Privacy Policy
Last updated: 20 October 2026
Rhea's Crafts ("we", "us", "our") respects your privacy. This policy explains what personal information we collect through this website, why we collect it, and how we handle it.
What we collect
When you submit an enquiry (general or custom request) through this site, we collect:
- Your first and last name
- Email address
- Phone number
- Any details you provide about a custom request (size, pattern, colour, an optional inspiration photo)
- The message you write
If you place an order, whether as a guest or with an account, we also collect:
- Your delivery address
- Details of what you ordered, and the order total
If you choose to create an account, we additionally collect:
- A password, which is securely hashed and never stored or viewable as plain text
- Any delivery addresses you choose to save for future orders
- Products you mark as favourites
If you subscribe to our newsletter, we collect your email address for that purpose alone.
We do not collect or store any payment card details ourselves — see "Payment processing" below.
Why we collect it
We use this information to respond to your enquiry, quote on custom work, process and fulfil orders you place with us, calculate shipping, and send you order and shipping confirmation emails. If you create an account, we use it to let you log in, view your order and enquiry history, and manage saved addresses and favourites. If you opt in, we use your email to send you occasional newsletter updates. We do not sell, rent, or share your information with third parties for marketing purposes.
Customer accounts
Creating an account is entirely optional — you can browse, enquire, and check out as a guest without one. If you do create an account, you're responsible for keeping your password secure. You can update your account details, saved addresses, and password at any time, and you can deactivate your account yourself from your account settings. A deactivated account can be reactivated by logging back in within 30 days; after that, it is permanently deleted.
Payment processing
Payments are processed entirely by our third-party payment provider, Stripe. When you pay, you're taken to Stripe's own secure checkout page — we never see, handle, or store your card details on our servers. Stripe independently confirms successful payment to us before an order is created in our system. Stripe's handling of your payment information is governed by Stripe's own privacy policy, available at stripe.com/privacy.
How we store it
Enquiry, account, and order details are stored securely in our database and are only accessible to authenticated Rhea's Crafts staff and admin. We keep enquiry and order records so we can refer back to previous conversations and purchases, unless you ask us to delete them.
Cookies and third-party services
This site uses Cloudflare Turnstile to prevent spam and bot submissions on our forms. Turnstile may set a small verification cookie on your device.
At checkout, delivery address suggestions are provided by Photon, a third-party address lookup service — the text you type is sent to Photon to generate suggestions, but no address is stored by Photon unless you select it.
When you pay, you're redirected to Stripe's own hosted checkout page, which may set its own cookies for fraud prevention and to process your payment securely. These are set and controlled by Stripe, not by us.
See our Cookie Policy for full details.
Your rights
You can ask us at any time to:
- See what information we hold about you
- Correct inaccurate information
- Delete your information, unless we're required to keep it (e.g. for an order already in progress)
If you have an account, you can update your own details, delivery addresses, and deactivate your account directly from your account settings, without needing to contact us. If you've subscribed to our newsletter, every email includes an unsubscribe link. For anything else, contact us using the details below.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.
Contact us
Questions about this policy or your data can be sent to rhea@rheasmacrame.com.au.