Privacy Policy

Last updated: 4 November 2026

1. Introduction

Partspark Pty Ltd (ABN 38 697 223 680) ("Partspark", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

Partspark is based in Brisbane, Queensland, Australia. By using our platform, website, and services ("Platform"), you consent to the practices described in this policy.

2. Information We Collect

We may collect the following types of personal information:

2.1 Information You Provide

  • Account information: name, email address, password, phone number, and business name;
  • Order information: shipping address, billing details, and order history;
  • Design files: CAD files, drawings, and specifications you upload for manufacturing;
  • Communications: messages, support requests, and feedback you send to us;
  • Payment information: processed securely by our third-party payment provider (Stripe). We do not store your full credit card number.

2.2 Information Collected Automatically

This website does not use advertising trackers. The information collected automatically is limited to:

  • Server logs: our hosting provider records the IP address, browser type and pages requested for each visit, which we use for security and troubleshooting;
  • Website analytics: we use Vercel Web Analytics to count visits and see which pages are viewed, which site referred you, and your browser, operating system, device type and country. It does not use cookies and does not identify you personally or follow you across other websites. On the public production website (partspark.com.au) we also use Google Analytics 4 for the same kind of measurement: pages viewed, where a visit came from, and the device and browser. Google Analytics sets cookies and receives your IP address. It is not loaded on preview or staging copies of this website. Google's handling of that information is described in Google's privacy policy;
  • Map requests: the map on our contact pages is loaded from Mapbox, which receives your IP address when the map is displayed;
  • Videos: tutorial videos are embedded from YouTube in privacy-enhanced mode. YouTube receives your IP address when a video is shown, and may set its own cookies if you play it;
  • Cookies: the cookies described in Section 7.

3. How We Use Your Information

We use your personal information for the following purposes:

  • To create and manage your account;
  • To process, manufacture, and deliver your orders;
  • To communicate with you about orders, support, and updates;
  • To generate instant quotes and pricing;
  • To improve and personalise your experience on the Platform;
  • To detect, prevent, and address fraud or security issues;
  • To comply with legal obligations, including tax and record-keeping requirements under Australian law;
  • To send you marketing communications (with your consent — see Section 6).

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Manufacturing partners: where part of an order is produced by a partner workshop, only the information necessary for production is shared;
  • Payment processor: Stripe processes card payments on our behalf and is bound by its own privacy obligations. Bank transfers are received into our business bank account;
  • Shipping providers: Australia Post and road freight carriers receive your name, delivery address and phone number to deliver your orders;
  • Hosting and account providers: the website and the app run on cloud hosting, and the app's sign-in system and database are provided by a third-party authentication and database service;
  • Contact enquiries: messages sent through the contact forms on this website are emailed to our team via Resend, our email provider, which is based in the United States;
  • Spam check: the contact forms use Google reCAPTCHA to tell people from automated submissions. reCAPTCHA collects device and interaction data, including browser details and how the form is used, and sends that data to Google. Google describes that handling in the Google Privacy Policy and the Google Terms of Service;
  • Website analytics: Google receives usage data from Google Analytics 4 on the public production website, as described in Section 2.2. Vercel Web Analytics is processed by our hosting provider;
  • Legal & regulatory bodies: when required by law, regulation, court order, or governmental request;
  • Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Overseas Disclosure

Some of our service providers (cloud hosting, the account and database service behind the app, Google Analytics, Google reCAPTCHA, Stripe and Resend (US-based)) may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure that the overseas recipient handles your personal information in accordance with the APPs, as required by APP 8.

6. Direct Marketing

We may send you marketing communications about our products, services, and promotions where you have consented or where we are otherwise permitted to do so under the Spam Act 2003 (Cth). Every marketing communication will include a clear and simple way to unsubscribe. You can also opt out at any time by contacting us or updating your account preferences.

7. Cookies & Tracking Technologies

On the public production website, Google Analytics sets analytics cookies (such as _ga) so a return visit can be recognised. We do not use advertising or cross-site tracking cookies. The other cookies we set are:

  • Sign-in cookies: the app sets essential cookies to keep you signed in to your account;
  • Preview access cookie: on password-protected preview versions of this website, a cookie records that you have entered the access password;
  • Display preference: your browser may store a display preference such as light or dark theme.

Vercel Web Analytics does not use cookies. Google Analytics runs only on the public production website and does use cookies, as described above. If you play an embedded YouTube video, YouTube may set its own cookies, which are covered by Google's privacy policy.

You can block or delete cookies through your browser settings. Blocking analytics cookies stops Google Analytics from recognising a return visit. Blocking the sign-in cookie means the app cannot keep you signed in.

8. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure, as required by APP 11. Our security measures include:

  • Encryption of data in transit (TLS/SSL) and at rest;
  • Secure cloud infrastructure with leading providers;
  • Access controls and authentication mechanisms;
  • Regular security reviews and monitoring.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to continuously improving our safeguards.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations (including tax and accounting requirements under Australian law), and resolve disputes. When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it in accordance with APP 11.2.

10. Your Rights

Under the Privacy Act and the APPs, you have the right to:

  • Access: request a copy of the personal information we hold about you (APP 12);
  • Correction: ask us to correct personal information that is inaccurate, out of date, incomplete, or misleading (APP 13);
  • Complaint: lodge a complaint with us if you believe we have breached the APPs. If you are not satisfied with our response, you may escalate the complaint to the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, please contact us using the details in Section 13.

11. Notifiable Data Breaches

In the event of an eligible data breach (as defined in Part IIIC of the Privacy Act 1988), we will comply with the Notifiable Data Breaches (NDB) scheme and notify affected individuals and the OAIC as required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the Platform or by email. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or the handling of your personal information, please contact us:

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) to lodge a complaint.