Legal & Policies
Data Protection
Last updated: 26 June 2026
English is the controlling legal version.
This policy explains how Potato Mart safeguards the personal information described in our Privacy Policy.
Our approach to data protection
Potato Mart is committed to handling personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy sets out the practical safeguards we apply to the information described in our Privacy Policy.
How we secure your data
We encrypt information while it travels between your device and our systems, limit access to personal information to staff and contractors who need it to do their job, and monitor our systems for unauthorised access or unusual activity.
Where your data is stored
Personal information is primarily stored and processed using cloud infrastructure. Some technology and payment providers we rely on may store or process information outside Australia; where this occurs, we take reasonable steps to ensure the overseas recipient handles the information consistently with the Australian Privacy Principles.
Retention and deletion
We keep personal information only for as long as it is needed for the purpose it was collected, including to meet business, tax, accounting, dispute, and legal obligations. Information that is no longer required is securely deleted or de-identified.
Your rights
You may ask us to access, correct, or delete personal information we hold about you. We will respond within a reasonable time and may need to verify your identity first. Some requests may be limited where retention is required by law.
Data breach response
If we become aware of a data breach likely to result in serious harm, we will investigate, contain the breach, and notify affected individuals and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.
Third-party processors
Some personal information is processed by trusted third parties on our behalf, such as payment processors that handle card transactions and cloud hosting providers that store our systems and data. These providers may only use the information to deliver services to us.
Contact for data requests
Email info@potatomart.com.au or write to A7/2A Westall Rd, Springvale VIC 3171 (Hallmarc Business Park) to make a data access, correction, or deletion request.