1. Who we are
FIVE TWO. operates a coffee roastery and online shop from U4 71 Dickson Avenue, Artarmon NSW 2064, Australia. In this policy, “we”, “us” and “our” mean the business operating as FIVE TWO.
For privacy questions, access or correction requests, or complaints, contact coffee@fivetwo.coffee.
2. Information we collect
We may collect your name, email address, phone number, delivery or pickup details, order contents, transaction and payment references, messages you send us, and limited technical or security information generated when you use the website.
Card details are entered into the secure form supplied by our payment processor. We do not receive or store your complete card number or card security code.
3. How and why we use it
We use personal information to provide the website, process and fulfil orders, take payment, arrange delivery or pickup, send receipts and service messages, answer enquiries, prevent fraud, keep business and tax records, resolve disputes, and meet legal obligations.
For visitors in the European Economic Area, United Kingdom or Switzerland, our legal bases are performance of a contract, steps requested before entering a contract, compliance with legal obligations, and our legitimate interests in operating and securing the business. We rely on consent only where the law requires it, such as for optional direct marketing.
4. Browser storage and checkout technology
The website stores your cart in your browser so it remains available when you leave and return. A session value keeps the selected colour scheme consistent while you browse. These functions are necessary for the experience you requested and are not used for advertising or cross-site tracking.
When you open the payment step, technology from our payment processor may be loaded to tokenize and securely process card details. We do not currently use advertising cookies or third-party analytics. If that changes, we will update this policy and request consent where required.
5. Who receives information
We disclose information only where reasonably necessary to payment processors, delivery and postal providers, hosting and technology providers, professional advisers, and government or regulatory authorities. These providers may process information in Australia, the United States and other countries where they or their infrastructure operate.
Our payment services are provided by Square (Block, Inc.). Delivery information may be provided to Australia Post or another carrier used for your order. Each provider handles information under its own privacy terms and applicable law.
We use Google Workspace to send and receive order confirmations and customer service emails. These messages may contain your contact details, order contents, payment total and fulfilment information, but not your full card details.
6. Retention and security
We keep information only for as long as needed for the purposes above. Transaction and tax records are generally retained for the period required by Australian law, commonly at least five years. Enquiry and service records are deleted or de-identified when no longer reasonably needed.
We use reasonable technical and organisational safeguards, restrict access, use encrypted connections and avoid storing complete payment-card details. No internet service can promise absolute security.
7. Your rights
You may ask for access to or correction of personal information we hold. Depending on where you live, you may also have rights to deletion, restriction, portability, objection, withdrawal of consent, and to lodge a complaint with a privacy regulator. These rights can be limited by legal exceptions and record-keeping obligations.
Australian complaints may be referred to the Office of the Australian Information Commissioner. European visitors may complain to the supervisory authority where they live or work. We aim to acknowledge privacy complaints promptly and respond within 30 days.
8. International transfers and updates
Where personal information is transferred outside your country, we use the protections required by applicable law and work with providers offering appropriate contractual, technical or organisational safeguards.
We may update this policy when our services or legal obligations change. The date at the top identifies the current version.