Privacy policy
PC Mega Mart Pty Ltd (ABN 54 676 397 032) collects personal information so we can sell you hardware and get it delivered. This policy explains what we collect, why, who else sees it, and what you can ask us to do about it.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
When you place an order: your name, email address, phone number, delivery address, billing address, and — if you are buying as a business — your company name and ABN.
When you create an account: your email address and a password, stored only as a cryptographic hash. We never store your password in a form we can read.
When you pay: we do not collect or store your card number. Card details are entered directly into our payment provider's hosted fields and never reach our servers. We keep only the payment provider's transaction reference, the card brand, and the last four digits, so we can match a payment to your order and process refunds.
When you browse: pages viewed, products viewed and compared, items added to the cart, your approximate location derived from your IP address, your browser and device type, and the site that referred you.
When you contact us: whatever you put in the message, and our reply.
Why we collect it
- To take, fulfil and deliver your order, and to handle returns and warranty claims
- To send you transactional email: order confirmations, dispatch notices, tracking, invoices
- To operate your account, including order history and saved addresses
- To detect and prevent fraud and to meet our record-keeping obligations under Australian tax law
- To improve the site: which pages fail, which searches return nothing, where checkout is abandoned
- To send marketing email, only if you have opted in
We do not sell personal information. We have never sold personal information and have no plan to start.
Who we share it with
We share the minimum necessary with the parties who make an order work:
| Recipient | What they receive | Why |
|---|---|---|
| Distributors (Dicker Data, Ingram Micro, Leader) | Delivery name, address, phone | To pick, pack and dispatch |
| Carriers | Delivery name, address, phone, email | To deliver and notify you |
| Stripe | Payment details you enter, order amount | To process card payments |
| Transbank (Chile) | Payment details you enter, order amount | To process Chilean card payments |
| Email provider | Your email address, message content | To send transactional and opted-in email |
| Manufacturers | Serial number, purchase date, contact details | Only when you make a warranty claim |
We also disclose information where the law requires it — a court order, a regulator, or a law-enforcement request we are legally obliged to answer.
Some of these providers store data outside Australia, including in the United States and the European Union. We only use providers who are contractually bound to protect your information to a standard comparable with the Australian Privacy Principles.
Cookies
We use cookies that are strictly necessary for the site to work: your session, your cart, your locale, your light or dark theme choice, and a token that protects forms against cross-site request forgery. These cannot be turned off without breaking the site.
We use a small number of analytics cookies to understand aggregate traffic. Where consent is required, we ask for it, and declining does not degrade the store.
You can clear or block cookies in your browser. Blocking the necessary ones will stop the cart and checkout from working.
Marketing email
We only send marketing email if you asked for it, either by ticking the box or by subscribing. Every marketing email has a one-click unsubscribe, and unsubscribing takes effect immediately.
Transactional email is different: while you have an open order we will email you about that order, and you cannot unsubscribe from an order confirmation or a dispatch notice.
How long we keep it
- Order and invoice records: seven years — our own retention period, longer than the tax-law minimum
- Account details: until you ask us to delete the account
- Analytics data: 26 months, in aggregate
- Support conversations: three years
- Marketing lists: until you unsubscribe
Security
Traffic between your browser and our site is encrypted with TLS. Passwords are hashed. Access to production systems is restricted to staff who need it and is logged. Card data never touches our infrastructure.
No system is perfectly secure. If we ever suffer a data breach likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Your rights
You can ask us to:
- Give you a copy of the personal information we hold about you
- Correct anything that is wrong or out of date
- Delete your account and the personal information we are not legally required to keep
- Stop sending you marketing
Email support@pcmegamart.com.au. We will respond within 30 days. We do not charge for access requests.
Complaints
If you think we have mishandled your personal information, email us first — most problems are a misunderstanding we can fix quickly. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes to this policy
We will post any change on this page. Where a change materially affects how we use information we already hold, we will email account holders before it takes effect.