PRIVACY POLICY
Last updated: 6 September 2026
This Privacy Policy explains how MAG5K PTY. LTD, ABN 35 684 664 686, ACN 684 664 686, trading as Pro Gram Studios (“Pro Gram”, “we”, “us” or “our”), collects, uses, discloses and protects personal information when you visit pro-gram-studios.com, place an order, subscribe to our communications, contact us or otherwise interact with Pro Gram.
Our contact details are provided at the end of this Policy.
1. INFORMATION WE COLLECT
Depending on how you interact with us, we may collect the following categories of information.
Identity and contact information
This may include your name, email address, telephone number, billing address, shipping address and other contact details.
Order and transaction information
This may include products ordered, order values, transaction history, shipping information, returns, refunds, discounts and customer-service history.
Payment information
Payments are generally processed by Shopify and third-party payment providers.
We do not generally receive or store complete payment-card numbers where those details are processed directly by a payment provider.
Account information
If you create a customer account, we may process account identifiers, login-related information and information associated with your account.
Marketing information
This may include your marketing subscriptions, communication preferences, signup source and interactions with emails or other marketing communications.
Communications
We may retain information you provide when contacting us, including enquiries, order issues, return requests, feedback and other correspondence.
Device, browsing and technical information
When you use the Site, we and our technology providers may collect information such as your IP address, device type, browser, operating system, referring URLs, pages viewed, interactions with the Site, approximate location derived from your IP address and cookie or similar technology identifiers.
Inferences and preferences
We may use information about purchases and Site interactions to understand likely interests and preferences, improve our products and communications and, where permitted, personalise marketing.
We do not intentionally collect sensitive personal information as part of ordinary retail transactions unless it is necessary and lawful to do so.
2. HOW WE COLLECT INFORMATION
We may collect information:
- directly from you when you place an order, create an account, complete a form, subscribe to marketing or contact us;
- automatically when you interact with the Site;
- from Shopify and other service providers that help operate our store;
- from payment, shipping and fulfilment providers;
- from analytics, fraud-prevention and security providers; and
- from advertising or social-media platforms where those services are enabled and permitted by law.
3. HOW WE USE INFORMATION
We may use personal information to:
- operate and maintain the Site;
- process, fulfil and deliver orders;
- process payments, returns and refunds;
- create and manage customer accounts;
- communicate about orders;
- provide customer support;
- detect, investigate and prevent fraud, abuse and security incidents;
- comply with tax, accounting, legal and regulatory obligations;
- maintain business records;
- understand how customers use the Site;
- improve our products, services and customer experience;
- measure the performance of our communications and marketing;
- personalise content or advertising where permitted;
- send marketing communications where permitted by law; and
- establish, exercise or defend legal claims.
4. UK LAWFUL BASES FOR PROCESSING
Where UK data-protection law applies, we rely on one or more lawful bases depending on the circumstances.
Contract
We process information where necessary to enter into or perform a contract with you, including processing your order, accepting payment, arranging delivery, managing returns and responding to order-related requests.
Legal obligations
We process information where necessary to comply with legal obligations, including taxation, accounting, consumer protection and regulatory requirements.
Legitimate interests
We may process information where necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights.
These interests may include operating and improving our business, preventing fraud, maintaining Site security, understanding general business performance and providing customer service.
Consent
We rely on consent where required, including for certain marketing activities and certain non-essential cookies, tracking technologies or advertising technologies.
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
5. EMAIL MARKETING
If you subscribe to Pro Gram marketing, we may send you emails about products, releases, collaborations, restocks, offers and other Pro Gram news.
We use Klaviyo to assist with email marketing, subscriber management, automated communications and related analytics.
Where required by law, we obtain consent before sending marketing communications.
You may unsubscribe at any time by using the unsubscribe link in a marketing email or contacting us.
Unsubscribing from marketing does not prevent us from sending transactional communications necessary to administer an order or customer relationship.
We may retain limited suppression information after you unsubscribe so that we can respect your request and avoid inadvertently adding you back to marketing communications.
6. SHOPIFY
Our ecommerce store is hosted using Shopify.
Shopify processes certain customer, transaction and device information to provide ecommerce, checkout, security, payment and related services.
Depending on the services and settings enabled on the Site, Shopify may also assist with analytics, personalisation and advertising.
Shopify's own privacy notices contain further information about its processing practices.
7. COOKIES & SIMILAR TECHNOLOGIES
The Site uses cookies and similar technologies, which may include pixels, tags, scripts, local storage and other storage or access technologies.
These technologies may be used for:
Strictly necessary purposes
These technologies help provide functions such as the shopping cart, checkout, security, authentication and preferences necessary for the Site to operate.
Analytics
Analytics technologies help us understand Site traffic, performance and how visitors interact with the Site.
Functional and personalisation purposes
These technologies may remember preferences or provide enhanced Site functionality.
Advertising and marketing
Where enabled, advertising and marketing technologies may be used to measure campaigns, understand interactions and deliver or measure advertising.
Where applicable law requires consent, we obtain consent before using non-essential technologies and provide controls that allow you to manage your choices.
You may also be able to block or delete cookies using your browser settings, although doing so may affect some Site functionality.
8. WHO WE SHARE INFORMATION WITH
We may disclose personal information where reasonably necessary to:
- Shopify;
- Klaviyo;
- payment processors;
- shipping, courier, logistics and fulfilment providers;
- fraud-prevention and security providers;
- analytics providers;
- marketing and advertising providers where those services are enabled;
- website, hosting and IT service providers;
- accountants, lawyers, insurers and other professional advisers;
- regulators, government agencies, courts or law enforcement where required or permitted by law; and
- a purchaser, investor or adviser involved in an actual or proposed merger, acquisition, restructuring or sale of all or part of our business.
We require service providers to handle information consistently with their contractual and legal obligations.
We do not sell personal information for money.
However, some disclosures involving advertising technologies may be defined as a “sale”, “sharing” or use for “targeted advertising” under certain United States state privacy laws even where no money is exchanged.
Where those laws apply, we provide the legally required opt-out rights.
9. INTERNATIONAL PROCESSING & TRANSFERS
Pro Gram is based in Australia.
Our service providers may process personal information in Australia and overseas, including in Australia, the United States, Canada, the United Kingdom and other countries in which our service providers operate.
Privacy laws in those countries may differ.
Where the Australian Privacy Principles apply to an overseas disclosure, we take reasonable steps required by Australian privacy law.
Where UK data-protection law applies to an international transfer for which we are responsible, we use an applicable lawful transfer mechanism, which may include adequacy regulations, appropriate contractual safeguards or another mechanism permitted by law.
10. RETENTION
We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, taking into account legal, tax, accounting, fraud-prevention, contractual and dispute-resolution requirements.
For example:
- order and transaction records may be retained for periods required under tax, accounting and consumer laws;
- account information may be retained while an account remains active and for a reasonable period afterwards;
- customer-support information may be retained for a reasonable period after an enquiry is resolved;
- marketing information may be retained while you remain subscribed; and
- limited suppression records may be retained after an unsubscribe request so that the request continues to be respected.
When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it where required by law.
11. SECURITY
We take reasonable administrative, technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, interference, alteration and disclosure.
No system of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
12. AUSTRALIAN PRIVACY RIGHTS
Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to us, you may have rights to request access to personal information we hold about you and request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information.
You may also make a complaint about our handling of personal information.
To make a request or complaint, contact us using the details at the end of this Policy.
We will handle applicable requests and complaints in accordance with Australian privacy law.
Nothing in this Policy limits rights you may have under other Australian laws.
13. UNITED KINGDOM PRIVACY RIGHTS
Where UK data-protection law applies, and subject to applicable exceptions, you may have rights to:
- be informed about how your personal information is used;
- obtain access to your personal information;
- correct inaccurate or incomplete information;
- request deletion in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent; and
- exercise applicable rights relating to automated decision-making.
You also have the right to complain to the UK Information Commissioner's Office (ICO).
We encourage you to contact us first so that we can attempt to address your concern.
14. UNITED STATES PRIVACY RIGHTS
Depending on your state of residence, the nature of our activities and whether the relevant state law applies to Pro Gram, you may have rights including the right to:
- know or access personal information we process about you;
- obtain information about categories of information collected and disclosed;
- correct inaccurate information;
- delete certain personal information;
- obtain a portable copy of certain information;
- opt out of the sale of personal information;
- opt out of sharing or processing for targeted advertising;
- limit certain uses or disclosures of sensitive personal information where applicable;
- appeal certain decisions relating to privacy requests; and
- exercise applicable privacy rights without unlawful discrimination.
These rights are subject to legal exceptions and verification requirements.
California and similar US state disclosures
During the preceding 12 months, we may have collected categories of personal information including:
Identifiers, such as name, email address, postal address, telephone number, account information, IP address and online identifiers.
Commercial information, such as products purchased or considered, order history and transaction information.
Internet or other electronic network activity, such as browsing activity, interactions with the Site and advertising or email engagement.
Approximate geolocation information, such as general location inferred from an IP address.
Inferences, such as likely product or marketing preferences derived from interactions with our Site or purchases.
We use these categories for the business and commercial purposes described elsewhere in this Policy.
We may disclose these categories to service providers, contractors, payment providers, delivery providers and other recipients described in this Policy.
Where advertising technologies are enabled, identifiers, internet activity and related information may also be disclosed to advertising partners. Certain US privacy laws may treat those disclosures as “sale”, “sharing” or targeted advertising.
We do not knowingly sell or share personal information of consumers under the age threshold established by applicable law where we have actual knowledge of their age.
15. YOUR PRIVACY CHOICES
Where required by applicable US privacy law, you may opt out of covered sale, sharing or targeted advertising using the privacy controls provided on the Site.
Where legally required, we also recognise applicable browser-based opt-out preference signals, including Global Privacy Control (GPC), in accordance with applicable law and our technical capabilities.
You may also contact us using the details below to make a privacy request.
We may need to verify your identity before completing certain requests.
Where permitted by law, an authorised agent may submit a request on your behalf. We may require evidence of their authority and may still need to verify your identity.
16. CHILDREN
The Site is intended for a general audience and is not directed toward children.
We do not knowingly collect personal information from children in circumstances where parental or guardian consent is required by law.
If you believe a child has provided us with personal information improperly, contact us so that we can investigate and take appropriate action.
17. THIRD-PARTY WEBSITES
The Site may contain links to websites or services operated by third parties.
This Privacy Policy does not govern independent third parties that we do not control.
We recommend reviewing the privacy information provided by those services.
18. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes to our business, technology, legal obligations or privacy practices.
The updated version will be published on this page with a revised “Last updated” date.
Where required by law, we will provide additional notice of material changes.
19. CONTACT & PRIVACY COMPLAINTS
For questions, privacy requests or complaints, contact:
MAG5K PTY. LTD.
ABN 35 684 664 686
ACN 684 664 686
7 Clunies Ross Court
Eight Mile Plains QLD 4113, Australia.
Australia