Santas Vault is operated by ETP Consulting Pty Ltd. We collect only what we need to take your order, have it made or picked, delivered, and to answer your questions. We do not sell your personal information.
What we collect
- Name, email, phone and delivery address, to take and deliver an order
- The text you enter for personalised items, so it can be printed
- Images you upload to be printed: your own photo or artwork on any personalised product, and the photograph for a photo blanket. These often show family members, including children, or pets. We use an image only to print your order
- Messages you send us through the contact form or by email, so we can answer them
- Order history, to handle returns, warranty claims and enquiries
- Website usage data through analytics, in aggregate
- Device and browsing activity (pages and products viewed, cart and checkout actions), collected through cookies and pixels for analytics and advertising, as set out below
We never see or store your full card number. Payments are processed by Shopify Payments and PayPal directly.
Who handles your order details, and exactly what they get
We do not hold stock. Your order is made or picked by the supplier who makes that item, and shipped by them straight to you. That supplier therefore needs your delivery details. This is the full list of who receives what, and nothing goes further than this. We also use Google Analytics, which receives a randomly assigned identifier and your IP address on each page load so we can see how the store is used. It does not receive your name, your address or what you typed for a personalised item.
| Who | Their role | What they receive |
|---|---|---|
| Shopify | Hosts this store and processes payment | Name, email, billing and delivery address, order contents. Card data goes to Shopify Payments, not to us |
| Print Clever, via Printify (United Kingdom) | Prints personalised Santa sacks and Christmas stockings | Your delivery name and address, the personalised text and any image you uploaded, because that is what gets printed |
| Printful (Brisbane and Melbourne facilities) | Backup printer for personalised items | Delivery name and address, personalised text |
| Printify, routed to Prima Printing and The Print Bar (Australia) | Prints ornaments, mugs, cards, totes, clothing, towels and stubby coolers | Delivery name and address, personalised text and any image you uploaded |
| Colorway, WOYC and Jondo, via Printify (United States companies, printing our orders at their Australian facilities) | Print Your Design or Ours pieces, such as blankets, cushions, drinkware, phone cases, canvas prints and wooden decor | Delivery name and address, the name to print and any image you uploaded |
| Our photo blanket printer (Noble Park, VIC) | Prints photo blankets | Delivery name and address, the photograph you uploaded and the name to print |
| Printed Mint, via Printify (United States) | Prints personalised pet bandanas | Delivery name and address, personalised text and any image you uploaded |
| Dropshipzone (Melbourne, VIC) | Picks and ships stocked decorations, lights and costumes | Delivery name, address and the items ordered. No personalised text, because these items are not personalised |
| CJdropshipping (Australian warehouse) | Picks and ships some stocked items, such as Santa suits and solar lights | Delivery name, address, phone and the items ordered |
| iDropship (Australia) | Picks and ships stocked Christmas ranges | Delivery name, address and items ordered |
| Australia Post and courier partners | Delivery | Delivery name, address, phone for delivery contact |
| Meta Platforms (Facebook and Instagram) | Measures our advertising and shows our ads, through the Meta Pixel and the Meta Conversions API | Browsing and purchase events on this store. When you check out: your email, phone and name, converted into a scrambled code (hashed) before they are sent, plus city, state, postcode and country |
| PayPal | Processes payment if you choose PayPal | Name, email, billing and delivery address, and the order amount |
| Google (Google Analytics) | Shows us how the store is used | A randomly assigned identifier and your IP address on each page |
| Our email provider | Order and shipping notifications | Name and email |
Suppliers receive your details for the sole purpose of fulfilling your order. They are not permitted to market to you, and we do not give them your order history or any data beyond that one consignment.
Advertising on Facebook and Instagram
We advertise on Facebook and Instagram. To do that we use the Meta Pixel on this store and the Meta Conversions API, which sends purchase details from Shopify's servers to Meta. Meta uses this information to match visits and purchases to Facebook and Instagram accounts, to measure whether our ads work, to show our ads to people who have visited the store, and to find people similar to our customers. Email, phone and name are hashed before they are sent. We do not direct our advertising at anyone under 18.
Personalised text is treated as personal information
A child's name on a sack, or a family photograph you upload to be printed, is personal information about a child. We pass it to the printer because there is no other way to print it, we do not use it for anything else, and we do not publish it. We retain it against the order record so a reprint or a warranty claim can be matched, and it is deleted with the order record. An uploaded photograph is kept the same way and for the same period.
Overseas handling
Our fulfilment facilities are in Australia, with two exceptions: personalised Santa sacks and Christmas stockings are printed to order by Print Clever in the United Kingdom, and personalised pet bandanas by Printed Mint in the United States, both through Printify. For a sack, stocking or bandana order, your delivery name and address and the name you typed for printing are sent to the United Kingdom or the United States so it can be made and posted to you. Some of the Australian facilities are run through companies incorporated overseas: Printify Inc., Printful Inc., Colorway, WOYC and Jondo are United States companies, and the personal information needed to make and send your order is handled on their platforms. Under Australian Privacy Principle 8 we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles, and we remain accountable to you for it. CJdropshipping, which sends some stocked items from its Australian warehouse, is a company based in China, and your delivery details are handled on its platform. Shopify and our email and analytics providers store data outside Australia, including in the United States, and Meta and Google, who receive the advertising and analytics information described above, hold it in the United States and other countries. We take reasonable steps under Australian Privacy Principle 8 to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.
Marketing
We send marketing emails only to people who have asked for them. Every marketing email carries a working unsubscribe link and we action unsubscribes immediately. Order and delivery emails are not marketing and are sent regardless.
Showing our ads on Facebook and Instagram to people who have visited the store or bought from us is also a form of direct marketing. To stop the Meta Pixel in your browser, use Your privacy choices at the foot of any page. To be removed from our customer audiences and from the Conversions API, email hello@santasvault.com.au with the subject "Advertising opt out" and, within five business days and at no cost, we remove you. You can also change your ad settings on Facebook and Instagram.
Cookies and analytics
This store uses cookies and pixels for the cart, checkout, analytics and advertising measurement. You can block them in your browser, though the cart will not function without the essential ones.
Accessing, correcting or deleting your information
Email hello@santasvault.com.au to see what we hold, correct it, or ask us to delete it. We respond within 30 days. Order records are retained for 7 years where tax law requires it. A deletion request for an order still in production cannot be actioned until the item has shipped, because the printer needs the address.
Data breaches
If a breach occurs that is likely to result in serious harm, we notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme. That obligation applies to a breach at one of our suppliers involving your data as much as it does to one at our end.
Complaints
Email hello@santasvault.com.au first. We acknowledge a privacy complaint within 5 business days and give you a written answer within 30 days. If you are not satisfied with the answer, contact the Office of the Australian Information Commissioner at oaic.gov.au.
Automated decisions
We do not use computer programs to make decisions about you that significantly affect your rights or interests. Orders are routed automatically to the supplier that makes the item, which is not a decision about you. Shopify screens payments for fraud; if an order is ever cancelled on that ground, you can ask us to review it and a person will.
How your information is held
Your information is held in our Shopify account and in each supplier's order system, behind access-controlled logins. Shopify, PayPal, Meta and Google hold data in the United States and other countries; Printify, Printful, Printed Mint, Colorway, WOYC and Jondo in the United States; CJdropshipping on its platform, run from China; Print Clever in the United Kingdom; our Australian suppliers in Australia.
Last updated 25 September 2026.