Privacy policy

The short version: browsing this site collects nothing about you, it uses no tracking cookies, and we never sell or share anything. If you send us an enquiry, we keep it encrypted and use it only to reply. The rest of this page explains that properly.

Who we are

This website is run by Endcap Labs, based in Victoria, Australia (“we”, “us”). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), whether or not the Act strictly applies to a business our size.

Questions, requests or complaints: privacy@endcaplabs.com.au.

What we collect

Nothing that identifies you, from the website itself

Browsing the site doesn’t send us anything about you: there are no accounts and no advertising or tracking scripts. The only thing that sends us your details is the enquiry form, if you choose to use it (below). The interactive demos run in your browser: the shops, customers, orders, stock and emails in them are made up, anything you do in them stays on your device, and no email is ever sent from them.

The stock demo’s camera

The scan button asks your browser for permission first. The video is read for barcodes on your device only: no image, video or barcode is sent to us or anyone else, and it all stops when the scanner closes or you leave the page.

Settings stored on your own device

The site keeps three small settings in your browser so it behaves the way you left it:

• Your motion choice (the “Motion on/off” switch in the footer), kept until you change it or clear your browser data.
• Whether you skipped the demo walkthrough, and whether the opening animation has already played, both kept only until you close the tab.

These never leave your device, contain nothing about you, and aren’t cookies. Because they are strictly needed for the site to work as you’d expect, they don’t require a consent banner.

Standard server logs

Like every website, the server that delivers these pages records basic technical details of each request: your IP address, browser type, the page asked for and the time. Our hosting provider, Railway, keeps these logs for a limited period to run and protect the service. We only look at them to fix problems or deal with abuse.

Visit statistics

We don’t currently use any analytics. If we add visit counting, it will be a cookieless service that collects no personal information, and this page will say so before it starts.

If you use the “Tell us what to build” form

The form at the bottom of the home page asks for:

• what you’d like built, your type of shop and, optionally, what systems you use and how many orders you handle;
• optionally, a description of the problem, how you handle it now, and links to examples you like;
• your name and email address, and optionally your business name and phone number.

We use it only to reply to you and put together a demo for you. You tick a box to agree to that before anything is sent. Product news is a separate, optional box; we only send it if you tick that too, and you can unsubscribe at any time.

Your enquiry is stored in a database run by our hosting provider, Railway (servers in the United States), with your personal details encrypted before they’re saved. We’re notified of each enquiry by email through Resend, an email delivery service based in the United States that sends our email from servers in Japan. Only we can read it. We keep enquiries for up to 24 months, then delete them, or sooner if you ask.

If you email us

We’ll have your email address and whatever you write, and use it only to reply.

How we use it

Only to run and secure the website, and to reply to you. We don’t:

• sell, rent or trade personal information, ever;
• use it for advertising or build profiles of visitors;
• send you marketing unless you’ve clearly agreed to it; every marketing email identifies us and has a working unsubscribe, as the Spam Act 2003 requires.

Where it’s kept, and who else sees it

The website is hosted by Railway, whose servers are located in the United States, so server logs are stored overseas. We use service providers only to run the site, and only where they are bound to protect the information and use it for that purpose alone. We’ll share information with anyone else only if the law requires it.

Keeping it secure

The site is served only over encrypted HTTPS connections and sends security headers that stop it being embedded in other websites or loading content from elsewhere. Anything we collect in future will be limited to what’s needed, protected in storage, accessible only to the people who need it, and deleted when it’s no longer needed. No system is perfectly secure; if a breach ever put your information at risk of serious harm, we would tell you and the Office of the Australian Information Commissioner as the law requires.

Your rights

You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@endcaplabs.com.au and we’ll reply within 30 days. There’s no charge.

Complaints

If you’re unhappy with how we’ve handled your information, email us first and we’ll try to put it right within 30 days. If you’re still not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Children

This site is for businesses and isn’t aimed at children. We don’t knowingly collect information from anyone under 18.

Changes to this policy

When what the site does changes, this page changes first, and the date at the top is updated. If a change affects information we already hold about you, we’ll tell you directly.