About this policy
Hyalite Ltd (ABN 56 106 666 924) collects and holds personal information when you browse our Australian store, contact us or place an order. You can contact our Data Officer at sales@hyalite.com.au, or write to Hyalite, Data Officer, 1/10 John Duncan Court, Varsity Lakes QLD 4227, Australia. This policy explains our handling of your information and your privacy rights. Last updated: 10 October 2026.
What we collect and why
We collect the details you give us, such as your name, email address, phone number, delivery address, any delivery instructions, cart contents, order information and correspondence. We use them to prepare quotes, check availability, process and fulfil orders, arrange collection or delivery, send order updates, handle returns and enquiries, and resolve payment or order problems. Please do not send payment card numbers or unnecessary sensitive information by email.
When you continue from the checkout details form, we save your details and cart to prepare your order, even if you do not go on to pay. Fields marked as optional can be left blank. Providing checkout information is your choice, but we cannot prepare an online order without the required details. You can browse without submitting that form.
We also receive information from service providers, including payment confirmations, transaction references and delivery updates. If someone orders for you, we may receive your contact and delivery details from them. Only give us another person's details if you are entitled to do so, and let them know about this policy. We remain responsible for any notice we must give them under privacy law.
Our website and hosting services also process technical information such as IP addresses, request times, page addresses and browser details to operate the site, investigate faults, prevent misuse and protect orders. This collection can occur automatically when you visit.
Cookies, browser storage and analytics
We use browser storage to remember your cart and cookies to recognise your guest checkout and protect access to your order. These functions are separate from analytics. Clearing or blocking this storage may empty your cart or interrupt access to checkout and order information.
Where enabled, we use Google Analytics 4 to understand public browsing patterns and improve the store. Analytics may receive information about the types of public pages viewed, browser and device details, cookie identifiers and approximate location. This collection is automatic; it is not limited to information you deliberately submit in a form. Google processes analytics information on servers in different countries, which may be outside Australia and New Zealand.
Google receives IP addresses to operate its services and derive approximate location. Its Analytics guidance describes discarding the raw addresses after that processing rather than attaching them to user identifiers. This does not mean that all analytics information is anonymous. Google explains its handling at https://policies.google.com/privacy.
You can block Google Analytics with the Google Analytics opt-out browser add-on in a supported browser, available at https://tools.google.com/dlpage/gaoptout, or with a browser setting or extension that blocks Google Analytics requests. Deleting cookies alone does not stop future analytics collection. Blocking analytics does not require you to block the storage used for your cart and checkout.
Who receives information
Authorised Hyalite staff and service providers receive the information needed for their work. These include website hosting and IT support, freight quoting and delivery providers, and the following named providers. Stripe processes card payments, and Afterpay or Zip payments if you choose them on Stripe's payment page; Stripe handles that payment information overseas. PayPal processes the payment overseas if you choose PayPal where it is offered. Microsoft provides the sign-in our staff use and the email service that sends order confirmations and updates. SAP Business One is our order and accounting system and holds the records of your order, payment references and fulfilment for Hyalite's Australian business. Your contact details, including your email address and phone number, are also written to your order record in SAP Business One, our order and accounting system, so our staff can handle your order. The payment provider you choose collects payment details on its own payment page and has its own privacy policy. We receive the payment status and references needed to manage your order and any refund.
We may also disclose information where required or permitted by law, including to resolve disputes, prevent fraud or obtain professional advice. We do not sell your personal information. Placing an order is not consent to unrelated marketing; any direct marketing must meet the applicable consent and unsubscribe requirements.
Some service providers may hold or process information overseas. Locations depend on the service and its arrangements. Contact our Data Officer for information about the providers and locations relevant to your information. We must take the steps required by applicable privacy law when information is handled overseas; using this site does not waive those protections.
Security and retention
We use safeguards intended to protect information against unauthorised access, loss or misuse. No internet service can promise complete security. Keep access to your email and device secure and contact us promptly if you suspect someone has accessed your order without permission.
We keep personal information for as long as it is needed for the purposes described here or a legal requirement. The period depends on whether it relates to an unpaid quote, a completed order, payment recovery, accounting records, a return, a dispute or a security incident. An expired quote or browser cookie does not itself delete the information saved on our systems. Our retention rule is to delete or de-identify personal information when it is no longer needed and the law permits. You can ask us about the information we hold and request its deletion; we will explain any legal or other lawful reason we need to retain it.
We delete a checkout quote 7 days after it is made. If a checkout is not paid, we delete the details saved for it 30 days after it was started. For a paid order, 730 days after the order we anonymise it: we remove your name, email address, phone number, street address and delivery notes, and the copy of the order emails we sent you, and keep only the order reference, the items, prices, totals and the suburb, state, postcode and country of delivery. We delete payment provider event records after 180 days, payment recovery records 180 days after the recovery is finished, and our internal order-processing messages 90 days after they are sent. We keep a record for longer while a payment, refund, order or delivery it relates to is still being resolved. Deleted information can remain in our database backups for up to 35 days, until those backups expire. Our accounting records in SAP Business One, and the records our payment providers keep, follow their own rules and the periods the law requires.
Access, correction and complaints
You can ask our Data Officer at sales@hyalite.com.au for access to your personal information or to correct it. We may need to verify your identity before providing or changing information. If we cannot grant your request, we will explain why and the review or complaint options available to you. You can also contact us to make a privacy complaint; describe what happened and the outcome you seek so we can investigate and respond.
You may complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au. The OAIC generally asks you to raise your complaint with us first.
Updates and contact
We will update this policy when our practices change and show the revision date above. An update does not remove your privacy rights or authorise a new use that requires your consent. For questions, requests or complaints, contact the Data Officer at sales@hyalite.com.au.