Privacy Policy

Who we are

This is the privacy policy of Dundrovin Pty Ltd (ACN 001 042 280), which runs johnstanton.com.au. In this policy, "we", "us" and "our" mean Dundrovin Pty Ltd. Our registered office is at Dundrovin Pty Ltd, 87 Rodeo Drive, Macksville NSW 2447.

This policy explains what personal information we collect, why we collect it, how we look after it, and what you can do about it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

When you order. Your name, email address, postal address and the details of your order. We need these to send your books and contact you about your order.

When you contact us. Whatever you include in your email or message, such as your name, email address and your question.

When you visit the website. Anonymous statistics about which pages are viewed and how visitors found the site. This does not identify you (see Website statistics and cookies below).

We collect information directly from you. If you choose not to give us the details we need for an order, we won't be able to process it.

Card payments

We never collect, see or store your card details. All payments are processed by Square, a third-party payment provider. When you pay, your card details go directly to Square and are handled under Square's privacy policy.

Square tells us only that a payment has been made, along with the order details we need to fulfil it.

How we use your information

We use your information to:

• process, pack and post your order, including printing address labels
• contact you about your order
• answer your questions
• keep business and tax records, as the law requires

Emails from John. As a customer, you may occasionally receive emails from John about his books, events and related news. You don't need to sign up for these, and you won't be added to any automatic mailing list. Every email clearly identifies who it is from and includes a one-click unsubscribe link. If you unsubscribe, we will stop within 5 business days.

We don't use your information for any other purpose unless you agree or the law allows it.

Who we share it with

We do not sell, rent or trade your personal information. We share it only with the people and services we need to run the website and fulfil your order:

These providers may use your information only to provide their service to us.

We may also disclose information if the law requires it, for example in response to a court order or a lawful request from a government agency.

Where we keep it and for how long

Storage. Order records are stored on our web server in Sydney, Australia, in a secure folder that cannot be reached from the internet. John and Celia, who manage the business, also keep copies of order records.

Overseas services. Our email delivery service, SMTP2GO, is based in New Zealand, so your email address and the emails we send you may pass through or be stored there. Square may also store payment information outside Australia, as set out in its own privacy policy.

How long. We keep order records for 7 years, as Australian law requires for business and tax records. After that, we delete them.

Security. We take reasonable steps to protect your information from misuse, loss and unauthorised access. Access is limited to the people who need it to run the business.

Website statistics and cookies

We use our own simple statistics tool to count visits, see which pages are popular and learn how people find the site. It does not use cookies and does not store IP addresses or anything else that could identify you.

We don't use advertising or tracking cookies. When you pay, Square's checkout pages may use their own cookies, which are covered by Square's privacy policy.

Seeing or correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, at any time. Email us at the address below. We will check your identity before releasing or changing anything, and we aim to respond within 30 days.

You can also ask us to delete your information. We will do so unless we are required by law to keep it, such as order records we must hold for tax purposes.

Complaints

If you think we have mishandled your personal information, please email us first so we can try to fix it. Tell us what happened and how you would like it resolved. We will acknowledge your complaint and let you know when to expect a response, usually within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or enquiries@oaic.gov.au.

Contact us

For any privacy question, request or complaint, contact John Stanton or Celia:

Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.

Last updated: 19 October 2026