Privacy Policy

Who we are

AT1 PRO RACE SUITS PTY LTD ("AT1", "we", "us") is based in Heathcote, NSW 2233, Australia. You can reach us at [email protected] or +61 449 556 363.

What we collect

• Order details — name, email, phone and shipping address, used only to manufacture and deliver your order.
• Measurements — body measurements you provide for made-to-measure production. Kept on file so reordering is fast; deleted on request.
• Design configurations — your suit colours, logos, decals and options, stored locally in your browser (localStorage) and in your order record. The exact configured suit design is captured as a self-contained SVG file and stored with your order so our production team can manufacture it faithfully.
• Account credentials — if you create an optional account, we store your email and a bcrypt-hashed password (passwords are never stored in plain text). Guest checkout is available without an account.
• Contact enquiries — anything you send us via the contact form or email.

Payment processing

Payments are processed by Stripe, a PCI-DSS compliant payment processor. AT1 never sees or stores your full card number — Stripe handles card data directly on their secure infrastructure. We retain a record of the transaction (amount, date, Stripe payment intent ID) for accounting and order management purposes.

What we don't do

• No advertising trackers, no data sale, no third-party marketing profiles.
• No payment card details on our servers — card data is handled entirely by Stripe.
• Photos and videos you use in the try-on feature are processed on your device and are not uploaded.

Your rights

You may request a copy, correction or deletion of your personal data at any time by emailing [email protected]. We respond within 7 days. Australian Privacy Act 1988 (APP) and GDPR (for EU customers) principles apply. You can delete your account and associated order records on request; production records may be retained as required by tax law.

Data security

Order records are stored in a managed PostgreSQL database with encrypted connections, automated backups, and access limited to the fitting and production team. Admin access is protected by password authentication and JWT sessions. Passwords are hashed with bcrypt. All traffic is served over HTTPS with HSTS enabled. Emails are retained only as long as needed to service your enquiry and order.

Data retention

Order records (including your stored suit design SVG) are retained for the manufacturing lifetime of your suit plus 7 years for warranty and tax-record purposes. Account credentials are retained until you delete your account. Contact-enquiry emails are retained for 12 months.

Changes

If this policy changes, the updated version will be posted on this page with a new "last updated" date.