Fat Boy’s Quality Cuts Pty Ltd, ABN 90 674 495 740, Shop 1/1 Pyramid Street, Emu Plains NSW 2750, runs this website. This page says what the site collects about you, why, and who else sees it. It describes what the site does today.
The short version
No payment is taken on this website. You never enter card details here, and none are sent to us or stored by us. You pay us in person when you get your order: at the counter if you collect, or at the door if we deliver.
We deliver our own orders. Your address goes to the shop and to the person driving the van, and to no courier or delivery company.
What we collect, and why
When you make an account. Your name, your email address, and your mobile number if you choose to give it. We never store your password as you typed it. The site keeps a one-way scramble of it and checks you against that when you log in, so nobody here can read your password, including us.
When you place an order. What you ordered, and either the collection window or the delivery day you picked. If you chose delivery, your delivery address as well, because we cannot bring it to you without one. If you order without making an account, you give us your name, your email address and your phone number at the checkout instead, so we can put the order aside under your name and ring you about it. The shop software also records the IP address and the browser identification string the order came from. That is what lets us tell a real order from a prank.
If you join the weekly specials list. A record of it: the exact wording you were shown, its version number, the time, the IP address it came from, and which page it came from. That record is what we hold about how and when you joined. If you unsubscribe later, we record the withdrawal rather than deleting the history, so the record stays honest in both directions.
The weekly specials list
The specials box arrives ticked, and you can untick it. We create your account whether you leave it ticked or not — joining the list is never a condition of ordering or of any discount we are running. If you untick it, that is honoured: even if the form comes back with an error, it returns your choice exactly as you left it rather than quietly re-ticking. You can also turn the emails off at any time from your account details, or from the link in any email we send, without a password.
The Spam Act 2003 requires the sender of a marketing email to be identified and every message to carry a working unsubscribe. Every specials email says it is from us and carries a one-tap unsubscribe that needs no login.
Every specials email carries a one-tap unsubscribe that needs no password and no login. We use the list to send you the shop’s specials, about once a week. We do not sell it, rent it, or give it to anyone else.
Telling the shop your order has come in
When you place an order, the site sends the shop a text message and a notification on the shop’s own phone, so somebody starts cutting your order instead of waiting to notice an email. Each alert carries your order number, the total, what you ordered, the collection window or the delivery day, and your name and phone number, so the shop can ring you without opening a laptop. It goes to the shop and to nobody else.
The text message is sent through Twilio, which is based in the United States. The notification is sent through a notification server run by Alien Web Design, who look after this website.
Notifications in your browser
The home page offers to turn on notifications, so the shop can tell you when your order is packed. If you say yes, your browser gives us an address it made up for your device, two keys that let only your device read a message we send to that address, and your browser’s identification string. We record when you turned it on. On its own that tells us nothing about who you are.
Once you use it for an order, we do join the two: we store a scrambled form of that device address on the order, because otherwise we cannot tell which phone to notify when your meat is packed. So while notifications are on, that device is linked to your orders. Turning notifications off in your browser or phone settings ends it, and once your device tells us it is gone we drop the link.
Cookies
This site uses cookies. These are the ones we measured on the live site on 17 September 2026, as a customer would get them.
- woocommerce_items_in_cart and woocommerce_cart_hash: set when you put something in the cart, so the page knows the cart is not empty. They disappear when you close the browser.
- wp_woocommerce_session_…: ties your browser to your cart on our server, so your cart is still there when you come back. It lasts two days.
- wordpress_logged_in_… and wordpress_sec_…: set only when you log in, and only so you stay logged in. They go when you log out.
- _ga and _ga_FKJCJWZTS0: Google Analytics, covered in the next section.
Cloudflare, which sits in front of this site, may also set a short-lived cookie of its own to tell real visitors from automated traffic.
There are no advertising cookies on this site, and no cookies that follow you to other websites.
One thing we keep in your browser that is not a cookie
If you have notifications turned on, the order page leaves a short list in your browser’s own storage: the order numbers you placed on that device and the link codes that open them, for up to five orders and thirty days. It stays in your browser. It lets your phone finish connecting itself to an order you placed before you turned notifications on. Clearing your browser’s site data removes it.
Website statistics
We use Google Analytics to count visits and see which pages people read. The site is set up so that Google’s advertising features are switched off: no Google signals, and no ad personalisation. That means the visit data cannot be used to advertise to you afterwards, here or anywhere else.
Cloudflare also counts page views of its own, from a small script it adds to every page at its end rather than ours. It sets no cookie and does not follow you between sites.
We keep analytics off three pages, because it has no business seeing them: the page you land on after placing an order, the order payment page, and your account pages. Nothing you do on those is counted.
Who else handles your information
- Cloudflare sits in front of this website, so every request to the site passes through it before it reaches us. It is what keeps the site up and filters attacks.
- Twilio, based in the United States, carries two things for us. Its SendGrid service sends the site’s email, including your order confirmation and the weekly specials, so your name and email address pass through their systems on the way to you. Twilio also carries the text message that tells the shop a new order has come in, which contains your name and your phone number.
- Google receives the website statistics described above.
- Whoever makes your browser, if you turn notifications on. The message has to travel through that company’s own notification service to reach your device: Google for Chrome and Android, Mozilla for Firefox, Apple for Safari and iPhone, Microsoft for Edge. They carry the message; only your device holds the keys to read it.
- Alien Web Design built this website and look after it, so they can reach the site’s database in the course of running it. The notification that tells the shop about a new order also passes through a server they run.
Nobody else. No payment processor receives anything, because the site takes no payment: you pay us in person. No courier or delivery company receives anything, because we deliver our own orders. We do not sell your information to anybody.
Where the site is hosted
The website and its database run on a server in Sydney, Australia, on Oracle Cloud Infrastructure. We store your account and your orders there. Two kinds of message leave that server. Email goes out through Twilio SendGrid in the United States. The new-order alerts described above go out as a text message through Twilio in the United States, and as a notification through a server run by Alien Web Design.
How long we keep it
Your account stays while you have one with us. Ask us and we will delete it.
Orders are different, and we would rather say so than promise something we cannot do. The shop has to keep its sales records for its own accounts and for tax, so an order does not disappear when an account does. The same goes for the consent record behind the specials list: it is the proof of what you agreed to, including any unsubscribe, so we keep it rather than delete it. What we can do is take your name and contact details out of anything we no longer need them for.
Asking us about your information
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Ring the shop on 0494 103 084, or ask at the counter: Shop 1/1 Pyramid Street, Emu Plains NSW 2750.
If you have a complaint about how we handled your information, tell us the same way and we will come back to you. If you are not satisfied with how we deal with it, you can take it to the Office of the Australian Information Commissioner.
Last updated 17 September 2026