Privacy Policy

Last updated: 3 August 2026

Sebity (“we”, “us”) provides order management software to retailers (“our customers”). This policy explains how we handle personal information.

Our role

Sebity is a data processor. Our customers are retailers who sell through marketplaces and online stores. They decide what personal information is collected from their buyers and why. We process that information on their instructions, solely to provide the order management service.

If you are a buyer who has placed an order with one of our customers and you wish to access, correct or delete your information, please contact that retailer directly. We will assist them in responding to your request.

Information we process on behalf of our customers

When a retailer connects a sales channel to Sebity, we access only the data needed to fulfil and account for their orders:

• Order information — order number and date, items ordered, quantities, prices, taxes, discounts, shipping method and requested dispatch date.
• Recipient information — name, delivery address, and where available email address and telephone number.
• Buyer-supplied content — personalisation text, engraving details, gift messages and delivery notes provided by the buyer at the point of order.

We do not access payment card details. We do not access marketplace messages, browsing history, or any data unrelated to fulfilling an order.

Why we process recipient contact details

Recipient email addresses and telephone numbers are used for one purpose: generating shipping labels and enabling delivery notifications from the carrier.

From January 2027, Australia Post requires an accurate recipient email address or Australian mobile number on every Parcel Post and Express Post label. Australia Post may redirect an undeliverable parcel to a Parcel Locker or Parcel Collect location and notifies the recipient by email or SMS with collection details. Without these details a compliant label cannot be generated and the order cannot be dispatched.

We do not use recipient contact details for marketing. We do not add recipients to mailing lists, we do not sell or rent personal information, and we do not disclose it to any third party other than as set out below.

Who we share information with

• Carriers. Recipient name, delivery address and contact details are transmitted to the carrier nominated by the retailer, for the sole purpose of delivering that consignment.
• The retailer's own systems. Order and recipient data is written to the inventory and accounting systems the retailer has connected and authorised.
• Infrastructure providers. We use third-party hosting and database services to operate the platform. These providers process data on our instructions and are bound by confidentiality obligations.

We do not sell personal information.

Where information is stored

Sebity is operated from Australia and data is stored in Australian data centres where available. Where an infrastructure provider stores or backs up data outside Australia, we take reasonable steps to ensure comparable protection, consistent with Australian Privacy Principle 8.

How long we keep it

Order and recipient data is retained for as long as the retailer's account is active, and thereafter for the period the retailer is required to keep business records under Australian law. Retailers may request deletion of their data at any time, subject to those obligations.

Security

Access is restricted to authorised personnel and to the retailer's own authorised users. Data is encrypted in transit. Credentials and access tokens for connected platforms are stored encrypted and are never exposed to other customers. Access to production systems is logged.

Marketplace data

Where a retailer connects a marketplace account, we access that data through the marketplace's official API under the permissions the retailer grants, and we handle it in accordance with that marketplace's terms. We request only the permissions required to deliver the service. A retailer may revoke access at any time from their marketplace account, which immediately stops all further data access.

Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles you may request access to the personal information we hold about you, ask us to correct it, or complain about how it has been handled. Where the information was provided by a retailer, we will refer you to that retailer as the controller of that data and assist them in responding.

If you are in the European Economic Area or the United Kingdom, you may also have rights of erasure, restriction and portability under the GDPR.

Contact

[email protected]
Mossie Interactive Pty Ltd
Cuttlefish Parade, St Huberts Island NSW 2257, Australia

Changes

We will post any changes to this policy on this page and update the date above.