Privacy
policy.
What we collect, why, who else sees it, and how to get it back or get rid of it. Written to be read, not to be survived.
1Who we are and what this covers
SPXTR (“we”, “us”, “our”) is a clothing, lifestyle and media brand. This policy explains how we collect, hold, use and disclose personal information, and how you can contact us, ask for access or correction, or make a privacy complaint. It covers customers, website visitors, applicants, models, ambassadors, creators, collaborators and event participants.
The legal operator of SPXTR is [legal entity name], ABN/ACN [number]. Our privacy contact is the SPXTR Privacy Contact, admin@spectercltv.com, [postal address], [phone]. SPXTR is based in Queensland, Australia.
We handle personal information consistently with the Australian Privacy Principles and the Privacy Act 1988 (Cth), and we follow the Spam Act 2003 (Cth) for marketing messages. Nothing here limits a right you have under law.
Browsing the site, buying something or applying does not by itself give blanket consent to every use of your information. Where consent is needed we ask for it separately.
2What we collect, and when
We collect only what we reasonably need. Where a field is required we say so on the form, and we explain what happens if you leave it out — usually that we cannot deliver an order or assess an application.
If you buy something
Your name, email, phone number and delivery address, what you ordered, what you paid, and any correspondence about it. We never see or store your card number. Payment is taken on Stripe’s own checkout page; we receive only the result and the contact and delivery details you gave there.
If you apply as an ambassador or a model
This is the most detailed thing we collect, so it is set out in full:
- Your full legal name, preferred name, date of birth, pronouns, email, mobile number and the suburb, city and state you are based in
- Whether you can legally work in Australia, whether you have reliable transport, and your availability
- Your answers about what you do, your interests, clubs or teams, and why you want to represent SPXTR
- Your social media handles, approximate following, and links you give us
- If you apply as a model: height, clothing and shoe size, hair and eye colour — what wardrobe needs, and nothing more
- Photographs you attach or link to
- Any licences or clearances you tell us you hold (we record that you hold one, never the number)
- Your answer about outstanding legal matters or criminal history
- The confirmations you tick, your typed name and the date, as a record of what you agreed to
Criminal history is sensitive information under the Privacy Act. We ask because ambassadors and models represent the brand in public, at events and around other people, including on occasion young people. You give it with your consent by sending the application. It is seen only by the people assessing applications, it is never published, and it is not shared with anyone outside SPXTR.
Applications are open to people aged 18 and over only. Your date of birth is checked when you apply and an application from anyone under 18 is refused outright.
Photographs you send with an application are held in private storage. They are not public, they are not published anywhere by sending them, and separate permission is obtained before any image is used. We do not run facial recognition or any other biometric process over them.
If you ask to be told when we open
Your email address, nothing else.
If you leave a review
Your first name, your rating and words, and any photos you attach — all of which appear publicly on the product page once approved.
When you simply visit
Our pages are served as files and we do not set tracking cookies of our own. Two things are kept in your own browser and never sent to us: your cart, and which region you picked for shipping. When you send an application or join the launch list we store a one-way scrambled version of your IP address — it cannot be turned back into an address, and we use it only to stop the same person flooding the form.
3Why we use it
To take payment and send you what you bought; to answer you; to assess applications and arrange shoots, collaborations and events; to manage agreements and pay people; to publish media we have permission to publish; to keep people safe; to send messages you have agreed to receive; to improve the site; to prevent fraud; and to meet our tax, accounting and legal obligations.
We use information for the purpose we collected it for. Anything else needs a lawful basis — usually your consent, or a related purpose you would reasonably expect. We do not sell personal information, ever, to anyone.
4Email we send, and how to stop it
We send two kinds of email.
About something you did — your order confirmation, shipping notice, your application reference and its progress, your welcome pack if you join the crew. These are part of the thing you asked for and continue for as long as it is running.
Everything else — the launch announcement, a reminder about a cart you left behind, and an invitation to review something you bought. Every one of these carries a one-click unsubscribe, honoured immediately and in any case within five working days, with no login and no fee. You can also email admin@spectercltv.com and we will do it for you.
Unsubscribing from those does not stop messages needed to manage an order or an application. We keep a short suppression record of addresses that have opted out, for the sole purpose of not writing to them again.
5Who else can see it
We use a small number of providers, and only for what they are needed for:
| Who | What they handle | Where |
|---|---|---|
| Supabase | Our database and file storage: orders, applications and their photographs, reviews, the launch list, admin accounts | [confirm your project region] |
| Stripe | Payments. Card details are given to Stripe directly and never reach us. Also holds the discount codes we create for crew members, which carry the person’s first name | United States and globally |
| Resend | Sends our email. Holds the address, subject and content of messages we send you, and delivery and bounce records. Opens and clicks are not tracked | Tokyo, Japan (the company is United States based) |
| GitHub Pages | Serves the website files. Sees the usual web request information, including IP addresses | United States and globally |
| Cloudflare | Only if bot protection is switched on for the admin login | Globally |
We may also disclose information to delivery and fulfilment services, photographers and production teams, professional advisers, insurers and authorities, where that is necessary and lawful. We limit what each receives to what the job needs.
Because these providers operate overseas, your information may be handled outside Australia. Before disclosing to an overseas recipient we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, and we remain accountable for it.
6Analytics and tracking
We do not use advertising pixels, we do not build advertising audiences, and we do not share your information with advertising platforms.
[what measures visits, or "Nothing"]
Our email provider can record whether a message was delivered, opened or clicked. [whether email opens and clicks are recorded]
7Photographs, filming and published content
Identifiable photographs, video, voice and the names or handles beside them are personal information. Before anyone takes part in a campaign we explain what is being collected, what it will be used for and where it will appear, and we use a suitable model, ambassador or creator agreement. This policy does not by itself grant any image rights.
Content published to our site or social accounts can be seen, copied and shared anywhere in the world, and platforms handle it under their own policies. We explain that before asking permission.
At events we display filming notices and give a contact for concerns. Being present is not treated as consent to every advertising use.
You can withdraw consent to future uses, or ask us to take something down. We will explain what we can and cannot do — printed material and copies other people have made are outside our control — and we act on what is within ours.
8How long we keep it
We keep information only as long as we reasonably need it, or as long as the law requires.
- Orders and payment records — seven years, which is what Australian tax law requires
- Applications that are not accepted — [choose a period: 12 or 24 months is usual], then deleted, unless you ask us to keep you in mind for longer
- Photographs sent with an application — deleted with the application
- Crew records — for as long as the arrangement runs, then as long as needed for tax and agreements
- The launch list — until you unsubscribe
- Suppression records — kept indefinitely, because their only purpose is to stop us contacting you again
When something is no longer needed we destroy it or de-identify it. Backups are deleted on their own schedule; we do not promise instant removal from every copy.
9Keeping it safe
Our database refuses to hand out personal information to the public at all: orders, applications, the launch list and admin accounts can only be read by a signed-in administrator. Administrator accounts require a second factor at login, every change requires the password to be entered again, and every change is written to a log that nobody — including us — can edit or delete.
Application photographs sit in private storage that is not reachable from the web; an administrator opens them through a link that expires after five minutes. Card details never touch our systems.
No system is perfectly secure. If you think your information has been exposed, tell us at admin@spectercltv.com.
If a data breach happens we contain it, assess the risk and fix the cause. Where the Notifiable Data Breaches scheme applies we notify the OAIC and the people affected, as the law requires.
10Getting a copy, fixing it, or deleting it
Email admin@spectercltv.com and tell us what you need. We may ask for enough proof of identity to be sure we are talking to the right person, but no more than that.
We aim to respond within 30 days, and there is no charge for asking or for a correction. If we have to refuse, we will explain why in writing and tell you how to complain.
You can ask us to delete your information or withdraw consent. Australian law does not give an unlimited right to erasure — we have to keep order records for tax, for instance — so we will tell you plainly what we can delete and what we must keep, and why.
11Complaints
Send complaints to admin@spectercltv.com or the postal address above. We aim to acknowledge within five working days and respond properly within 30 days. Raising something will never be held against you.
If you are not satisfied, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au. They will usually expect you to have come to us first. Complaints about marketing email can also go to ACMA at acma.gov.au.
12Young people
Applications are open only to people aged 18 and over, and this is enforced when the form is submitted, not just asked.
If anyone under 18 takes part in a shoot or an event, we obtain authorisation from a parent or guardian and use agreements suited to that. We collect as little as possible to confirm age and we do not collect identity documents as a matter of course.
13Automated decisions and AI
No decision about you is made by a computer. Applications are read and decided by people. Status changes are made by a person pressing a button, and the email that follows is simply a message about that decision.
We do not put application content, photographs or customer information into AI services, and we do not generate new likenesses from anything you send us. If that ever changed we would assess it properly and tell you first.
14Other sites, and changes to the business
Sites and services you choose to use yourself have their own privacy practices. That does not remove our responsibility for what we collect or for providers acting on our behalf.
If the business is ever restructured, merged or sold, we will assess whether disclosing personal information is necessary and lawful, apply confidentiality and security conditions, and give any notice the law requires. A change of ownership does not by itself authorise new uses of your information.
15Changes to this policy
We review this when our practices or the law change. The current version is always on this page, free. An update does not retrospectively authorise a new use of information, and it does not replace consent the law requires us to obtain.
16Contact
SPXTR Privacy Contact
Email: admin@spectercltv.com
Legal operator: [legal entity name]
ABN/ACN: [number]
Postal address: [postal address]
Telephone: [phone]
Website: spxtr.com