1. Introduction & Our Commitment
Spika Pty Ltd (ABN: 57 143 530 385) ("we", "us", "our") is committed to protecting your privacy and handling your personal information in an open and transparent way. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act).
A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
2. What Is Personal Information?
Personal information is information or an opinion that identifies an individual, or from which an individual can reasonably be identified. Examples of personal information we may collect include:
• Names and date of birth
• Postal and email addresses
• Phone numbers
• Payment and billing details
• Account login credentials
• Purchase history and preferences
• Any other information you provide to us directly
3. How We Collect Personal Information
We collect personal information in a number of ways, including:
• Directly from you — when you create an account, place an order, contact us, fill out a form, or otherwise interact with us
• Through our website — spika.com.au, including via cookies and analytics tools
• From third parties — such as our payment processor, ERP system (Odoo), and other service providers, where permitted by law
• From publicly available sources
Where reasonable and practicable, we will collect personal information directly from you. If we collect your information from a third party, we will take reasonable steps to make you aware of this.
4. Sensitive Information
Sensitive information is a subset of personal information that includes information or opinions about an individual's racial or ethnic origin, political opinions, religious beliefs, health information, criminal record, and similar matters, as defined in the Privacy Act.
We will only use or disclose your sensitive information:
• For the primary purpose for which it was collected
• For a secondary purpose directly related to the primary purpose
• With your consent
• Where required or authorised by law
5. Why We Collect and How We Use Your Personal Information
We collect and use personal information to:
• Process and fulfil your orders and transactions
• Create and manage your account
• Communicate with you about your orders, enquiries, or account
• Send you marketing and promotional communications (where you have consented or we are permitted to do so)
• Improve our website, products, and services
• Comply with legal and regulatory obligations
• Detect and prevent fraud or other illegal activities
• Operate, maintain, and improve our internal systems (including via Odoo, our ERP and order management platform)
6. Direct Marketing
We may use your personal information to send you marketing communications about our products, services, promotions, and events. We use Campaign Monitor to manage and send our marketing emails.
We will only send you marketing emails where:
• You have consented to receive them; or
• We have an existing relationship with you and the communications are relevant to products or services you have previously purchased or enquired about
You can opt out of receiving marketing emails at any time by clicking the "unsubscribe" link in any marketing email we send, or by contacting us directly at contact@spika.com.au. Once you opt out, we will process your request promptly and you will no longer receive marketing communications from us.
7. Disclosure of Personal Information
We may disclose your personal information to third parties in the following circumstances:
• To our service providers who assist us in operating our business — including Campaign Monitor (email marketing), Odoo (ERP, order fulfilment, and payment management), and cloud hosting providers
• Where you have consented to the disclosure
• Where required or authorised by law (e.g., to regulatory bodies, law enforcement, or courts)
• In the event of a business merger, acquisition, or sale of assets
We take reasonable steps to ensure that third-party service providers handle your personal information securely and in accordance with applicable privacy laws.
8. Disclosure to Overseas Recipients
Some of the third-party services we use may store or process personal information outside of Australia. For example:
• Campaign Monitor operates servers in Australia and the United States
• Odoo may process data on servers located in the European Union or other jurisdictions
• Google Analytics may transfer data to Google's servers in the United States and other countries
Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles. By using our services and providing us with your personal information, you consent to the disclosure of your information to overseas recipients as described in this policy.
9. Cookies and Analytics
Cookies
Our website uses cookies — small text files placed on your device — to improve your browsing experience, remember your preferences, and analyse how our site is used. You can control or disable cookies through your browser settings, although doing so may affect the functionality of our website.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc., to help us understand how visitors interact with our website. Google Analytics collects non-personal information such as your IP address (anonymised), browser type, operating system, pages visited, time spent on pages, and referring URLs.
This information is used solely to improve our website and services. You can opt out of Google Analytics data collection by installing the Google Analytics Opt-Out Browser Add-on, available at:
https://tools.google.com/dlpage/gaoptout
10. Payment Security
We do not store your full credit card or debit card details. Payment information is processed securely through Odoo's integrated payment management system using industry-standard TLS encryption. All payment data is transmitted directly to our payment processor and is not retained on our servers.
11. Security of Personal Information
We take reasonable steps to protect your personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure. Our security measures include:
• Secure storage systems with access controls
• TLS (Transport Layer Security) encryption for data transmitted via our website
• Regular security assessments of our systems and processes
While we implement reasonable security practices, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information.
When your personal information is no longer needed for the purpose for which it was collected, we will take reasonable steps to destroy or permanently de-identify it. Most personal information held in client files will be retained for a minimum of 7 years in accordance with our legal obligations.
12. Data Breach Notification
We are subject to the Notifiable Data Breaches (NDB) scheme under the Privacy Act. In the event of a data breach that is likely to result in serious harm to any affected individuals, we will:
• Conduct a prompt assessment of the breach
• Notify the Office of the Australian Information Commissioner (OAIC)
• Notify affected individuals as soon as practicable
Notifications will include a description of the breach, the type of information involved, and recommended steps individuals can take to protect themselves.
13. Access to and Correction of Your Personal Information
Under the APPs, you have the right to access the personal information we hold about you and to request correction of any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
To request access to or correction of your personal information, please contact us in writing using the details below. We may require you to verify your identity before processing your request. We will respond to your request within a reasonable timeframe.
In some circumstances, we may be unable to provide access (for example, where providing access would be unlawful). If we refuse access or correction, we will provide written reasons.
14. Maintaining the Quality of Your Personal Information
It is important to us that your personal information is accurate, complete, and up to date. We will take reasonable steps to ensure the quality of the information we hold. If you believe the information we hold is inaccurate or out of date, please contact us as soon as possible so we can update our records.
15. Minors
Our general website services are not specifically directed at children under the age of 15. We do not knowingly collect personal information from children without appropriate parental or guardian consent.
16. Policy Updates
This Privacy Policy was last updated on 4 May 2026. We may update this policy from time to time to reflect changes in our practices, legal obligations, or for other operational reasons. The current version of this policy is always available on our website at spika.com.au. We encourage you to review this policy periodically.
Where we make material changes to this policy, we will take reasonable steps to notify you (for example, by email or by displaying a notice on our website).
17. Privacy Complaints and Enquiries
If you have any questions, concerns, or complaints about how we handle your personal information, please contact our Privacy Officer:
Spika Pty Ltd
PO Box 8038
Carrum Downs VIC 3201
Australia
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
© 2026 Spika Pty Ltd. All rights reserved.