Privacy policy

S.P Fitness Gains · ABN 93 423 372 506
Last updated 7 October 2026

1. 01Who we are

   This policy explains how S.P Fitness Gains, ABN 93 423 372 506, trading as Smash Peptides ("we", "us", "our"), handles personal information. It applies to smashpeptides.com.au and to everything we do with information you give us when you order.

   We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. 02What we collect

   We collect information to process orders, deliver parcels, keep required records and understand visits to our public website. This includes:

   • Your name, email address and phone number.
   • The delivery address you give us: street, suburb, state and postcode.
   • Your order details — products, sizes, quantities, price, payment reference and order status.
   • Correspondence you send us, and our replies.
   • Standard server logs generated when you visit, including IP address, browser type and pages requested.
   • Visit information collected by the Meta Pixel on public pages, including page URLs, browser and device information, IP address and advertising cookie identifiers.

3. 03What we deliberately do not collect

   We do not use session recording. Our Meta Pixel integration does not send customer names, contact details, delivery addresses, order contents or payment details as event data. It is excluded from checkout, private order pages and the administrator area.

   We never collect or store your card details, because we do not accept card payments. Payment is by bank transfer, and the transfer happens entirely within your own bank.

   We do not ask for, and do not want, any information about your health, medical history or intended use. Do not send it to us.

4. 04Why we collect it

   We use your personal information only to:

   • Process and fulfil your order, and match your bank transfer to it.
   • Send you order confirmation, payment confirmation and dispatch and tracking emails.
   • Answer your questions and handle returns, replacements or refunds.
   • Keep the financial and tax records we are required by law to keep.
   • Protect the site against fraud and abuse.
   • Measure visits to public pages and the effectiveness of advertising using Meta Pixel.

5. 05Cookies and advertising measurement

   We use Meta Pixel on public pages to measure visits and advertising performance. Meta may set or read cookies and associate these visits with your Facebook or Instagram account, subject to your Meta settings. Meta processes this information under its own privacy and cookie policies.

   You can manage cookies through your browser and advertising preferences through your Meta account. Blocking tracking may prevent the pixel from working, but does not prevent you from browsing or placing an order. Store administrators also use a separate login-session cookie.

   Our store emails are transactional messages about your order. Adding Meta Pixel does not subscribe you to marketing emails.

6. 06Who we share it with

   We disclose personal information only to the service providers we need to run the store, and only so far as they need it:

   • Supabase — database and file storage, where order records are held.
   • Vercel — website and application hosting.
   • Resend — sends our order, payment and dispatch emails, and therefore handles your name and email address.
   • Australia Post — receives your name and delivery address so a parcel can reach you.
   • Meta — receives public-page visit information through Meta Pixel for advertising measurement, as described above.
   • Our bank, and professional advisers such as our accountant, where required.
   • A law enforcement body, regulator or court, where we are required or authorised by law to disclose.

7. 07Where your information is stored

   Our application runs in Sydney, Australia, and our database is hosted with Supabase.

   Some of our service providers are companies incorporated overseas and may store or access data outside Australia, including in the United States. Where that happens we take reasonable steps to ensure the recipient handles your information consistently with the Australian Privacy Principles. By providing your information you acknowledge that overseas recipients may not be subject to the Privacy Act, and that we may not be able to require them to comply with it.

8. 08How long we keep it

   We keep order records for seven years, which is the period Australian tax and business record-keeping law requires. Correspondence is kept only as long as it is useful for supporting you.

   When information is no longer needed for any purpose for which it may lawfully be used, and we are not required to keep it, we destroy or de-identify it.

9. 09How we protect it

   Access to order data is restricted to the store owner through a password-protected administrator login. The site is served only over encrypted connections (HTTPS). Order confirmation pages are reachable only through a long, unguessable link, are excluded from search engines, and are not listed anywhere public.

   No system is perfectly secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

10. 10Accessing and correcting your information

    You may ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Email smashpeptides@gmail.com and we will respond within a reasonable time, ordinarily within 30 days.

    You can ask us to delete your information, and we will unless we are required by law to keep it — for example, order records within the seven-year tax retention period.

    We do not charge for making a request. If a request is complex enough that we would need to charge for access, we will tell you the cost before doing the work.

11. 11Dealing with us anonymously

    You can browse this site, and read every certificate of analysis, without telling us anything about yourself. We only need your details if you place an order, because we cannot deliver a parcel without an address.

12. 12Complaints

    If you think we have mishandled your personal information, email smashpeptides@gmail.com with the details. We will acknowledge your complaint and respond within a reasonable time, ordinarily within 30 days.

    If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5218, Sydney NSW 2001.

13. 13Changes to this policy

    We may update this policy. The current version is always the one on this page, and the date at the top tells you when it last changed. If we make a change that materially affects how we handle information we already hold about you, we will take reasonable steps to tell you.