Privacy Policy.
We collect the minimum we need and never sell your data. Ever. Plain English, as much as the law allows.
/01Who we are
Makeshift is operated by Makeshift Collective Pty Ltd (ABN pending), a Victorian company. This policy applies to everyone who uses makeshift-au.com, whether you're browsing, buying, or selling.
/02What we collect
We collect your name, email address, and phone number when you create an account or submit a form. If you're an artist, we also collect your business details, bank account info (via Stripe), and portfolio content you upload. When you make a purchase, Stripe collects your payment details directly — we never see or store your full card number. We also collect basic usage data (pages visited, device type) through server logs.
/03How we use it
We use your information to operate the marketplace: processing transactions, connecting buyers with artists, sending order confirmations, and communicating important account updates. Artist profiles are displayed publicly on the site. We may use aggregated, anonymised data to understand how the platform is used and improve it.
/04Payment processing
All payments are processed by Stripe. When you add a payment method or receive payouts, your financial data is handled directly by Stripe under their privacy policy. Makeshift stores only a reference ID and the last four digits of your card for display purposes. We never have access to your full card number, bank login, or Stripe password.
/05Who we share with
We share data only where necessary to operate: Stripe for payments, Resend for transactional emails (order confirmations, welcome emails), and Supabase for data storage. We do not sell, rent, or trade your personal information with third parties for marketing. When you place an order, the artist receives your name, email, and shipping address to fulfil it.
/06Cookies
We use essential cookies to keep you logged in and remember your session. Stripe sets its own cookies during checkout for fraud prevention. We do not use advertising cookies or third-party tracking pixels. No data is shared with ad networks.
/07Your rights
Under the Australian Privacy Act 1988, you can request access to, correction of, or deletion of your personal information at any time. Artists can export their data from the dashboard. To make a privacy request, email us at the address below. We'll respond within 30 days.
/08Data retention
We keep your account data for as long as your account is active. If you close your account, we delete your personal data within 90 days, except where we're legally required to retain records (e.g., tax invoices, transaction history for 7 years under Australian tax law). Anonymised analytics data may be retained indefinitely.
/09Security
All data is transmitted over HTTPS. Payment data is handled by Stripe (PCI DSS Level 1 certified). Database access is restricted by role-based policies. We use Supabase Row Level Security to ensure users can only access their own data.
/10Changes
We may update this policy as Makeshift grows. If we make material changes, we'll email you before they take effect. The date at the top of this page always reflects the latest version.