Privacy policy

Casadi is a business name of Design Box Digital Pty Ltd (ABN 51 657 551 169), 711a/1 Queens Rd, Melbourne VIC 3004, Australia. In this policy, “we” means that company. Casadi is the publication. This draft explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It is not legal advice, and it is not the final notice.

What we collect

• Contact notes. Your name, email, topic and message.
• Brand applications. When a house asks us to review a product: the house name, your name, email, an optional website, the product, the season and your note.
• Advertising and partnership enquiries. The house, your name, email, an optional website, the placement you are interested in, and your note.
• Store reviews. Your name, email, a rating and the text, tied to one address. We publish the name, rating and text only after you confirm the email and an editor approves the note. The email address is not published.
• Store claims. Your name, role, work email and how you are connected to the address.
• Payments. Sponsored placements are billed through Stripe. We do not store full card numbers. In this preview Stripe is in test mode and is not armed to take a payment, so no card data is collected here. When a charge is possible, Stripe collects the billing details under its own privacy policy.
• Technical data. A hash of the network address, used only to limit how often a form can be sent, and ordinary server logs kept by the host.

Why we collect it

We collect this information to answer you, to decide whether a review, a claim or a product application should be published, to run a sponsored placement you have asked about, and to keep the forms from being flooded. We do not sell personal information, and we do not add you to a marketing list because you wrote to us. A receipt or a confirmation email is about the thing you submitted.

If you do not give us a name and email, we cannot confirm a review or reply to an application. Publishing a store review uses the name you choose to show.

Reviews, applications and sponsored placements

A store review is about one address. Editors see the email so they can check the confirmation. Readers see the approved note, not the email. A brand application is an editorial request. It is stored in the queue and is separate from advertising. An advertising enquiry is a request about a paid placement. Paying for a placement does not change a review, a rating, or whether an application is accepted. Sponsored placements are labelled on the site.

Who else handles it

The site is hosted with Cloudflare. Email is prepared for delivery through SendGrid. Payments, when they are switched on, are handled by Stripe. Those providers may hold information outside Australia, including in the United States. We use them to run the publication, and we take reasonable steps to see that they handle the information consistently with the APPs. Stripe’s privacy policy is at stripe.com/privacy.

We may also disclose information if the law requires it, or if we need to investigate a review or a claim that breaks these rules.

Access, correction and complaints

You can ask for a copy of the personal information we hold about you, and you can ask us to correct it. Write to service@casadi.co or use the contact form. We will respond within a reasonable period. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Storage and breaches

We keep a submission while the queue needs it and for as long as we may need it to deal with a complaint or a legal claim. After that we delete it or strip the details that identify you. If a breach is likely to cause serious harm, we will notify the people affected and the OAIC as the Notifiable Data Breaches scheme requires.

The publication is not directed at children.