Privacy Policy

Last updated: 16 September 2025

This Privacy Policy explains how Asporea Digital Pty Ltd  (“we”, “us”, “our”) collects, uses, discloses, and protects your information when you visit asporeadigital.com, make a purchase, subscribe to a plan, become a member, or use our contact and service forms.

We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where relevant, we also consider obligations under the EU GDPR and UK GDPR for visitors in those regions.


1. Who we are and how to contact us

  • Business name: Asporea Digital Pty Ltd

  • ACN: 653 431 479

  • Registered address: 36 Zealie Bend Googong NSW 2620 Australia

  • Email: [email protected]

  • Phone: 0480138054

You can contact us for any privacy question or to exercise your rights using the details above.


2. Information we collect

We collect information that you provide directly and information collected automatically when you use the site.

2.1 Information you provide

  • Account and checkout details: name, company name, billing and shipping addresses, email, phone number.

  • Order and subscription details: products or services purchased, plan tier, membership status, renewal and cancellation information.

  • Payment details: processed securely by Stripe. We do not store full card numbers on our servers.

  • Service and project forms: requirements, files, images, credentials supplied for the sole purpose of delivering the assignment.

  • Support requests: messages and attachments sent through contact or support forms.

  • Marketing preferences: newsletter opt in or opt out, preferred contact methods.

2.2 Information collected automatically

  • Usage data: pages visited, links clicked, referring URLs, device type, browser type, and operating system.

  • Cookies and similar technologies: used to operate the shopping cart, remember your session, and measure performance. See the Cookie section below.


3. How we use your information

We use your information to:

  • Provide, operate, and maintain our website and online store.

  • Fulfil orders and deliver services, including subscriptions and memberships.

  • Process payments and prevent fraud.

  • Communicate with you about orders, renewals, service updates, and support.

  • Provide member only content and manage access rights.

  • Improve our products, services, and site performance.

  • Comply with laws, tax obligations, and enforce our terms.


4. Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases:

  • Contract: to supply products and services you request.

  • Legitimate interests: for security, fraud prevention, site improvement, and direct marketing to existing customers.

  • Consent: for optional cookies, newsletters, or where the law requires consent.

  • Legal obligation: to keep records for tax and compliance.


5. Payments with Stripe

Payments are processed by Stripe. When you pay, your payment details are sent directly to Stripe and handled in accordance with Stripe’s own privacy policy. We receive confirmation of payment, card brand, last 4 digits, expiry month and year, and a payment token or intent ID. We do not store full card numbers or CVC on our servers.

For recurring subscriptions, Stripe securely stores payment tokens and manages renewals. You can update or cancel payment methods via your account portal where available.


6. WooCommerce, Subscriptions, and Memberships

  • WooCommerce: we store order details, cart contents while you browse, and account details to fulfil orders and provide invoices and order history.

  • WooCommerce Subscriptions: we store subscription start date, status, schedule, and related orders. Renewals are processed using Stripe payment tokens.

  • WooCommerce Memberships: we record membership plan, status, start and end dates to manage access to member content and benefits.

If access ends due to cancellation or expiry, your membership access is revoked. We retain minimal records needed for accounting and audit as outlined in the retention section.


7. Forms and uploaded content for service delivery

We use forms to collect information needed to deliver assignments, such as website content, images, technical details, and credentials. Unless we agree otherwise in writing, we will remove customer supplied service data and files at the end of the assignment once handover is complete and any agreed post go live period has finished. Backups and temporary working files are purged on a rolling schedule. See Data Retention for timeframes.

If you provide third party credentials, we recommend creating time limited access or separate accounts for our work. We will never share your credentials and will request that you rotate passwords after completion.


8. Data retention

We keep personal information only for as long as necessary for the purposes set out in this policy.

  • Orders and invoices: retained for 7 years to meet tax and accounting obligations.

  • Subscription and membership records: retained while active, then archived for up to 7 years for audit and tax.

  • Support tickets and contact enquiries: up to 2 years from last activity unless a longer period is needed to resolve an issue.

  • Service and project files submitted via forms: removed at the end of the assignment. We aim to purge within 30 days of project sign off unless a different timeframe is agreed in your contract or required by law.

  • Analytics and site logs: up to 12 months unless needed for security or legal reasons.

Where we rely on consent, we delete the data if you withdraw consent.


9. Sharing and disclosures

We share information with third parties that help us run our business. These providers act as processors under contract and may only use your information to provide their service to us.

Typical recipients include:

  • Stripe for payment processing.

  • Managed hosting and email service providers that keep our site and emails running.

  • WooCommerce extensions needed for subscriptions, memberships, and checkout functions.

  • Analytics and anti spam tools to protect and improve the site.

We may disclose information where required by law, to respond to legal requests, or to protect our rights, users, or the public.

We do not sell personal information.


10. International transfers

Our service providers may operate globally. Where data is transferred outside Australia, we take reasonable steps to ensure it is protected with appropriate safeguards such as standard contractual clauses or equivalent measures.


11. Cookies

Cookies are small files placed on your device. They help the site function and improve your experience.

Types we use:

  • Essential: required for cart, checkout, login, security, and membership access.

  • Preferences: remember settings such as language or address details to speed up checkout.

  • Analytics: help us understand how the site is used.

  • Marketing: used only with your consent, for remarketing or measuring campaign effectiveness.

You can control cookies through your browser settings. Blocking essential cookies may prevent you from using parts of the site such as checkout or the member area.


12. Security

We use administrative, technical, and physical safeguards to protect personal information, including HTTPS encryption, access controls, least privilege, and regular updates to our CMS, themes, and plugins. No method of transmission or storage is completely secure, but we work to reduce risk.


13. Your rights

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you.

  • Request correction of inaccurate information.

  • Request deletion of your information.

  • Object to or restrict processing in certain circumstances.

  • Withdraw consent where we rely on consent.

To exercise any of these rights, contact us using the details in section 1. We will respond within a reasonable time.


14. Children

Our services are not directed to children under 16. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.


15. Automated decision making

We do not use automated decision making that produces legal or similarly significant effects on you. Subscription renewals and membership access checks are automated operational processes.


16. Third party links

Our site may contain links to third party websites. We are not responsible for their privacy practices. Review the privacy policy of any site you visit.


17. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a new effective date.


18. How to complain

If you have a privacy concern, contact us first and we will try to resolve it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner. See www.oaic.gov.au for details.


Practical notes for customers

  • You can update your account details and manage subscriptions through The Hub when logged in.

  • To request deletion of service files after project completion, email [email protected] with your order or project reference.

  • To withdraw marketing consent, use the unsubscribe link in emails or contact us.