Legal

Privacy policy

On this page

Last Updated: March 19, 2026

Effective: March 19, 2026

Cad Tech Store (“Cad Tech Store”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have in relation to your information when you use our website and services.

This policy applies to all visitors, customers, and users of the websites operated by Cad Tech Store for the sale and promotion of GstarCAD software products in Australia and New Zealand.

Important

By using our website, creating an account, submitting a form, or placing an order, you acknowledge that you have read and understood this Privacy Policy. We handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where applicable, the New Zealand Privacy Act 2020 and equivalent privacy principles.

1. Data controller

The organisation responsible for your personal information is:

Cad Tech Store.
Brisbane Australia 4034
Email: [email protected]

For any questions or requests regarding your personal information, you may contact us using the details above.

2. Personal information we collect

2.1 Information you provide directly

We collect personal information that you voluntarily provide when using our website, including:

Account registration — name, email address, and password.

Purchases — billing name, company name, address, email address, phone number, tax or business identifiers (if applicable), and order details.

Contact form — name, email address, phone number, company name, and the content of your message.

Demo request form — name, email address, phone number, company name, job title, intended use type, and any additional details you provide.

Support requests — name, email address, license or order details, and the content of your inquiry.

2.2 Information collected automatically

When you visit our website, certain technical information is collected automatically to help us operate and improve our services:

Device and browser information — browser type and version, operating system, screen resolution, and device type.
Usage data — pages visited, time spent on pages, referring URL, and navigation paths.
Network data — IP address and approximate geographic location derived from IP.
Cookies and similar technologies — as described in our Cookie Policy.

2.3 Information from third parties

We may receive limited information from third-party services used to process your transactions, such as payment confirmation status from Stripe or PayPal. We do not receive or store your full payment card details.

3. How and why we use your information

We collect, hold, use, and disclose your personal information only where it is reasonably necessary for our business activities and permitted by Australian and New Zealand privacy law. This includes the following purposes:

3.1 Fulfilling contracts and providing our services

Processing and fulfilling your orders, including delivering license keys and download links.

Creating and managing your user account.

Processing payments through our payment providers and reconciling transactions.

Providing purchased support services and responding to support requests.

Communicating with you about your orders, licenses, renewals, or support requests.

3.2 Our legitimate business interests

Responding to inquiries submitted via contact and demo request forms.

Managing customer relationships through our CRM systems.

Improving our website, products, and services based on aggregated usage data and feedback.

Protecting against fraud, abuse, and security threats.

Maintaining internal business records, analytics, and reporting.

3.3 Legal and regulatory obligations

Retaining invoicing and transaction records as required by Australian and New Zealand tax and accounting laws.
Responding to lawful requests from regulators, law enforcement, or other authorities where we are legally required to do so.

3.4 With your consent

We will ask for your consent before using your information for certain purposes, such as:

Sending marketing communications, newsletters, or promotional offers (where you have opted in or where otherwise permitted by law).
Setting non-essential cookies or similar technologies, as described in our Cookie Policy.

You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at [email protected]. Withdrawal of consent will not affect the lawfulness of any use of your information that has already occurred.

4. How we share your information

We do not sell your personal information. We share it only with trusted third-party service providers or partners where reasonably necessary to operate our business, deliver our services, or comply with the law:

4.1 Payment processors

We use third-party payment providers to process payments securely. These providers handle your payment card details directly and may act as independent controllers of that data:

Stripe — processes credit and debit card payments.
PayPal — processes PayPal payments.

We receive information such as payment confirmation status and limited transaction details. We do not store your full payment card number.

4.2 Customer communication and relationship management

We use specialist providers to send emails and manage customer relationships:

Brevo (Sendinblue) — used for transactional emails (order confirmations, license delivery) and, where you have consented, marketing communications. Data processed may include your name, email address, and interaction history.
Intrix CRM — used for managing customer relationships, inquiries, and demo requests. Data processed may include your name, email address, phone number, company details, and inquiry information.

4.3 Hosting and infrastructure

Our websites and related services are hosted with reputable providers that maintain appropriate technical and organisational security measures. Data may be stored in Australia, New Zealand, or other locations, depending on the provider’s infrastructure.

4.4 Legal requirements and protection

We may disclose your information if required by law, court order, or regulatory authority, or if disclosure is reasonably necessary to protect the rights, property, or safety of Cad Tech Store, our customers, or the public.

5. International transfers

Because we use global service providers and cloud-based tools, your personal information may be transferred to or stored in countries other than your country of residence, including locations such as the European Union, the United States, or other jurisdictions where our providers operate.

When we disclose personal information to overseas recipients, we take reasonable steps to ensure that they handle your information in a way that is consistent with this Privacy Policy and applicable Australian and New Zealand privacy laws. These steps may include contractual obligations (such as data protection agreements), selecting reputable providers, and reviewing their security practices.

You may contact us if you would like more information about how your information is protected when it is transferred internationally.

6. Data retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, or as required or permitted by law. This includes:

Account information — retained for the life of your account and deleted or de-identified within a reasonable period after account closure, unless we need to keep it for legal or operational reasons.

Order and transaction records — retained for the period required by applicable tax and accounting laws (which may be up to 7 years or longer in some cases).

Contact and demo request information — typically retained for up to 2 years from your last interaction with us, or longer where reasonably necessary for our business records or to resolve a dispute.

Marketing information — retained until you withdraw your consent, unsubscribe, or we otherwise decide to delete it.

Automatically collected technical data — may be retained in raw form for a limited period (for example, up to 26 months) and then aggregated or anonymised for longer-term analytics.

When personal information is no longer needed for any permitted purpose, we will take reasonable steps to delete it or permanently de-identify it.

7. Your privacy rights

Under the privacy laws of Australia and New Zealand, you may have rights in relation to your personal information. These include the right to:

Request access to the personal information we hold about you.

Request correction of inaccurate, incomplete, or out-of-date information.

Ask us to delete or de-identify certain information where it is no longer needed and we are not required by law to retain it.

Object to or request that we limit certain uses of your information, including for direct marketing.

Withdraw your consent where we rely on consent for specific uses (such as marketing emails).

To exercise these rights, please contact us at [email protected]. We may need to verify your identity before responding to your request. We will respond within a reasonable period and in accordance with applicable law.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant privacy regulator:

In Australia — the Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au.

In New Zealand — the Office of the Privacy Commissioner, www.privacy.org.nz.

8. Data security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures may include:

Use of SSL/TLS encryption for data transmitted between your browser and our servers.
Secure password hashing and access controls for user accounts.
Limiting employee and contractor access to personal information on a need-to-know basis.
Regular updates and security maintenance of our systems and platforms.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account or interaction with us is no longer secure, please contact us immediately.

9. Cookies

Our website uses cookies and similar technologies to enable core functionality, analyse website usage, and improve your experience. Some cookies are necessary for the site to function, while others are optional and used for analytics or marketing.

For more detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our separate Cookie Policy (where available) or the cookie settings presented on our site.

10. Children’s privacy

Our website and services are intended for business and professional users and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

If we become aware that we have inadvertently collected personal information from a child, we will take reasonable steps to delete it. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

11. Third‑party links

Our website may contain links to third-party websites, products, or services. This Privacy Policy applies only to our own websites and services.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technologies.

When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, provide additional notice (for example via email or a prominent notice on the website).

Your continued use of the website after changes take effect will constitute acceptance of the updated Privacy Policy.

13. Contact

If you have any questions about this Privacy Policy, how we handle personal information, or if you wish to exercise your privacy rights, please contact us at: