WINKOO
Privacy notice
Last updated 13 September 2026.
Information we use
We use essential information to take payments, register purchases, provide support, fulfil orders and keep our services secure. With your analytics permission, our internal website analytics and Australian Google Analytics service can record a random browser identifier, visits and actions, referring site, campaign and click identifiers, device/browser information, and an IP address. A local GeoLite2 database may turn an IP address into an approximate country, state and city. It does not provide a precise street location.
Purchase measurement
For an online purchase, the confirmed payment is the purchase authority. For a market purchase, the first use of the purchaser-only collect-info link records the genuine market purchase internally; submitting the form or visiting the success page does not record another purchase. Registration and support continue if optional tracking is declined.
If you allow analytics, we may send Google Analytics a pseudonymous event identifier, purchase time, amount and AUD currency, purchase channel, and relevant Google click identifiers. If you allow advertising measurement, we may send Meta equivalent purchase-measurement information plus browser/device information, IP address and relevant Meta click/cookie identifiers. Meta and Google process that information under their own terms and may associate it with other visits or accounts where their services permit. Market purchases remain separate from online purchases and outside online-sales bidding defaults.
Your choices
We use analytics and advertising measurement unless you switch either off in “Privacy settings”. Shopping and support continue if you opt out. A saved refusal remains in effect until you change it. Withdrawing prevents new optional browser transmissions and suppresses pending server retries; it cannot recall information already accepted by a provider. Communications consent is separate and is not used as tracking permission.
Storage and retention
For records created after this notice is activated, raw IP addresses and browser strings are removed after 30 days; referral, campaign and advertising click identifiers are removed after 90 days; internal website sessions and analytics events are deleted after 14 months; and provider-delivery audit records and privacy-choice records are deleted after 25 months. Existing records are not automatically changed. Essential order, payment, registration, support and financial records follow WINKOO’s separate business-record requirements. Market purchaser links and their browser sessions expire after 7 days unless an operational setting specifies otherwise. Browser choices remain on the device until changed or browser storage is cleared.
Providers and contact
Meta Platforms and Google may process permitted measurement data in Australia or overseas under their privacy terms. MaxMind’s GeoLite2 database is used locally for approximate location and is not an external lookup for each visit.
To ask about, access or correct your information, or withdraw a choice another way, email hello@winkoodesign.com.au.