隐私政策
Privacy Policy
版本 v1 · 2026-09 · Version v1 · 2026-09
本政策适用范围
本隐私政策适用于 岛上生活 Tas Pantry(ABN 62 686 423 674) 经营的零售商城(Island Pantry)与批发门户(BVS Trading), 以及我们通过短信、邮件和电话与你的往来。我们按澳洲《1988 年隐私法》及其中的澳洲隐私原则(APP)处理个人信息。
Who this policy covers
This policy applies to the retail store (Island Pantry) and the wholesale portal (BVS Trading) operated by 岛上生活 Tas Pantry (ABN 62 686 423 674), and to our dealings with you by SMS, email and phone. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
我们收集什么
- 身份与联系方式:姓名、手机号、邮箱(批发账户)、取货点或送货地址。
- 批发开户信息:商号、ABN、联系人、账期申请材料。
- 交易记录:订单、称重与出账明细、发票与对账单、付款与退款记录。
- 你上传的内容:转账凭证截图、售后照片、给我们的消息。
- 同意记录:你在哪个时间、勾选同意了哪一版条款与政策。
- 技术信息:登录验证码的发送与校验记录、访问 IP(用于防滥用限流)、浏览器语言偏好、购物车等 Cookie。
What we collect
- Identity and contact details: name, mobile number, email (wholesale accounts), pickup point or delivery address.
- Wholesale account details: trading name, ABN, contact person, credit application details.
- Transaction records: orders, weighed quantities and billed amounts, invoices and statements, payments and refunds.
- Content you upload: bank transfer screenshots, aftersales photos, messages you send us.
- Consent records: when you ticked the box and which version of the terms and policy you agreed to.
- Technical data: SMS verification code send and check logs, IP address (used for anti-abuse rate limiting), language preference and cart cookies.
为什么收集
- 完成你的订单:备货、称重出账、通知取货或安排配送、开发票与收款。
- 登录与账户安全:手机验证码只用于确认是你本人在登录。
- 售后与客服:处理退换、差错补偿和你的咨询。
- 批发账期管理:审核开户、记账、发送对账单与到期提醒。
- 合规义务:税务记账(ATO 要求交易记录保存至少 5 年)、反垃圾信息法要求的同意记录。
- 营销:在你同意的前提下发送到货、特价与活动通知(可随时退订,见下文)。
Why we collect it
- To fulfil your orders: picking, weighing and billing, pickup or delivery notices, invoicing and payment.
- Login and account security: the SMS code is only used to confirm it is really you signing in.
- Aftersales and support: handling returns, error compensation and your enquiries.
- Wholesale credit management: account approval, bookkeeping, statements and due-date reminders.
- Legal obligations: tax record keeping (the ATO requires transaction records to be kept for at least 5 years) and consent records required under the Spam Act.
- Marketing: with your consent, arrival, special and event notices (you can opt out at any time, see below).
会不会给第三方
我们不出售你的个人信息。只在完成服务所必需时,把有限的信息交给以下类型的服务商处理:
- 支付:Square。刷卡时卡号由你的浏览器直接交给 Square,不经过我们的服务器;我们只收到付款结果与交易编号。
- 短信与邮件:短信网关(Mobile Message)与邮件服务(Resend),用于验证码、账单、取货与到期通知。
- 托管与存储:网站与数据库托管商(Vercel、Neon),数据库位于澳洲悉尼;上传的图片存于托管商的私有文件存储。
- 人工智能辅助:客服回复可能借助 AI 服务(计划使用 Google Gemini)起草,届时你的消息内容会被发送给该服务商处理,最终回复由我们的员工审核后发出。
- 内部协作:订单与备货提醒可能经 Telegram 推送给我们的员工。
- 法律要求:在法律要求或为保护我们、你或他人的合法权益时,向监管机构或执法部门披露。
Do we share it with third parties
We do not sell your personal information. We share limited information with these kinds of providers only where needed to deliver the service:
- Payments: Square. When you pay by card, your card details go from your browser straight to Square and never touch our servers; we only receive the payment result and a transaction reference.
- SMS and email: an SMS gateway (Mobile Message) and an email service (Resend), for verification codes, bills, pickup and due-date notices.
- Hosting and storage: our web and database hosts (Vercel, Neon). The database is located in Sydney, Australia; uploaded images are kept in the host's private file storage.
- AI assistance: support replies may be drafted with the help of an AI service (Google Gemini is planned). Your message content would be sent to that provider for processing; the final reply is reviewed by our staff before it is sent.
- Internal coordination: order and picking alerts may be pushed to our staff via Telegram.
- Legal requirements: to regulators or law enforcement where the law requires, or to protect our, your or others' legitimate interests.
海外披露
上述部分服务商(如 Vercel、Resend、Google、Telegram)总部在澳洲境外,主要是美国。这意味着你的部分信息可能在境外被存储或处理。 我们只选择提供合同保障与行业标准安全措施的服务商,并把交给他们的信息限制在完成该项服务所必需的范围内。
Overseas disclosure
Some of the providers above (such as Vercel, Resend, Google and Telegram) are based outside Australia, mainly in the United States, so some of your information may be stored or processed overseas. We only use providers that offer contractual protections and industry-standard security, and we limit what we send them to what that service needs.
保存多久与如何保护
- 交易与付款记录:至少保存 5 年,以满足澳洲税务局(ATO)的记账要求。
- 账户信息:在你的账户有效期间保存;账户关闭后,除法律要求保留的记录外,我们会在合理期限内删除或去标识化。
- 验证码与登录令牌:短期有效并定期清理。
- 安全措施:传输全程加密(HTTPS)、密码加盐哈希存储、上传图片仅限本人与授权员工访问、员工按角色分权。
How long we keep it and how we protect it
- Transaction and payment records: kept for at least 5 years to meet Australian Taxation Office record-keeping rules.
- Account information: kept while your account is active. After closure we delete or de-identify it within a reasonable period, except records the law requires us to keep.
- Verification codes and login tokens: short-lived and purged regularly.
- Safeguards: encryption in transit (HTTPS), salted password hashing, uploaded images visible only to you and authorised staff, and role-based staff access.
Cookie 与自动收集
我们使用少量必要 Cookie:登录会话、购物车、语言偏好。我们不使用第三方广告追踪 Cookie。为防止验证码被滥用,我们会按 IP 与手机号限制发送频率并短期记录相关日志。
Cookies and automatic collection
We use a small number of essential cookies: login session, cart and language preference. We do not use third-party advertising or tracking cookies. To prevent abuse of verification codes we rate-limit sends per IP address and per mobile number and keep short-term logs for that purpose.
营销与退订
与你的订单直接相关的短信和邮件(验证码、账单、取货、到期提醒)是服务消息,只要你还在使用服务就会收到。 特价、到货与活动类营销消息只在你同意后发送;你可以随时回复短信「STOP」或直接联系我们退订。
Marketing and opting out
SMS and emails tied to your orders (verification codes, bills, pickup and due-date notices) are service messages and continue while you use the service. Marketing messages about specials, arrivals and events are sent only with your consent. You can opt out at any time by replying STOP to an SMS or by contacting us.
怎么查询与更正
你可以在「我的」页面查看订单、账单与消息记录。要查询、更正或删除我们持有的其他个人信息,请通过下方方式联系我们,我们会在 30 天内回应。 法律要求保留的记录(如交易记录)在保留期内不能删除,但可以去标识化。
How to access or correct your information
You can view your orders, bills and messages in your account page. To access, correct or delete other personal information we hold, contact us using the details below and we will respond within 30 days. Records we must keep by law (such as transaction records) cannot be deleted during the retention period but can be de-identified.
怎么投诉
如果你认为我们处理个人信息的方式有问题,请先联系我们,我们会在 30 天内调查并书面回复。若你对处理结果不满意, 可以向澳洲信息专员办公室(OAIC,oaic.gov.au,电话 1300 363 992)投诉。
How to complain
If you believe we have mishandled your personal information, please contact us first; we will investigate and respond in writing within 30 days. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au, 1300 363 992).
联系我们
岛上生活 Tas Pantry · 0412341234
Contact us
岛上生活 Tas Pantry · 0412341234
版本与生效语言
当前版本 v1 · 2026-09。我们可能不时更新本政策,更新后会在本页发布并更新版本号;重大变更会另行通知。 中英文本不一致时,以英文版为准。
Version and governing language
Current version v1 · 2026-09. We may update this policy from time to time; updates are published on this page with a new version number, and material changes will be notified separately. If the Chinese and English texts differ, the English version prevails.