Skip to content

Can’t find what you need? Send us your ideas for custom, express service.

Submit enquiry
Corporate Graffitti
1800 299 422or email us direct

Corporate Graffitti

Privacy Policy

This page is retained for review before launch. The owner should approve the final policy wording and effective date.

Policy content awaiting approval

Final policy text will be added after the website’s forms, catalogue behaviour, analytics, cookies, delivery process and data handling are confirmed.

Website storage and analytics choices

Necessary storage supports essential website operation and remembers your analytics choice. The first-party record corporate_graffiti_analytics_consent stores only that choice, including any objection to aggregate measurement, and expires after 180 days. The choice record is never sent to analytics. The website remains usable when you choose necessary storage only.

We have prepared identifier-free aggregate measurement (legal review pending). It is disabled until its central tracker and collection endpoint, privacy review and infrastructure-log safeguards are approved. If approved, it uses no cookies, browser identifiers, fingerprinting or PostHog. It sends only fields accepted by the central aggregate contract: predefined page, section and zone codes, coarse scroll and dwell-time buckets, an approximate exit event, and product or enquiry selections limited to the site code, supplier code, product code, category and predefined event name. Choosing necessary storage only records an objection and prevents this tracker from loading.

Aggregate measurement does not send page URLs, query strings, referrers, pointer coordinates, page text, form values or session replay. Administrator, account, cart, checkout, payment and other private routes are excluded. Forms and their contents are never observed by analytics.

If you accept analytics, PostHog acts as our analytics provider and processor in its EU data region. PostHog measures page visits, campaign attribution, funnels and explicit product interactions only after consent. It uses memory-only persistence; session replay, heatmaps, surveys and autocapture are disabled; and personal enquiry information is never sent. Typical technical data can include device and browser details, while IP collection and person profiles are disabled in the site configuration.

PostHog data is retained for no longer than 12 months and EU-region processing may still involve authorised cross-border support or subprocessors under appropriate safeguards. Form text, passwords, payment-card details, uploaded artwork and personalisation instructions are not sent to analytics. Use Privacy choices at any time to withdraw consent or object to aggregate measurement; future capture stops immediately and analytics storage is cleared where feasible. Privacy questions can be sent to info@corporategraffitti.com.au.