LEGAL
Privacy
and your details
Scoopyard collects the least information needed to fill an order or answer a message, and nothing beyond it.
Last updated 30 September 2026
Who is responsible for your information
Scoopyard is run by Breanna J Mallinson-Cesar, a sole trader based in Bacchus Marsh, Victoria, Australia. Scoopyard is a trading name, not a company. I read every enquiry and handle every order myself, and I am the person responsible for the information described on this page. Questions about it go to hello@digimessiah.com.
What is collected
Placing an order collects your name, email address, delivery address and phone number if you give one, plus anything you write in the order notes. The contact form collects a name, an email address, a topic and a message, plus a product and a suburb and postcode if you add them. There is no account to create and no password to set. No card or bank details are ever entered on this site: payment is arranged by email after you order, so this site never sees or stores them.
Why it is collected
Your details are used to process, pay for and deliver your order, and to reply to your messages. The details you type in are not sold, rented or added to marketing lists, and they are not passed to the advertising tag described below. There is no newsletter attached to the form, so sending an enquiry does not sign you up to anything.
Where your order and messages go
An order is saved in a secure database (Supabase) that only Scoopyard can access, so it can be paid for, packed and sent, and a notification of it is emailed to hello@digimessiah.com through Web3Forms, a form-delivery service. Order confirmation emails to you are sent through Resend, an email delivery service. Your name and delivery address are given to DHL to deliver the parcel. A contact-form message is emailed the same way, through Web3Forms, and is not stored on this site. There is no customer account and no stored profile. Order records are kept only as long as needed to complete the order and meet record-keeping obligations.
The hourly submission limit
To stop the order form being flooded with automated submissions, a hashed version of the network identifier your request arrives with is held briefly and counted against an hourly limit. It is a one-way hash rather than a readable address, and it expires after an hour. It is not attached to your enquiry, not used to identify you and not kept afterwards.
Cookies, advertising and server logs
When advertising is switched on, this site loads the Google Ads tag on every page. It sets cookies in your browser and tells Google which pages were viewed and whether a visit ended in an order, so I can tell which advertising is worth paying for. When an order is placed it reports the order reference and the total, and never your name, email address, phone number or delivery address, none of which reach Google from this site. Google may also use these cookies to show you Scoopyard ads elsewhere. You can turn personalised advertising off at myadcentre.google.com, and blocking third-party cookies in your browser stops the tag working altogether; nothing on this site breaks if you do. Separately, the hosting providers that serve these pages process ordinary request logs (time of request, page requested, technical error information) as part of running and securing the service. That is standard infrastructure logging, not marketing data collection.
Visits from search engines and Google
Requests and on-page interactions from search-engine and advertising crawlers, and from Google's own network, are logged for site operations: the network address a request came from, browser and device details, the pages and files requested, and what happened on each page: clicks, scrolling, which sections were read, text copied from the page, which form fields were used and what was added to the cart. What is typed into a form is never recorded, only which field was used. The same small script runs for every visitor, but interaction events from anyone else are discarded when they arrive, without being stored. It keeps a random session number in your browser's session storage while the tab is open and does not use a cookie.
Access, correction and deletion
You can ask what information is held about you, ask for it to be corrected, or ask for it to be deleted. Email hello@digimessiah.com with the request and the email address you used. Deletion means your order record and the related correspondence are removed. Some records may need to be kept where the law requires it.
Changes to this notice
I handle personal information in line with Australian privacy expectations. If the way information is collected or used changes, for example a different form or a different mail provider, this notice will be updated to say so. Questions go to hello@digimessiah.com.