Privacy Policy

Maro Online collects the personal information you provide at checkout (name, email, address, phone) to fulfil orders, communicate about your purchase, and meet our obligations under Australian Consumer Law. We do not sell your data. Payment card details are handled by Stripe and never touch our servers.

Amazon order information

Where we sell on Amazon, buyer information for our own orders (name, shipping address, contact details and order line items) is imported via Amazon's Selling Partner API solely to fulfil that order.

• Collected only when an Amazon order arrives for us to ship.
• Processed only to pick, pack, generate a shipping label, dispatch, and provide customer support for that order.
• Stored in our access-controlled commerce database on encrypted infrastructure, restricted to the two company directors.
• Used only for the original fulfilment purpose — never for marketing, profiling, or retargeting.
• Shared only with the shipping carrier (Australia Post or Interparcel) to generate the label. Never resold, syndicated, or transferred to third parties.
• Disposed of by deletion or anonymisation within 90 days of order completion, except where retained for Australian tax / record-keeping obligations.

Amazon order data is protected by the same encryption-in-transit (TLS) and at-rest controls, multi-factor authentication on every account that can access it, least-privilege access for the two directors only, and the incident-response procedures described in our internal policies. Any security incident involving Amazon information is reported to Amazon at security@amazon.com within 24 hours of detection.

Your rights

You can request access to, correction of, or deletion of your data at any time by emailing privacy@maro.com.au. Note that records required for Australian tax law may be retained for the legally required period.