Last updated: 2 October 2026
Who we are
We are Northern Packaging Supplies, a packaging supplier based in Lalor, Victoria 3075, in Melbourne’s north. We sell cartons, moving boxes, bubble wrap, stretch film, packing tape and butchers paper by the carton or pack, and we make custom-printed and made-to-size cartons to order.
This website (northernpackagingsupplies.com.au) is run by Ramandeep, a sole trader (ABN 61 166 854 288), trading as Northern Packaging Supplies.
Small businesses with an annual turnover under $3 million are generally exempt from the Privacy Act 1988. Whether or not the Act applies to us, we handle your personal information in line with the Australian Privacy Principles, and this page is our commitment to you on how we do that.
What we collect and why
Orders and accounts. When you place an order or create an account we collect your name, billing and delivery address, email address, phone number and order history, plus your company name or ABN if you enter one. We also record the internet address (IP address) and browser you used to place the order, which helps us and our payment provider detect fraudulent orders. If you create an account, your password is stored in a scrambled form that cannot be turned back into the original — we cannot read it, and if you forget it you will need to reset it. We use this information to process, deliver and invoice your order, and to answer questions about it.
Contact form. If you use our contact form we collect your name, email address, your phone number if you give it, and your message. The notification email we receive also records your IP address and the date and time you sent it. Messages are emailed to us and are not stored on the website itself. We use them to reply to you.
Quote requests. If you request a quote we collect your name, email address and phone number, your delivery postcode, the products, sizes, quantities and printing you ask about, any artwork or drawing you attach, and your message, so we can price the job and get back to you. If you order custom-printed cartons we also keep the artwork or logo files you send us, so we can print reorders. We will delete them if you ask.
Product reviews. If you leave a product review we collect your name, email address, the review text and your IP address. Your name and the review are published on the product page for anyone to read; your email address and IP address are not. Ask us if you want a review removed.
Security logs. Our security software (Wordfence) records the IP address your connection uses, the type of browser you use and which pages were requested. We look at these logs only to spot and block attacks on the site — we do not use them to identify or profile customers.
We do not collect more than we need for these purposes. You can browse the site without telling us who you are. To place an order we need your real name, delivery address and contact details — without them we cannot deliver or invoice it.
How we collect it
We collect information directly from you when you order, register, request a quote, review a product or contact us. Security logs and the IP addresses recorded against orders, reviews and contact form messages are recorded automatically when you use the site.
Cookies
We use these cookies:
- Cart and session cookies — set by WooCommerce so your cart remembers what you have added while you shop. These are essential to the shop working.
- Login cookies — set by WordPress only if you have an account and log in.
- Review cookies — set only if you tick the box to remember your name and email when leaving a review.
- Payment cookies — set by our payment provider, Stripe (names starting
__stripe_), whose script loads on product, cart and checkout pages, to help detect fraudulent card use. - Security cookies — our security software may set a cookie to tell returning genuine visitors from attack traffic.
- Order source cookies — set by WooCommerce (names starting
sbjs_). They record how you arrived at the site (a search engine, another website, a link or a typed address), the page you first landed on, when, how many visits you have made and your browser type. If you place an order, that source is saved with the order so we can see which channels bring sales. We do not use it for advertising or share it with advertisers.
We do not use Google Analytics, Facebook Pixel or any advertising cookies. The order source cookies above are the only cookies we use to see where visitors come from. If we add an analytics tool later, we will update this page to say so. Our hosting provider, GoDaddy, also runs a performance-monitoring script on every page that sets its own cookies (_tccl_visitor, _tccl_visit and _scc_session). GoDaddy sets it, not us, and it is covered by GoDaddy’s privacy policy rather than this one.
Who we share it with
We do not sell or rent your personal information. We share it only with the parties we need to run the business:
- Stripe and WooPayments — the card payment services at our checkout. WooPayments is run by Automattic and is built on Stripe. They receive your card details, name, email address and billing address to process your payment and screen it for fraud. Stripe stores data in the United States and Australia; Automattic is a United States company.
- Australia Post and couriers — receive your name, delivery address and phone number so they can deliver your order, and your email address where the carrier offers tracking notifications.
- GoDaddy — hosts this website. The website and its database, which holds order, account, quote and review records, are stored on GoDaddy’s servers in the United States.
- Microsoft 365 — hosts our email. Contact form messages and order emails pass through it, and its servers may be outside Australia.
- Defiant Inc (Wordfence) — our security software shares details of blocked attacks, including the IP addresses involved, with Defiant’s servers in the United States, as part of its threat-detection network.
- Our bookkeeper and accountant — see sales and invoice records as part of our tax and bookkeeping.
- Legal advisers — only if there is a dispute about an order.
- Government agencies or police — where the law requires it, or where we reasonably believe it is needed to investigate fraud or a crime.
The services that hold some of your information outside Australia are GoDaddy (the website and its database), Stripe and WooPayments (payments), Microsoft (email) and Defiant (security logs of blocked requests). Our pages also load the Poppins typeface from Google Fonts, so your browser sends your IP address to Google, which may handle it in the United States. We do not send your information overseas for any other reason.
Payment security
Card details are entered into secure fields provided by Stripe. Your full card number never reaches, and is never stored on, our own server. We only ever see the card type, the last four digits and the expiry date — never the full card number or security code. Card payment is the only payment method offered at our checkout.
How long we keep it
- Order and invoice records — at least five years after the relevant tax return is lodged, as the Australian Taxation Office requires. After that we delete them unless there is a specific reason to keep a record, such as an unresolved dispute or consumer-guarantee claim.
- Contact form messages and quote requests — 12 months after our last reply, unless they led to an order, in which case they are kept with the order record.
- Artwork and logo files for custom-printed cartons — until you ask us to delete them.
- Reviews — until you ask us to remove them or the product is discontinued.
- Security logs — 30 days.
How we protect it
We use secure (HTTPS) connections across the site, store account passwords in scrambled form, keep the website software updated and run security software that blocks suspicious traffic. Card details are handled by Stripe, not by us. No system is completely secure, but we take reasonable steps to protect what we hold.
Your choices
- Access — you can ask us for a copy of the personal information we hold about you.
- Correction — account holders can update their details by logging in; anyone can ask us to correct something.
- Deletion — you can ask us to delete your account or information. We will do so unless we need to keep a record for tax or legal reasons. Stripe, our delivery partners and Microsoft keep their own records of transactions and emails, which we cannot delete for you; contact them directly if you want that.
- Marketing — we do not currently send marketing emails and have no marketing list. Order confirmations, invoices and delivery updates are not marketing; we send them to everyone who orders. If we start sending marketing email, we will only email people who have agreed to it, we will identify ourselves clearly, and every message will carry an unsubscribe link that we honour within five business days, as the Spam Act 2003 requires.
To exercise any of these, email admin@northernpackagingsupplies.com.au with the name and email address you used on your order, and your order number if you have one, so we can find your records. We will need to check you are the person the information is about — usually by replying from the email address on the order. We will respond within 30 days and will not charge you. If we cannot give you something you have asked for, we will tell you why.
Data breaches
If we discover a breach that is likely to cause you serious harm, we will tell you as soon as we can and explain what happened and what we recommend you do. We will also report it to the Office of the Australian Information Commissioner where the law requires it.
Complaints
If you are unhappy with how we have handled your information, please contact us first using the details below. We will look into it and reply to you. If you are not satisfied with our response, you can raise it with the Office of the Australian Information Commissioner (oaic.gov.au). Because we are a small business, the Privacy Act may not apply to us, in which case the OAIC may not be able to investigate. You can also contact Consumer Affairs Victoria (consumer.vic.gov.au).
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Any change to what we collect or who we share it with will be described on this page.
Contact
Ramandeep, trading as Northern Packaging Supplies (ABN 61 166 854 288)
Lalor, Victoria 3075
Phone: 0480 744 733
Email: admin@northernpackagingsupplies.com.au