Data Retention Policy

1. Purpose

This policy sets out how long Ozmuro Pty Ltd (ABN 46 699 269 862) retains personal and business data collected through the Ozmuro platform, and how that data is deleted when no longer needed.

2. Retention Periods

We retain data for the periods below.

Order and recipient data

• Retention period: 7 years from order date
• Reason: Australian tax record-keeping requirements (Tax Administration Act 1953)

Buyer billing details

• Retention period: 7 years from order date
• Reason: Australian tax record-keeping requirements

Brand account data

• Retention period: duration of account + 30 days after closure
• Reason: service provision

Brand product images and assets

• Retention period: duration of account + 30 days after closure
• Reason: service provision

Shopify access tokens

• Retention period: deleted immediately on disconnection
• Reason: security

Authentication logs

• Retention period: 90 days
• Reason: security monitoring

Support correspondence

• Retention period: 2 years
• Reason: dispute resolution

3. Deletion Process

When a retention period expires:

• Personal data is permanently deleted from our primary database
• Backups containing that data are overwritten within 30 days of the scheduled deletion date (subject to Supabase backup rotation)
• We do not archive or transfer data to third parties prior to deletion

4. Account Closure

When a brand administrator closes their account:

• Access to the Platform is removed immediately
• Brand data and uploaded assets are deleted within 30 days
• Order and recipient data is retained for 7 years as required by law, then permanently deleted
• The brand may request a data export prior to closure by contacting hello@ozmuro.com

5. Data Subject Requests

Where an individual requests deletion of their personal data under the Australian Privacy Act 1988, we will delete their data unless retention is required by law (e.g. order records within the 7-year tax retention period). In such cases we will inform the individual of the legal basis for continued retention.

6. Review

This policy is reviewed annually or whenever there is a material change to our data practices.

7. Contact

For questions about this policy contact hello@ozmuro.com.