top of page

Privacy Policy

Effective: April 2026 | Last updated: April 2026

Introduction

This Privacy Policy explains how Platfora (“we”, “our”, “us”) collects, uses, stores, and protects personal data when you use the Platfora platform and website (platfora.co).

This policy applies to all users of the Platform including studios, artists, agents, and buyers, as well as visitors to our website. By using the Platform or website, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Platfora is a commercial platform built for the global textile and surface design industry. We connect design studios, independent artists, and print agents through branded digital showrooms, enabling studios to present and sell their collections to buyers and agents in a professional, curated environment.

​

Data contact: support@platfora.co  |  PO Box 105, Woody Point QLD 4019, Australia

2. Data Separation Policy

Platfora operates an agent account on its own platform for the purposes of facilitating sales and representing studios. This agent account is subject to exactly the same access permissions and data restrictions as all other registered agents on the platform. Platfora’s agency operations do not collect, access, view, or use any studio design data, buyer data, catalogue content, sales data, or account information belonging to other platform users. This separation is absolute. No data from any studio, artist, agent, or buyer account is accessed for any commercial purpose outside of operating and supporting the platform itself. Studio design files, buyer lists, wishlist activity, and transaction records are accessible only to the relevant account holder and any agents they have explicitly nominated through the platform. No cross-account data access occurs.

3. What Data We Collect

3.1 Account Registration Data
 

When you create an account on Platfora, we collect:
 

  • Full name

  • Business or studio name

  • Email address

  • Country and location

  • Account type (studio, artist, agent, or buyer)

  • Password (stored in encrypted form — we never store plain-text passwords)

 

3.2 Subscription & Billing Data
 

For subscribing studios and artists, we collect billing information required to process payments. Payment card details are processed and stored by Stripe — Platfora does not store full card numbers or CVV codes.
 

  • Billing name and address

  • Payment method details (handled by Stripe — PCI DSS compliant)

  • Subscription history and invoices

 

3.3 Platform Usage Data
 

When you use the Platform, we collect data about how you interact with it:
 

  • Design uploads, catalogue content, and showroom configuration

  • Buyer wishlist and mood board activity

  • Agent-studio connection records

  • Purchase and transaction records

  • Login activity, session data, and access timestamps

  • Communication sent through the Platform

 

3.4 Technical & Website Data
 

When you visit platfora.co, we may automatically collect:
 

  • IP address and approximate location

  • Browser type and version

  • Device type and operating system

  • Pages visited and time spent

  • Referral source
     

This data is collected through website analytics tools and cookies. See our Cookie Policy at platfora.co/cookies for details.

 

3.5 Contact & Enquiry Data
 

If you contact us via email, demo request form, or any other channel, we retain your name, email address, and the content of your communication.

4. How We Use Your Data

We use your data to:

​

  • Create your Platfora account

  • Process subscription payments 

  • Display your digital showroom to buyers and agents

  • Facilitate agent-studio connections and buyer transactions

  • Send transactional emails (account confirmations, payment receipts, cancellation notices)

  • Send platform updates, feature announcements, and relevant communications (you may opt out at any time)

  • Provide customer support

  • Analyse platform usage to improve our services

  • Comply with legal obligations

​

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Lawful Basis for Processing

We process your personal data on the following lawful bases:

​

  • Contract — processing necessary to perform our contract with you, including creating and managing your account, processing subscription payments, and operating your digital showroom.

​

  • Legitimate interests — processing necessary for our legitimate business interests, including analysing platform usage, sending relevant updates, and maintaining platform security.

​

  • Legal obligation — processing necessary to comply with our legal obligations, including retaining transaction records in accordance with Australian tax law.

​

  • Consent — where we rely on your consent, for example for analytics cookies. You may withdraw consent at any time.

6. Data Access - Who Can See What

5.1 Studio & Artist Data
 

Your showroom content (design catalogue, pricing, availability) is visible to:
 

  • Buyers who visit your showroom

  • Agents you have explicitly connected with on the Platform

  • Platfora platform administrators, for technical support and maintenance purposes only
     

Your business data (billing information, account settings, analytics) is visible only to you and Platfora developers for administration purposes only.

 

5.2 Agent Data
 

Agents can view the showrooms and sales data of studios they are connected with. Agents cannot view data from studios they are not connected with.

 

5.3 Buyer Data
 

Buyer account information, wishlist activity, and purchase history is visible to:
 

  • The buyer themselves

  • Studios and agents whose showrooms the buyer has interacted with, in relation to those interactions only

  • Platfora platform administrators for support purposes only

 

5.4 Platform Administrator Access
 

Platfora has administrative access to platform data for the purposes of operating, maintaining, and supporting the Platform. This access is strictly limited to operational necessity and is never used for commercial purposes outside of running the platform.

7. Data Sharing & Third Parties

We do not sell your personal data to third parties.

​

We share data only with:

​

  • Stripe — payment processing (stripe.com/privacy)

  • Amazon Web Services — platform hosting and infrastructure

  • Twilio SendGrid — transactional email delivery

  • Wix — website platform (wix.com/about/privacy)

​

All third-party providers are required to handle data in accordance with applicable privacy laws and their own data processing agreements. We do not permit third-party providers to use your data for their own marketing purposes. We may disclose data if required to do so by law, court order, or regulatory authority.

8. International Data Transfers

Platfora serves users globally. Your data may be stored and processed in countries outside your own, including Australia, the United States, and the European Union, where our infrastructure and service providers operate.

 

Where data is transferred outside Australia or the EU, we ensure appropriate safeguards are in place, including data processing agreements with our providers that meet applicable legal standards.

9. Data Retention

  • Active account data is retained for as long as your account remains open.

  • Following account cancellation, data is retained for 60 days to allow reactivation, then deleted or anonymised.

  • Transaction and billing records are retained for 7 years in accordance with Australian tax and accounting obligations.

  • Contact and support records are retained for 3 years from last contact.

  • Website analytics data is retained in accordance with the settings of the analytics platform used.

10. Data Security

  • We take the security of your data seriously. Measures we have in place include:

  • Encrypted data transmission (HTTPS/TLS) across the Platform and website

  • Encrypted password storage — passwords are hashed and never stored in plain text

  • Access controls limiting administrator access to user data

  • PCI DSS-compliant payment processing via Stripe

  • AWS infrastructure with industry-standard security configuration

  • No method of electronic transmission or storage is 100% secure. In the event of a data breach that affects your personal data, we will notify you in accordance with applicable law.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

​

  • Access — request a copy of the data we hold about you

  • Correction — request correction of inaccurate or incomplete data

  • Deletion — request deletion of your personal data (subject to legal retention obligations)

  • Restriction — request that we restrict processing of your data

  • Portability — request your data in a portable format

  • Objection — object to processing of your data for certain purposes

  • Withdrawal of consent — where processing is based on consent, withdraw it at any time. 

​

To exercise any of these rights, contact us at support@platfora.co. We will respond within 30 days. For Australian users, these rights are governed by the Australian Privacy Act 1988 and the Australian Privacy Principles. For users in the UK and EU, these rights are also governed by the UK GDPR and EU GDPR respectively.

12. Complaints

We take all privacy complaints seriously and are committed to resolving them promptly.

​

How to submit a complaint: Email: support@platfora.co with subject line: Privacy Complaint Post: PO Box 105, Woody Point QLD 4019, Australia

 

Please include your name, contact details, a description of your concern and any relevant dates.

​

How we handle complaints: We will acknowledge receipt within 2 business days and provide a written response within 5 business days. If your complaint is complex we will notify you of the expected timeframe.

​

If you are not satisfied with our response, you may escalate to:

​

  • Australia: Office of the Australian Information Commissioner — oaic.gov.au — 1300 363 992

  • UK: Information Commissioner's Office — ico.org.uk — 0303 123 1113

  • EU: Your local data protection authority

​

Contact

If you have any questions regarding this Privacy Policy, please contact us at support@platfora.co

bottom of page