Privacy Policy — iFix Mildura

1. Information We Collect

We collect the following personal information when you use our website:

• Full name, email address, phone number and delivery address when you book a repair or purchase a pre-owned iPhone
• Device information including make, model and description of fault
• Payment information processed securely by our payment provider — we do not store your card details on our servers
• Photos of your device uploaded for repair assessment or warranty claims
• IP address, browser type, device information and user agent collected automatically when you visit our website or complete any transaction
• Communications you send us via email or contact forms
• Membership information including membership tier, billing cycle, payment history, device serial numbers and IMEI numbers registered to your account, accessory entitlement usage, complimentary promotional entries, referral code, and referral relationships when you join the iFix Mildura membership program
• Repair history including device models repaired, repair types, dates, costs, and warranty records
• Referral data including your unique referral code, the codes you have used, and the membership accounts connected to your referrals
• Consent and compliance data including your IP address, device information, browser details, and the date and time you accepted our Terms & Conditions and membership signup checkboxes. This information is recorded electronically at the time of signup and retained for legal and compliance purposes
• Photos you upload when buying a gift for someone, including any personal photo you choose to add to the gift card, and the recipient's name, email address and mobile number that you give us so we can deliver it
• Mobile numbers and message records for the text messages we send about your repair or membership, including delivery receipts and any reply you send us
• Member app information including the device model and operating system, the sign-in sessions on each device, and a push notification token if you turn notifications on
• Tracking portal sign-in records including the one-time codes we send, when they were used, and the browser session that resulted
• In-store purchase history from our point-of-sale system, including what was bought, the amount paid and any refund, matched to your customer record
• The state or territory on your membership account, used to determine eligibility for prize promotions
• Identity documents you send us to claim a prize, stored privately and never shown publicly
• Your date of birth, where we need it to confirm you are old enough to hold a membership or claim a prize, and to give you your birthday membership benefit in your birthday month
• Payment records for each transaction — the amount, the date and the last four digits of the card. Full card numbers and card security codes are never stored by us; they go directly to our payment processor

2. How We Use Your Information

We use your personal information to:

• Process and manage your repair bookings and pre-owned iPhone orders
• Generate and send prepaid postage labels via Australia Post
• Send you booking confirmations, repair status updates, invoices and warranty information
• Process payments securely through our payment provider
• Respond to warranty claims and customer service enquiries
• Improve our website and services
• Comply with legal obligations
• Manage your membership account and deliver membership benefits including repair discounts, accessory entitlements, and complimentary promotional entries into the monthly member giveaway
• Administer the monthly member giveaway including automated selection of winners, notifying them by email, and publishing winner details on social media and our website in accordance with our Terms & Conditions
• Send membership transactional emails including welcome emails, tax invoices, payment failure notices, benefit activation reminders, and monthly member giveaway results
• Detect and prevent fraud, abuse of membership benefits, and multiple account creation
• Send direct marketing communications including member deals, prize announcements, and seasonal offers. You may opt out at any time using the unsubscribe link in any email or by contacting us directly
• Administer tier upgrades and downgrades including updating payment subscriptions and reseeding membership entitlements
• Record and retain your consent to our Terms & Conditions and membership agreement for legal compliance and dispute resolution purposes including payment dispute resolution
• Deliver a gift you have bought to the person you nominated, including sending them the photo and message you chose
• Send you one-time codes so you can sign in to the tracking portal or the member app, and keep a signed-in device remembered until you sign it out
• Send push notifications to the member app where you have turned them on
• Link the bookings, purchases and membership belonging to the same person, using the email address and mobile number, so your repair history and any member discount are recognised whether you book online, walk in or mail a device to us

3. Who We Share Your Information With

We share your personal information only with the service providers who help us run the business, and only with what each one needs:

• Payment processors — Stripe for online payments, and Square for in-store payments and receipts
• Postal and delivery services — Australia Post, for prepaid labels and for delivering devices and prizes
• Messaging and email services — for the emails and text messages described in this policy, including your replies
• Cloud hosting and secure backup — for storing your records safely
• Website security services — to protect our site and forms from abuse
• Address lookup — for checking delivery addresses
• The Apple and Google app stores — for our app, including delivering a notification to your phone if you have notifications turned on
• Social media platforms — only where you have agreed to a winner announcement
• Specialist repairers — where board-level, data or other specialist work on your device is carried out for us, and only the details needed to do that work
• Regulators, courts, insurers and our professional advisers — where a disclosure is required or authorised by law, needed for an insurance claim, or needed to obtain legal or accounting advice

Each provider receives only what it needs and is bound to protect your information. We do not sell your information, and we do not share it for marketing purposes without your consent.

4. Data Storage and Security

Your personal information is stored securely. We use encrypted connections (HTTPS), strict access controls and regular security monitoring. Photos and documents you send us are held in private storage that is never publicly browsable — when a photo needs to be shown to you or to our staff, it is opened through a link that expires shortly afterwards. Full card numbers and card security codes are never stored by us — they are handled entirely by our payment processor. We do keep the transaction record: the amount, the date and the last four digits of the card.

5. Cross-Border Disclosure of Personal Information

Our systems are hosted in Singapore and Australia. Our providers may also store or process information in the United States, Ireland and Sweden. We take reasonable steps to ensure any overseas provider handles your information in line with the Australian Privacy Principles. We cannot guarantee that foreign laws will provide the same level of protection as Australian privacy law.

This disclosure is made in accordance with Australian Privacy Principle 8.

6. Giveaways, Prizes and Publicity

This section applies to every promotion we run — the monthly member giveaway, the annual giveaway and instant-win (Snap) prizes. We publish only the minimum the promotion rules require: if you win, your suburb and your name are published at ifixmildura.com.au/winners and in the winner announcement on our Facebook and Instagram pages — your first name and last initial (e.g. Sarah W. from Mildura), or your full name where the prize is worth more than $1,000, as promotions regulators expect for prizes of that value. We never publish your email address, phone number or street address. By participating in the membership program you acknowledge and accept that this information will be published if you win. Anything beyond that minimum — a photo, a video or a testimonial — is asked for separately, is entirely voluntary, and has no bearing on your prize.

• If you collect your prize in person at our Mildura store, we may ask whether you would be happy to take a photo with the iFix Mildura team and your prize for use on our social media pages. That is the separate consent described above: entirely voluntary, withdrawable at any time, and with no bearing on your prize entitlement.
• Entry, giveaway and winner records for all giveaways are retained for a minimum of 3 years in accordance with Victorian regulatory requirements.
• Winner identity documents (photo ID uploads) are stored privately and used only to verify the claim. The document is deleted the moment our staff mark the identification as verified, and an audit line records the date, time and staff member. If a claim is disqualified, the document is deleted when that decision is recorded. In every case, any document still held 30 days after upload is deleted automatically. Only the outcome — 'ID verified: yes' — is kept on the claim record.

7. Consent and Compliance Records

When you join the iFix Mildura membership program, we electronically record your acceptance of our Terms & Conditions and membership agreement, the date and time of your acceptance, your IP address and device and browser information at the time of signup, and confirmation that all required signup checkboxes were completed.

This information is retained for the life of your membership and for 7 years after cancellation. It may be used to verify your agreement in the event of a payment dispute, chargeback claim, or legal proceeding.

8. Minors and Young People

Our repair services are available to customers of all ages. Our membership program is restricted to persons 18 years of age or older. You must be 18 years of age or older to purchase or hold an iFix Mildura membership. If we become aware that we have collected personal information from a person under 18 years of age in connection with our membership program, we will take steps to delete that information promptly. Parents or guardians who believe we hold personal information about a child under 18 may contact us at repairs@ifixmildura.com.au to request deletion.

9. Notifiable Data Breaches

iFix Mildura complies with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). In the event of an eligible data breach that is likely to result in serious harm to individuals whose information is involved, iFix Mildura will notify affected individuals as soon as practicable, notify the Office of the Australian Information Commissioner (OAIC), and take immediate steps to contain the breach and prevent further harm.

If you believe your information held by iFix Mildura has been compromised please contact us immediately at repairs@ifixmildura.com.au or 0427 507 888.

10. AI-Generated Pricing

For certain repair types and pre-owned device pricing, we use artificial intelligence technology to estimate costs based on current market data. Only your device model information is used in this process. No personally identifiable information such as your name, email or address is used in AI pricing estimates.

11. Cookies and Tracking

Our website uses cookies only to make it work. They keep your place while you are booking, keep a payment secure, allow address lookup, and remember a device you have signed in on — 12 months for a booking, and 30 days for the tracking portal and member sign-in. These are read only by our own website, never by anyone else. We do not use advertising or tracking cookies, and we do not run website analytics that profile you. You can control cookies through your browser settings, though turning them off will stop parts of the site working, including payment.

12. Access, Correction and Your Rights

You can ask us for a copy of the personal information we hold about you, ask us to correct anything inaccurate or out of date, ask us to delete your information subject to the records we must keep by law, and make a complaint about how we handle it. Email repairs@ifixmildura.com.au. We will confirm your identity before releasing anything, respond within 30 days, and charge nothing for it. If we refuse a request in whole or in part, we will tell you in writing why and how to complain about that decision. You can opt out of promotional emails and texts at any time using the unsubscribe link or by replying STOP; messages about an active repair, order or membership are part of the service and continue.

To exercise any of these rights please contact us at repairs@ifixmildura.com.au.

13. Data Retention

We keep your personal information only as long as we need it to provide our services and to meet our legal obligations.

• Tax invoices, credit notes and financial records, including gift purchases, are kept for 7 years as Australian taxation law requires.
• Repair and order records are kept for 7 years, along with the device serial or IMEI numbers recorded on them.
• Membership records, including entitlement usage and your recorded acceptance of our terms, are kept while your membership is active and for 7 years after it ends.
• Giveaway entry and winner records are kept for at least 3 years as Victorian regulations require.
• Identity documents sent to claim a prize are deleted as soon as the identification is verified, or when a claim is disqualified, and in every case any document still held 30 days after upload is deleted automatically. Only the outcome is kept.
• Repair and warranty photos are kept with the job record they belong to.
• Gift photos are kept for the life of the gift and deleted once it has been redeemed, cancelled or expired.
• Text message and email records, including delivery receipts, are kept for 180 days, after which only monthly totals remain.
• Sign-in records for the tracking portal and member app are kept for 180 days; a session ends when you sign out or when it lapses.
• Secure backups are kept for 30 days and then overwritten, so information you have asked us to delete can persist in a backup for up to 30 days before it is gone.
• Everything else — anything not listed above — is deleted or de-identified when your membership or customer record is closed.

You can ask us to delete your personal information at any time by emailing repairs@ifixmildura.com.au. Deletion and retention work together: we delete everything we are free to delete, and we keep only the records in the list above, for the periods stated and for the legal duty named against each — company and taxation record-keeping for invoices, promotions regulation for giveaway records, and security monitoring for logs. We tell you in writing what was deleted, what was kept and why. The delete option in the member app ends your membership, signs out every device and removes your personal details, device registrations and perk history; it cannot remove the tax invoices, repair records and giveaway records the law requires us to keep for the periods above.

14. The Member App, Text Messages and the Tracking Portal

The member app and the tracking portal both sign you in with a one-time code sent to the email address or mobile number we already hold for you. We keep a record of the devices signed in to your account so you can see them and sign any of them out. You can remove a device, or sign out everywhere at once, from the app or the portal at any time.

• Push notifications are optional. If you turn them on, we store a notification token for that phone so the message can reach it. Turning notifications off in your phone settings stops them.
• Any Face ID, Touch ID or passcode lock is provided by your phone. We never receive your fingerprint or face data.
• Text messages about your repair or membership are part of the service. Marketing texts can be stopped by replying STOP, and stopping them never affects your service messages.
• The member app has a delete option that ends your membership, signs out every device and removes your personal details, device registrations and perk history, except for the tax and repair records we must keep by law.

15. Third Party Websites

Our website may contain links to third party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal information.

16. Contact Us

Our Privacy Officer looks after privacy enquiries and complaints. We acknowledge a complaint within 5 business days and respond within 30 days. Contact:

• Privacy Officer, iFix Mildura Pty Ltd ACN 675 768 742, as trustee for the Chisalita Family Trust, ABN 78 517 705 249, trading as iFix Mildura
• 7/840 Fifteenth Street, Mildura VIC 3500
• Email: repairs@ifixmildura.com.au
• Phone: 0427 507 888
• Monday to Friday: 9:00am — 5:00pm
• Saturday: 9:00am — 1:30pm
• Sunday: Closed

If you are not satisfied with our response to a privacy complaint you may contact the Office of the Australian Information Commissioner at oaic.gov.au, phone 1300 363 992, or GPO Box 5218, Sydney NSW 2001.

17. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available at ifixmildura.com.au/privacy. We encourage you to review this policy periodically.