Isolate Audio respects your privacy, wherever you are in the world. This policy explains how we collect, use, and protect your personal information when you visit our website or purchase our products.
We are a boutique analog audio electronics brand based in Perth, Western Australia. We comply with the Privacy Act 1988 (Cth), the GDPR (EU/UK), CCPA/CPRA (California), and other applicable data protection laws.
1. Information We Collect
We collect information that is necessary to provide our products and services:
- Identity & Contact: Name, email, shipping address, phone number β to process orders and communicate updates.
- Transaction Data: Order history and payment method (processed securely by PayPal or Stripe) β to fulfil purchases and comply with tax law.
- Technical Data: IP address, browser type, pages visited β to improve site performance and security.
- Communications: Messages sent via our contact form β to provide support and respond to inquiries.
We do not collect sensitive data (race, religion, health, biometrics) unless explicitly required for a custom order and with your explicit consent.
2. Lawful Basis for Processing (GDPR)
If you are in the EU or UK, we process your data under these lawful bases:
- Contract: To fulfil your order and provide support (e.g., name, address, payment).
- Legitimate Interest: To improve our website, prevent fraud, and send essential service updates.
- Consent: For optional marketing emails or non-essential cookies (you can withdraw anytime).
- Legal Obligation: To comply with tax, consumer, or customs laws.
3. How We Use Your Information
We use your data to:
- Process and ship your orders worldwide via Australia Post or trusted carriers.
- Communicate order confirmations, shipping updates, and support responses.
- Improve our website, products, and customer experience through anonymous analytics.
- Comply with legal obligations (tax records, consumer law, customs declarations).
- Protect against fraud, unauthorised access, and security threats.
We do not sell, rent, or trade your personal information to third parties.
4. Cookies & Tracking Technologies
Our website uses cookies to enhance your experience. You can manage preferences via your browser settings.
- Essential cookies: Keep your cart active, maintain login sessions, secure checkout. Cannot be disabled without breaking site functionality.
- Analytics cookies: Google Analytics provides anonymous traffic insights. You can opt out via browser settings or the Google Analytics opt-out.
- Preference cookies: Remember your cookie consent choice. Can be cleared by deleting browser storage.
5. Third-Party Services & International Transfers
We engage trusted partners to support our operations. Data may be transferred outside your region, but we ensure appropriate safeguards:
- PayPal / Stripe: Payment processing. Both are PCI-DSS certified and GDPR-compliant. PayPal Privacy | Stripe Privacy
- Australia Post: Shipping labels, tracking, customs. Compliant with the Privacy Act. AusPost Privacy
- Google Analytics: Anonymous traffic analysis. Uses IP anonymisation and data retention limits. Google Privacy
- Hosting & Security: Server infrastructure with SSL encryption and access controls.
For transfers from the EU or UK, we rely on the European Commission's Standard Contractual Clauses or adequacy decisions where applicable.
6. Your Rights
Depending on your location, you have the following rights. To exercise any right, contact us via our contact form.
Australia (Privacy Act):
- Access and correct your personal information.
- Request deletion (subject to legal retention requirements).
- Lodge a complaint with the Office of the Australian Information Commissioner.
EU / UK (GDPR):
- Right of access, rectification, erasure ("right to be forgotten").
- Right to restrict processing or object to processing.
- Right to data portability (receive your data in a structured format).
- Right to withdraw consent at any time.
- Right to lodge a complaint with your local supervisory authority.
California (CCPA/CPRA):
- Right to know what personal information we collect, use, or share.
- Right to delete your personal information (with exceptions).
- Right to correct inaccurate information.
- Right to opt-out of "sale" or "sharing": We do not sell or share personal information as defined by CCPA. No action needed.
- Right to non-discrimination for exercising your rights.
Canada (PIPEDA):
- Access and correct your personal information.
- Withdraw consent for non-essential uses.
- File a complaint with the Office of the Privacy Commissioner of Canada.
7. Data Retention
We retain personal information only as long as necessary:
- Order records: 7 years (Australian tax law requirement).
- Account Until you request deletion or account inactivity exceeds 2 years.
- Analytics Aggregated and anonymised; individual records deleted after 14 months (GDPR-aligned).
- Marketing Until you unsubscribe or request deletion.
8. Children's Privacy
Our products are designed for musicians and audio professionals. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe a child has provided us with data, please contact us via our contact form and we will remove it promptly.
9. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects. Order processing and fraud checks involve human review where required.
10. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates the most recent revision. For material changes, we will provide notice via email or a prominent website notice. Continued use of our site after changes constitutes acceptance.
11. Contact Us
If you have questions about this policy, wish to exercise your rights, or need assistance, please reach out via our contact form:
We respond to all privacy inquiries within 5 business days.
This policy is written in plain English and reviewed annually. It is intended to be globally accessible while complying with applicable laws. For authoritative legal text, refer to the Privacy Act 1988 (Cth), GDPR, CCPA, or your local data protection authority.