This policy explains how Sonar Technologies International Pty Ltd
(ABN 69 615 252 143), trading as SonarNext, handles personal information. We
handle personal information in accordance with the Privacy Act 1988 (Cth) and
the Australian Privacy Principles.
Effective 24 August 2026. Last updated 9 September 2026.
What we collect
- Order information — your name, email address, phone
number, delivery address and billing address, what you ordered, and the
history of your orders and returns. - Account information — if you create an account, your
email address, a password (stored only as a hash, never in readable form)
and your saved addresses. - Unfinished checkout information — the items in your
cart and the contact, billing and delivery details you enter during
checkout may be saved before you place an order, to restore your cart and
help you complete checkout. - Payment information — see “Payments” below. We do not
collect or store your full card number, expiry or security code. - Quote requests and enquiries — the contact details and
message you send us. - Product reviews — if you review a product you have
bought, the review and the name you post it under are published on the
product page. - Technical information — our servers record the IP
address, browser and pages requested for each visit, in order to run and
secure the site. - Marketing consent — if you subscribe, the email address
you gave and the consent and unsubscribe record.
You can browse the store without giving us personal information. We need
your name, contact details and delivery address to accept and deliver an
order.
Why we collect it
To take, process, deliver and support your order; to issue tax invoices and
meet our record-keeping obligations; to handle returns, warranty claims and
enquiries; to help you resume an unfinished checkout; to detect and prevent
fraud; to run and improve the site; and, if you subscribe, to send marketing
emails.
Payments
Card payments, including Apple Pay and Google Pay where offered at checkout,
are processed by Stripe. Your card
details are entered into fields hosted by Stripe and are sent directly to
Stripe — they do not pass through, and are not stored on, our servers. We
receive from Stripe only what we need to reconcile the order: the outcome, the
payment reference, the card brand and last four digits, and any error code.
Stripe handles your payment information under its own privacy policy, and
Stripe is located outside Australia, so your payment information is disclosed
overseas (including to the United States). Stripe’s privacy policy is at
stripe.com/au/privacy.
If PayPal is offered at checkout and you choose it, PayPal handles the account,
payment and device information needed to complete and protect the transaction
under the PayPal Privacy Statement.
Where you pay with Apple Pay or Google Pay, the wallet provider also handles
your information under its own terms.
For bank-transfer orders, we use your order and payment-reference details
to issue the payment invoice and reconcile the funds received. We do not ask
for your online banking password or login details.
Address suggestions at checkout
To help you enter your address accurately, our checkout offers Australian
address suggestions using Google Maps Platform. When you type in an address
field, the characters you type are sent to Google to return matching
suggestions; when you pick one, Google returns the full address. Google handles
that data as a data controller under the
Google Privacy Policy, and
use of the feature is subject to the
Google Maps Platform
Terms of Service, which include the
Google Maps
and Google Earth Additional Terms of Service. Google is located outside
Australia, so this involves an overseas disclosure.
Suggestions send the text you type to Google before you select a result.
Typing an address without selecting a suggestion does not prevent that
disclosure. If you would rather not send your address to Google, contact us by
phone or email to arrange your order before entering it at checkout.
Cookies and analytics
The store sets cookies that are necessary for it to work: they keep your
cart, keep you signed in, and protect forms against cross-site request
forgery. These cannot be turned off without breaking the checkout.
We use Google Analytics 4 to measure how the store is used, including pages
viewed, products viewed, checkout starts and completed purchases. Google may
use cookies and receive technical information such as your IP address, device
and browser information. We do not send Google your name, email, phone number,
billing address or delivery address through our analytics events. Analytics
event data is retained for 14 months and may be processed overseas, including
in the United States. Google explains its handling in the
Google Privacy Policy. You
can prevent this collection by blocking analytics cookies or JavaScript in your
browser, or by using the
Google Analytics opt-out
browser add-on.
We do not use Reddit, Snapchat or other advertising pixels.
Unfinished carts and checkout reminders
We use CartBounty on our store to save unfinished carts and remember the
checkout details described above. If you provide contact details, we may use
them to send a reminder with a link to resume your checkout. This does not
subscribe you to our newsletter. You can opt out of cart reminders using the
unsubscribe link in the reminder or by contacting us.
Unfinished-cart information is stored in our store database and is covered
by the security, retention and deletion provisions below. Contact us if you
would like us to delete your unfinished-cart information.
Marketing emails
We keep the marketing email address and consent record with the order in our
store database until we select an email provider. You subscribe by selecting
the optional, initially unticked marketing checkbox at checkout. No confirmation
email is sent. Placing an order or accepting the Terms does not subscribe you.
When we begin sending marketing messages, they will come from
[email protected], identify
SonarNext and include an unsubscribe link. We action unsubscribe requests
within five business days.
Cloudflare Email Sending delivers transactional messages such as order
confirmations, invoices and password resets. Google Workspace hosts the
support mailbox and receives replies. Cloudflare and Google may process and
store email data overseas. Their handling is described in the
Cloudflare Privacy Policy
and Google Privacy Policy.
Who else we share information with
- Carriers — your name, delivery address and phone number,
so your order can be delivered and so you can be contacted about it. - Suppliers — where an item is dispatched directly from a
supplier, the delivery details needed to send it. - Payment and fraud services — Stripe and PayPal, as
described above, including their fraud screening. - Service providers — hosting, email delivery, backup and
support providers, under contract and only as needed to provide those
services. - Where the law requires it — for example a court order
or a lawful request from a regulator.
We do not sell personal information.
Overseas disclosure
Some of the providers above are located outside Australia, including Stripe,
PayPal, Cloudflare and Google, and information may be processed in
the United States and other countries where they operate. Where we disclose
personal information overseas, we take reasonable steps to ensure it is
handled consistently with the Australian Privacy Principles.
Security and retention
The site runs over HTTPS. Administrative access is restricted and
multi-factor authentication is required. We keep backups, and we restrict who
can reach personal information to those who need it to do their job.
We keep order and tax records for at least five years, as required by
Australian tax law. We keep marketing consent and unsubscribe records while we
operate the list so we can honour and demonstrate each person’s choice. Other
personal information is kept only while we need it, then destroyed or
de-identified.
No system is perfectly secure. If a data breach occurs that is likely to
cause serious harm, we will assess it and notify affected people and the Office
of the Australian Information Commissioner as required by the Notifiable Data
Breaches scheme.
Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and
ask us to correct it if it is wrong. If you have an account, you can see and
correct your addresses and order history by signing in. We will respond to a
request within a reasonable time and will tell you if we cannot give access,
and why.
You can ask us to delete information we no longer need. We may have to keep
some of it — order and tax records in particular — for the period the law
requires.
Complaints
If you think we have mishandled your personal information, contact our
privacy contact at
[email protected] or write to
Level 2, Building 3, 35-41 Waterloo Road, Macquarie Park NSW 2113, Australia.
We will acknowledge the complaint within two business days, investigate it and
respond within 30 days.
If you are not satisfied with our response, you can complain to the Office
of the Australian Information Commissioner at
oaic.gov.au or on 1300 363 992.
Contact us
Sonar Technologies International Pty Ltd, ABN 69 615 252 143, trading as
SonarNext. See our Contact page for how to reach us.