Privacy Policy

Effective date: 30 May 2026

ARNOLD'S - CFD PTY. LTD. (referred to in this policy as “Arnold’s”, “we”, “our”, or “us”) respects your privacy and is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you use our public website at www.arnoldsonline.com.au and related public online services.

1. What this policy covers

This policy applies to personal information collected through:

our public website;
contact and enquiry forms;
wholesale order forms;
customer onboarding forms accessed via authorised invitation links;
newsletter subscription forms;
communications you send us by email or website form.

This policy does not apply to third-party websites or services that we link to.

2. What personal information we collect

Depending on how you interact with us, we may collect:

Information you provide directly

name;
email address;
phone number;
business name and business contact details;
order and delivery details;
enquiry content and messages;
files you upload with enquiries or onboarding (for example, supporting documents);
newsletter subscription details (such as first name, last name and email);
onboarding information for approved business accounts (for example, business details, account contacts, references and signature data).

Information collected automatically

When you visit our website, we may automatically collect:

IP address;
browser and device information;
pages viewed and links clicked;
date/time and basic request metadata;
referring URL and basic interaction analytics;
technical and security event information (for example, bot filtering or abuse-prevention data).

3. How we collect personal information

We collect personal information when you:

browse our website;
submit a form;
place a wholesale order;
subscribe to our newsletter;
complete onboarding steps;
contact us directly by email or online form.

We also use cookies and similar technologies for site operation and analytics (see section 8).

4. Why we collect and use personal information

We use personal information to:

provide and maintain our website and services;
respond to enquiries and requests;
process wholesale orders and related communications;
manage invited business onboarding processes;
send service-related communications (for example confirmations and updates);
send marketing/newsletter communications where you have consented;
monitor, troubleshoot and improve website performance;
protect our systems and users (including fraud, abuse and security monitoring);
comply with legal, regulatory, tax and record-keeping obligations.

5. Who we disclose personal information to

We may disclose personal information to trusted service providers that help us operate our website and services, including:

Google Analytics (website analytics);
Supabase (database, authentication/session management, and storage);
Resend (transactional and form-related emails);
Mailchimp (newsletter mailing list management and delivery);
Sentry (error and technical incident monitoring);
Prismic (content management/delivery);
Vercel (website hosting and infrastructure).
MyFoodLink (ecommerce on shop.arnoldsonline.com.au)

We disclose only what is reasonably necessary for the relevant purpose.

We may also disclose personal information:

where required by law;
to respond to lawful requests by regulators, courts or authorities;
to protect our rights, property or safety, or that of others;
in connection with a business restructure, merger, acquisition or sale (subject to confidentiality protections).

We do not sell personal information to third parties.

6. Overseas disclosure

Some of our service providers may process or store data outside Australia.
Where this occurs, we take reasonable steps to ensure personal information is handled in a way that is consistent with Australian privacy requirements.

7. Data retention

We retain personal information only for as long as needed for the purposes described in this policy, including business, legal, accounting and dispute-resolution requirements.

Retention periods vary depending on the type of information and purpose. When information is no longer required, we take reasonable steps to securely delete or de-identify it.

8. Cookies and analytics technologies

A cookie is a small text file stored on your device by your browser.

We use:

Essential cookies: required for core website functionality and security.
Analytics cookies: help us understand website traffic and usage patterns (for example via Google Analytics) so we can improve performance and user experience.

You can control cookies through your browser settings, including blocking or deleting cookies.
If you disable some cookies, parts of our website may not function as intended.

For Google Analytics, you can also use available opt-out tools provided by Google.

9. Direct marketing

If you subscribe to our newsletter or otherwise consent, we may send you marketing communications.
You can unsubscribe at any time using the unsubscribe link in the email or by contacting us directly.

We aim to comply with the Spam Act 2003 (Cth) for commercial electronic messages.

10. Security

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

These measures include, where appropriate:

encrypted transmission (HTTPS);
access controls and authentication safeguards;
monitoring and logging for security events;
regular maintenance and patching of systems;
use of reputable infrastructure and service providers.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

11. Access and correction

You may request access to personal information we hold about you, and request correction if it is inaccurate, out-of-date, incomplete, irrelevant or misleading.

To make a request, contact us using the details in section 14.
We may need to verify your identity before actioning your request.

12. Children

Our public website and services are not directed to children under 16.
We do not knowingly collect personal information from children under 16 without appropriate authority.
If you believe a child has provided personal information to us, please contact us and we will take reasonable steps to delete it where appropriate.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business changes.

When we make updates, we will revise the Effective date above.
The current version published on our website is the version that applies.

14. Contact us (privacy enquiries and complaints)

If you have questions, requests or complaints about privacy, please contact:

Privacy Officer
ARNOLD'S - CFD PTY. LTD.
Email: barnold@arnoldsonline.com.au
Alternative: admin@arnoldsonline.com.au
Address: 6 Kendall Street, Wodonga, Victoria, 3690, Australia

We will respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
https://www.oaic.gov.au

Legal Information