Last updated: 30 September 2026
Draft — pending legal review. Every fact below about what this site actually collects, stores, and shares has been checked directly against the code, not assumed — but the wording itself, and whether anything beyond this is required for your specific circumstances (e.g. additional regional disclosures), hasn't had a formal legal review yet.
This Privacy Policy explains how Basaltmount ("we", "us", "our"), the operator of Basalt Mount and basaltmount.com, collects, uses, shares, and protects your information when you visit this site, create an account, or place an order. It applies to every visitor and customer, wherever you're located.
Questions or requests about this policy can be sent to [email protected] at any time — see Contact us below.
We do not sell your personal information, and we do not use it for third-party advertising or build advertising profiles from it. We don't currently run marketing/newsletter emails; if that changes, this policy will be updated first and any such emails will be opt-in.
We only share what each service genuinely needs to do its job — never sold, never shared for anyone else's marketing:
We do not sell personal information to data brokers or third-party advertisers, and never have.
We're based in Australia, and our servers and service providers may be located in a different country than you are. Where that involves transferring your information internationally, we rely on the safeguards our providers (Stripe, PayPal, Cloudflare, and others listed above) themselves offer for cross-border transfers.
We keep order and payment records for as long as required for tax and accounting purposes (typically several years under Australian tax law). Account information is kept for as long as your account is active. You can ask us to delete your account and any information not covered by a legal retention requirement at any time — see "Your rights" below.
We use industry-standard safeguards to protect your information — passwords are stored as salted hashes rather than plain text, connections to this site are encrypted (HTTPS), and payment card data is handled entirely by our PCI-compliant processors (Stripe, PayPal) rather than touching our own servers. No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable measures appropriate to the sensitivity of what we hold.
Depending on where you live, you have rights over your personal information. We honor these for every visitor, not only where they're legally mandated.
You additionally have the right to data portability (receive your data in a structured, machine-readable format), the right to withdraw consent at any time where we rely on it, and the right to lodge a complaint with your local data protection supervisory authority.
You have the right to know what personal information we collect, request its deletion, and opt out of its "sale" or "sharing" — though we don't sell or share personal information for cross-context behavioral advertising, so there's nothing to opt out of today. You won't receive discriminatory treatment for exercising any of these rights.
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you're not satisfied with how we've handled a privacy concern, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Contact [email protected] — we'll respond within a reasonable time (typically within 30 days), and we may need to verify your identity first (e.g. by confirming it from the email address on your account) before acting on a request.
Some browsers offer a "Do Not Track" signal. There's no common industry standard for how sites should respond to it, and since this site doesn't use tracking/advertising cookies in the first place, we don't currently respond to that signal differently — there's nothing to turn off.
This site is not directed at children, and we don't knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.
This site may link to third-party sites (for example, a payment provider's own checkout page). We aren't responsible for the privacy practices of sites we don't operate — check their own policy before providing information there.
If we make a material change to how we collect or use information, we'll update the date at the top of this page. Continuing to use the site after a change means you accept the updated policy.
Questions, concerns, or a rights request under this policy: [email protected].