-keeping obligations.

Payment details

We never see or store your card number. Card details are entered directly into our payment provider's hosted fields and go straight to them. We receive only a payment reference, the amount, and whether it succeeded.

Your cart

Adding a mug to your cart sets a cookie holding a random identifier so we can find your cart again on your next visit. It contains no personal information and expires after 30 days. This cookie is essential; without it the cart cannot work.

If you create an account

We store your email address and a cryptographic hash of your password. We never store the password itself.

Email updates and cart reminders

We send marketing email only after you actively opt in and confirm the address from our confirmation email. We store when, where and under which consent wording you subscribed. Every marketing message includes an easy unsubscribe link and supports compatible mail apps’ one-click unsubscribe control. We send an abandoned-cart reminder only to a confirmed marketing subscriber; entering an email at checkout by itself is not marketing consent.

Campaign emails can contain first-party, signed links and a tiny image so we can measure deliveries, approximate opens, link clicks, unique engagement and campaign performance. Image blocking, privacy protection and provider security scanners can make open figures approximate. We store the event time, destination link and a bounded mail-client identifier, but do not store a raw internet address for email engagement. This data is used only for YaMug campaign reporting and improvement.

Customer support email

Email sent to our support mailbox is imported into our restricted support portal so authorised staff can answer it as one conversation. We retain the sender, recipients, subject, message text, standard technical email headers, permitted attachments, delivery state and reply history. If a valid YaMug order number appears in the message or its YaMug header, we link the conversation to that order so support staff can see the relevant payment, fulfilment and shipping status without searching in another system. Technical mail headers can contain routing information added by mail servers. Remote images in imported mail are not loaded by the support portal.

How the site is used

We record page visits, products viewed, cart and checkout activity, visit duration, and an approximate city-level location derived from your internet address. The address itself is not stored. The approximate map position is deliberately offset and does not represent a home or delivery address.

We use a random first-party visitor identifier to recognise repeat visits. Visitors are initially pseudonymous. If you sign in or provide an email during checkout, authorised administrators may associate the visit with your customer and purchase history for customer service, fraud investigation, and understanding how the store is used. Automated traffic is classified as a bot or crawler, and major search crawlers may be verified using internet name lookups.

Who we share it with

We share only what is necessary to get your mug made and delivered:

  • Our print-on-demand partner receives the delivery address and the items to print.

  • Our payment provider receives your payment details directly from your browser.

  • Carriers receive the delivery address in order to deliver the parcel.

  • Our email provider receives the recipient address and message needed to deliver account, order, support and consented marketing email.

We do not sell your information, and we do not share it for anyone else's advertising.

Where it's stored

Order and account data is stored on servers in Australia. Some of our providers may process data overseas in the course of delivering their service.

How long we keep it

Order records are kept for seven years, which is the retention period Australian tax law requires. Unconverted cart data is deleted 30 days after its last use. Detailed visitor, location, presence, analytics, and email-engagement records are kept for 12 months. Completed outbox records are kept for 90 days, resolved operational alerts for 12 months, and closed support conversations not linked to an order for two years. Subscription consent and suppression records are retained while needed to honour your email preference and demonstrate consent.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email us and we'll respond within 30 days.

Cookies

We use essential cookies to keep the cart, checkout and security controls working. In countries where consent is required, we ask before using optional first-party cookies for attribution, remembering what is new, or visitor analytics. You can choose only essential cookies or allow the optional cookies from the banner. We do not use advertising or third-party tracking cookies.

Security

The site is served over HTTPS. Passwords are hashed, guest order-tracking links are single-purpose and expire after 30 days, and access to order data inside the business is limited to the people who need it. Detailed live and historical visitor intelligence is restricted to administrators.

Complaints and contact

If you have a question or a complaint about how we've handled your information, contact us and we'll work through it with you. If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we change this policy we'll update the date at the top. Material changes affecting existing orders will be emailed to the address on the order.