Last updated: May 2026 · Effective: May 2026
Dropless is an Australian consumer products brand operated by Tayfun Simsek, trading as Dropless Brand AR-GE & Manufacturing, based in Wollongong, NSW, Australia.
Contact: info@dropless.com.au
Website: dropless.com.au
This Privacy Policy applies to all personal information collected through our website, online store, and customer communications. We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We collect personal information only when you actively provide it — for example, when placing an order, contacting us, or subscribing to updates.
We do not collect sensitive information (such as health, financial or government ID data) and we do not use tracking cookies for advertising purposes.
We will not use your information for unsolicited marketing without your explicit consent.
We use trusted third-party services to operate our business. Each provider has its own privacy policy and data handling obligations.
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Name, email, order amount. Card details processed directly by Stripe — never stored by us. |
| Zoho Mail | Transactional email (order confirmations, shipping) | Name, email address, order details |
| Cloudflare | Website hosting, CDN, DDoS protection | IP address, browser data (anonymised) |
| DigitalOcean | Application server (Sydney, Australia) | Order and customer data stored on Australian servers |
| Sendle / Australia Post | Parcel delivery | Recipient name, delivery address, phone number |
We do not sell, rent or trade your personal information to any third party for marketing purposes.
Your order data is stored on our application server hosted by DigitalOcean in their Sydney, Australia data centre. We implement reasonable technical and organisational measures to protect your information against unauthorised access, loss or disclosure.
Payment data is tokenised and stored solely by Stripe on their PCI-DSS compliant infrastructure. We retain order records for seven (7) years as required by Australian tax law.
Our website uses minimal cookies:
We do not use advertising cookies, remarketing pixels, or third-party tracking scripts (e.g. Google Analytics, Meta Pixel).
Under the Australian Privacy Principles you have the right to:
To exercise any of these rights, contact us at info@dropless.com.au. We will respond within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Our products and website are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of our website after changes constitutes your acceptance of the updated policy.
For any privacy-related questions or requests: