Privacy policy

Last updated: June 16, 2025

National Archives Store: Privacy Policy

This Privacy Policy outlines how the National Archives Store collects, uses, and discloses your Personal Information when you visit and make a purchase or donate through our website shop.naa.gov.au (the "Site").

1. Collection of Personal Information

We collect various types of Personal Information, which we categorise as:

  • Device Information: When you access the Site, we automatically gather information about your device, including your web browser, IP address, time zone, and certain cookies installed on your device. As you navigate the Site, we also collect data on the individual web pages or products you view, the websites or search terms that referred you to the Site, and your interactions with the Site.
  • Order Information: When you make or attempt to make a purchase through the Site, we collect details such as your name, billing address, shipping address, payment method, email address, and phone number. Please note that your payment details are processed directly by our payment gateway provider, Shopify Payments, and we do not store or have direct access to these details.

For the purpose of this Privacy Policy, "Personal Information" refers to both Device Information and Order Information.

2. Use of Personal Information

We use the collected Personal Information for the following purposes:

  • Order Fulfilment: To process and fulfil orders placed through the Site, which includes arranging shipping, and providing invoices and order confirmations.
  • Communication: To communicate with you regarding your order, membership, donation or enquiry.
  • Risk and Fraud Screening: To screen orders and Device Information for potential risk or fraudulent activity, particularly using your IP address.
  • Marketing and Optimisation: In accordance with your expressed preferences, to provide you with information or advertising related to our products and services. We also use Device Information to improve and optimise our Site, generate analytics on customer behaviour, and assess the effectiveness of marketing campaigns.

3. Sharing Your Personal Information

We share your Personal Information with third parties to facilitate the uses described above. These include:

By proceeding to place an order with the National Archives Store online, you acknowledge and consent to your personal information being disclosed to overseas recipients (e.g., Shopify, located in the USA). In deciding whether to proceed you should be aware that these overseas recipients may not be bound by Australian Laws to the same extent, and in particular that Australian Privacy Principle (APP) 8.1 in Sch 1 to the Privacy Act 1988 (Cth) (obliging National Archives to take reasonable steps to ensure the overseas recipient does not breach the APPs) does not apply.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link at the bottom of each email or by sending an email to shop@naa.gov.au.

4. Your Rights

We are committed to ensuring you can exercise your rights concerning the Personal Information you provide to us:

  • Withdrawal of Consent: Where we rely on your consent for processing your Personal Information, you have the right to withdraw that consent or unsubscribe from our services at any time. Instructions for withdrawal are provided at the point of data collection.
  • Access: You can request access to the Personal Information we hold about you by contacting our Privacy Team (details below).
  • Correction/Update: You can request that we update your Personal Information if it changes.

5. Data Retention

When you place an order through the Site, we will retain your Order Information for our records for a period of 7 years after the transaction. After this period, your Personal Information will be securely disposed of.

6. Security of Your Personal Information 

All Personal Information provided to the Archives Store is stored securely, both physically and electronically, in accordance with our policies. Our store is hosted on Shopify, and your Personal Information is stored outside Australia, specifically in the USA. Further information regarding Shopify's security measures is available on Shopify’s Security page.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons.

8. Contact Us

For more information about our privacy practices, questions, or complaints, please contact the National Archives' Privacy Officer:

Privacy Officer National Archives of Australia PO Box 4924 Kingston ACT 2604

Email: privacy@naa.gov.au Telephone: 02 6212 3600