Privacy Policy

This Privacy Policy explains how DEVHAUS 3D Print ("DEVHAUS", "we", "us", or "our") collects, uses, stores, and discloses personal information when you use our website, quote tool, accounts, and related services (the "Services").

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We do not sell your personal information.

By using the Services you acknowledge this Policy. If you do not agree, please do not use the Services. Our Terms of Service also apply.

We collect information you provide and information generated when you use the Services:

• Account information — email address, password (handled by our identity provider), organisation name, and account type.
• Contact and enquiry information — name, email, phone (optional), and message content when you contact us or submit a quote follow-up.
• Order and delivery information — shipping method, delivery address details you provide, and order status history.
• Payment information — payment is processed by Stripe. We receive payment metadata (e.g. status, amount, Stripe customer/session identifiers). We do not store full card numbers or CVV codes.
• Uploaded files — 3D model files (.3mf, .step, .stp) and related quote configuration (materials, colours, presets). These are needed to estimate and manufacture your parts.
• Technical and usage data — IP address, browser/device type, pages visited, and similar log data used for security, debugging, and improving the Services. We may use cookies or similar technologies for session management (including authentication and guest quote sessions).

We do not intentionally collect sensitive information (health, racial or ethnic origin, etc.). Please do not include such information in uploads or messages unless necessary and you consent to our handling it for that purpose.

We use personal information to:

• Create and manage accounts and authenticate users;
• Generate quotes, process orders, manufacture parts, and arrange delivery or pickup;
• Provide customer support and respond to enquiries;
• Send transactional emails (e.g. order confirmation, account verification);
• Detect fraud, abuse, and security incidents;
• Improve and operate the Services (including pricing and estimation systems);
• Comply with legal obligations; and
• With your consent or where otherwise permitted, send marketing communications (you may opt out at any time).

We share personal information only as needed to operate the Services or as required by law, including with:

• AWS — hosting, database, object storage (S3), and Cognito identity services (typically in the Asia Pacific / Sydney region);
• Stripe — payment processing;
• Email providers — for transactional and support messages (e.g. Amazon SES or Cognito's built-in email for verification codes);
• Professional advisers or regulators where required; and
• A successor entity in the event of a merger, acquisition, or asset sale, subject to appropriate confidentiality protections.

We require service providers to protect personal information and use it only for the purposes we specify.

Our primary application data is hosted on AWS in ap-southeast-2 (Sydney). Some processors (notably Stripe and certain AWS/Cognito components) may process data in other countries, including the United States. Where we disclose personal information overseas, we take reasonable steps consistent with the APPs to ensure it is handled in a way that is consistent with Australian privacy law.

We use industry-standard measures to protect personal information, including HTTPS/TLS in transit, access controls, and secure secret management for production systems. No method of transmission or storage is completely secure; please use a strong unique password and keep your credentials confidential.

We retain personal information only as long as needed for the purposes described in this Policy, to provide the Services, and to meet legal, accounting, or dispute-resolution requirements. Guest quote sessions expire after a limited period. You may request account deletion through account settings or by contacting us; we will delete or de-identify personal information where we are not required to retain it.

Under the Privacy Act, you may request access to the personal information we hold about you and seek correction of inaccurate information. You may also make a complaint about our handling of your personal information.

Contact us first using the details below. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

You can update many account details while signed in. You may opt out of marketing emails via unsubscribe links (transactional emails about your orders or account will still be sent as needed).

The Services are aimed at adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

We use cookies and similar technologies that are necessary for the Services to function — for example, httpOnly session cookies for authentication and guest quote sessions. We may also use basic analytics in the future; if we do, we will update this Policy and provide appropriate choices where required.

We may update this Privacy Policy from time to time. The "Last updated" date will change when we do. Material changes may also be communicated by email or a notice on the site. Please review this page periodically.

Privacy questions or requests: support@devhaus.com.au, or via our contact form.

DEVHAUS 3D Print · Canberra, ACT, Australia
Trading as DEVHAUS 3D Print · ABN: [insert ABN]