Legal
Last updated: 17 June 2026
When you place an order or contact us, we collect: your name, email, shipping address, phone (optional), and order details. We do not collect or store payment card data — bank transfer is processed outside our systems.
We use your information to fulfil orders, send order confirmations and shipping updates, respond to your inquiries, and improve our service. We do not sell or rent your information to third parties.
Order and contact data is stored in our secure database. We use industry-standard encryption in transit (HTTPS) and at rest. Access is restricted to authorised staff.
We use Resend (email delivery) and our hosting provider to operate the Site. These providers only receive the minimum data necessary to deliver their services and are bound by their own privacy policies.
We use essential cookies to keep your cart populated across page reloads and to support basic site analytics. We do not use third-party advertising cookies.
Under Australian Privacy Principles you have the right to access, correct, or delete the personal information we hold about you. To request this, email orders@pepstep.com.
We retain order records for 7 years for tax and legal compliance, after which they are securely deleted. Contact form messages are retained for 24 months.
We may update this policy from time to time. Material changes will be noted at the top of this page.
Privacy questions? Email orders@pepstep.com.