Privacy Policy at Disposable King

Last updated June 22, 2026

This Privacy Policy explains how C&C Trading (Australia) Pty Ltd (ABN 85 065 372 812), trading as Disposable King (“Disposable King”, “we”, “us” or “our”), collects, holds, uses and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Policy applies to personal information we collect through our website at disposableking.com.au (the “Website”), and through our retail and wholesale sales, marketing activities, and any other dealings we have with you.

By using our Website or otherwise providing personal information to us, you consent to the collection, use and disclosure of that information as described in this Policy. If you do not agree with this Policy, please do not provide personal information to us or use our Services.
If you have any questions about this Policy, please contact us using the details in section 13 below.

1. What personal information we collect

We may collect the following kinds of personal information, depending on how you interact with us:

• Identity and contact information: name, phone number, email address, billing and delivery address, job title and business name.
• Account information: username, password and account preferences, for customers who register an account on our Website.
• Order and transaction information: products purchased, order history, and information needed to process a payment.
• Communications: any information you provide when you contact us, request a quote, or otherwise correspond with us.
• Technical information: IP address, browser and device type, operating system, referring pages, and information collected through cookies (see section 6).

We do not intentionally collect sensitive information (such as health information, or information about racial or ethnic origin) and ask that you do not provide sensitive information to us unless we specifically request it.

Payment information

When you make a purchase, payment is processed by our third-party payment providers, Stripe and PayPal. We do not store your full card number or card security code on our systems. Stripe’s and PayPal’s own privacy practices are set out at stripe.com/au/privacy and paypal.com/us/legalhub/privacy-full.

2. How we collect personal information

We collect personal information:

• directly from you, when you create an account, place an order, request a quote, subscribe to marketing communications, or contact us;
• automatically, through cookies and similar technologies when you use our Website (see section 6); and
• from third parties, such as payment processors and delivery providers, where reasonably necessary to fulfil your order.

3. Why we collect, use and disclose personal information

We collect, hold, use and disclose personal information for purposes including to:

• create and manage your account;
• process, fulfil and deliver your orders, including payments, returns and exchanges;
• respond to your enquiries and provide customer support;
• send you service-related communications;
• with your consent, send you marketing communications about our products and promotions;
• improve and administer our Website and business operations;
• detect, investigate and prevent fraud and unlawful activity; and
• comply with our legal obligations.

We only collect personal information by lawful and fair means, and only information that is reasonably necessary for these purposes.

4. Disclosure of personal information

We may disclose personal information to:

• our employees and contractors who need it to perform their duties;
• third-party service providers who assist us with payment processing, website hosting, IT services, delivery and courier services, and marketing and analytics tools;
• our professional advisers, such as accountants, auditors and lawyers;
• any party to a proposed or actual sale, merger or restructure of our business; and
• government or regulatory bodies, or other parties, where required or authorised by law.

We require third parties who handle personal information on our behalf to protect it consistently with this Policy and the Australian Privacy Principles.

Some of our service providers may store or process personal information on servers located outside Australia. Where this occurs, we take reasonable steps to ensure your personal information continues to be handled consistently with the Australian Privacy Principles, including by using established, reputable providers.

5. Cookies and other tracking technologies

Our Website uses cookies and similar technologies to operate the site, remember your preferences, and understand how visitors use our Website. Most browsers let you control or disable cookies through their settings. If you disable cookies, some features of our Website may not work properly.

6. Direct marketing

We may send you marketing communications about our products, promotions and offers where you have consented to receive them, or otherwise in accordance with the law. You can opt out at any time using the unsubscribe link in our emails, or by contacting us using the details in section 13. We will not charge you for an opt-out request.

7. Data quality and security

We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, complete and up to date. We also take reasonable technical and organisational measures to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure, including restricting access to authorised personnel.

No method of transmission over the internet, or method of electronic storage, is completely secure. While we work to protect your personal information, we cannot guarantee its absolute security.

If we become aware of a data breach involving personal information that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

8. How long we keep your information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. When personal information is no longer required, we take reasonable steps to destroy or de-identify it, unless we are required by law to retain it.

9. Children’s privacy

Our Services are not directed to, and we do not knowingly collect personal information from, children under the age of 18. If you believe we have inadvertently collected personal information from a child, please contact us using the details in section 13 so we can take reasonable steps to delete it.

10. Access, correction and complaints

Under APP 12 and APP 13, you may request access to, or correction of, the personal information we hold about you. To make a request, contact us using the details in section 13. We will respond within a reasonable period (generally within 30 days) and may need to verify your identity before providing access.

There is no charge for making a request, although we may charge a reasonable fee for giving access if your request requires significant time or resources. We may decline a request for access or correction in limited circumstances permitted under the Privacy Act, and if so, we will explain our reasons.

Complaints

If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, please contact us first using the details in section 13, including a description of your concern. We will investigate and aim to respond within a reasonable period (generally within 30 days).

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5288, Sydney NSW 2001

11. Overseas users

Our Website and Services are intended for use by individuals and businesses in Australia. If you access our Website from outside Australia, you do so on your own initiative and are responsible for ensuring compliance with any applicable local laws.

12. Updates to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be indicated by a revised “Last updated” date and will apply from the date it is posted on our Website. We encourage you to review this Policy periodically.

13. Contact us

If you have any questions, concerns or requests regarding this Policy or your personal information, please contact us at:
C&C Trading (Australia) Pty Ltd, trading as Disposable King
ABN: 85 065 372 812
Address: 20A Leinster Grove, Brunswick East, VIC 3057, Australia
Phone: 0411 119 886
Email: info@disposableking.com.au

Summary of Corrections Made

Prepared for internal reference — explains what changed from the previous version published at disposableking.com.au/privacy-policy/ and why.

1. Removed US/EU legal framework. The previous notice was a US/EU privacy template referencing the GDPR, CCPA, the EEA, the UK, Switzerland’s data protection commissioner, and “data subject access requests.” None of this applies to an Australian retailer with no demonstrated EU/US customer base, and it gave readers the false impression that foreign law governed their rights. All of it has been removed.
2. Fixed the contradictory “Melbourne residents” section. Section 9 of the old policy was headed “Do Melbourne residents have specific privacy rights?” but the body text underneath still referred to California, the CCPA, and an “under 18 and reside in California” test — an unedited leftover from the original US template that directly contradicted its own heading. This has been replaced with genuine APP-based access, correction and complaint rights.
3. Added the actual Australian legal framework. The old policy never mentioned the Privacy Act 1988 (Cth), the Australian Privacy Principles, or the Office of the Australian Information Commissioner (OAIC) — the framework that actually governs an Australian business. These are now referenced throughout, including a clear OAIC complaints pathway.
4. Resolved the inconsistent business address. The old policy listed “20 Leinster Grove, Brunswick East, Victoria 3057” in the body text, while the site footer showed “20A Leinster Grove, East Brunswick, VIC 3057”, and the separate Contact Us page showed yet another variant (postcode 3058). The policy now uses one consistent, verified address: 20A Leinster Grove, Brunswick East, VIC 3057.
5. Clarified payment data handling. The old policy listed “debit/credit card numbers” as information collected directly, while a separate paragraph said Stripe and PayPal store payment data — an internal contradiction. This is now stated plainly: Disposable King does not store full card details; Stripe and PayPal process payments.
6. Added a data breach clause. The old policy had no mention of what happens if a data breach occurs. A Notifiable Data Breaches scheme clause has been added, describing notification of affected individuals and the OAIC where required — standard for an APP-compliant policy.
7. Simplified the Do-Not-Track section. The old wording was built around US legal uncertainty over DNT browser signals, which is not a concept used in Australian privacy law. It has been folded into a simpler cookies clause.
8. Removed irrelevant CCPA-style minor’s data clause. The old “removal of publicly posted data” right was limited to California residents under 18 and has no AU equivalent; it has been removed in favour of the general children’s privacy clause.

Note: this document was prepared with the help of an AI assistant based on publicly available information and general guidance on the Privacy Act 1988 (Cth) and Australian Privacy Principles. It is not legal advice. Before publishing, we recommend having it reviewed by a qualified Australian lawyer, particularly to confirm your data retention periods, marketing consent practices, and any industry-specific obligations.