PostMyDoc
Privacy Policy
Last updated: October 2026 Jurisdiction: South Australia, Australia
This Privacy Policy explains how PostMyDoc Digital Mailing Service Pty Ltd (ACN 697 539 512, ABN 18 697 539 512), trading as PostMyDoc, collects, holds, uses and discloses personal information when you use the PostMyDoc consumer website at postmydoc.au and the PostMyDoc mobile application (together, the Service). It explains how we protect that information and how you can contact us about it.
This Privacy Policy is written in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service you consent to the collection and use of your information as described in this Privacy Policy.
1. Who We Are
PostMyDoc provides a digital-to-physical document mailing service. You can upload a PDF file through our consumer website or mobile app. We print it and post it through Australia Post to the recipient address you nominate.
Consumer orders use guest checkout. You do not need to create a PostMyDoc customer account to place an order.
This policy does not cover the PostMyDoc Business service which has a separate privacy policy.
2. Information We Collect
2.1 Information you provide directly
When you use the Service we collect the following information:
Sender information:
- Your name and/or company name
- Your email address, used for order confirmation and service communications
Recipient information:
- Recipient name and/or company name
- Recipient physical delivery address, including street address, suburb, state, postcode and country
Document content:
- The PDF file you upload for printing and posting
- The page count of your document
The information in a PDF document depends on what you choose to upload. It may include personal information about you or other people, including sensitive information or government identifiers. We do not ask you to provide those types of information as separate checkout details, but we may handle them if they appear in a document you submit for printing and posting.
Order information:
- Print type selected (Black and White or Colour)
- Postage service selected
- Order value and payment confirmation
Communications:
- Any messages you send to PostMyDoc via the contact form or by email
2.2 Information collected automatically
Website:
- IP address and approximate location
- Browser type and version
- Pages visited and time spent on pages
- Referring website
- Device type and operating system
- Cookies and similar tracking technologies (see Section 8)
Mobile App:
- Device type and operating system version
- App version
- Firebase Analytics data (see Section 7 for full details)
- FCM device token, used to send push notifications about your order
- Crash reports and error logs, used to improve app stability
2.3 Information we do not collect
We do not collect:
- Full payment card details, payment is processed entirely by Stripe
- We do not request government identifiers or sensitive information as separate checkout details. An uploaded PDF document may nevertheless contain that information, depending on what you choose to send.
- Location data beyond what is necessary for address autocomplete
- Your contacts or address book
- Browsing history outside of the PostMyDoc Service
3. The Burn After Reading Policy: How we handle your documents
The handling of uploaded documents is governed by our Burn After Reading Policy which is a core commitment of the PostMyDoc service.
3.1 Encryption in transit Uploaded PDF documents are protected by HTTPS/TLS while they are transmitted between your device and our systems. Access to stored documents is restricted as described in Section 3.2.
3.2 Restricted storage Uploaded documents are stored in a restricted server directory that is not publicly accessible. Files cannot be accessed via direct URL and require authenticated server-side access only.
3.3 Purpose limitation Your uploaded document is used solely for the purpose of printing and posting your order. PostMyDoc personnel access your document only to the extent necessary to print and prepare it for dispatch.
3.4 Automatic deletion An automated process runs hourly and removes each uploaded PDF document from our live server storage once the file becomes more than 24 hours old. Deletion is measured from the file’s age in live storage, not from dispatch. Your PDF may therefore be removed before or after your order is dispatched, or if your order is cancelled or never dispatched. If the process is interrupted, removal completes when it next runs successfully. Separate temporary printing copies or backup copies, if held, are handled as described in Section 3.5.
3.5 Backup copies and recovery A PDF uploaded for an order may be captured in an encrypted backup before it is deleted from live server storage under Section 3.4. We do not use backups for ordinary access to documents, printing, reposting or resending. Only the most recent seven days of backup restore points are routinely available to us; a copy held by our hosting provider may remain until the relevant backup rotates out, for up to approximately 30 days. We do not access backups for ordinary printing, retrieval, reposting or resending, and an emergency restoration does not restore uploaded PDFs for ordinary use.
3.6 What we retain The Burn After Reading Policy applies to uploaded PDF documents only. The following order information is retained as part of PostMyDoc’s order records:
- Your name and email address
- Recipient name and delivery address
- Order details: print type, postage service, page count, order value
- Payment confirmation from Stripe
- Dispatch date and tracking number where applicable
3.7 Returned physical envelopes Our Burn After Reading Policy also covers a physical envelope if it is returned to us as undeliverable. We may learn of a delivery problem and contact you before the envelope reaches us. The five-business-day holding period starts only when we receive the returned envelope.
We hold a returned envelope securely for up to five business days so you can ask us to repost it or discuss another arrangement. If you ask us to destroy it sooner, we will securely shred and dispose of it promptly after receiving your request, or promptly after the envelope arrives if it has not yet reached us. We will not continue holding it until the five-business-day period ends. Once destroyed, the envelope cannot be reposted.
If you do not contact us within five business days after we receive the envelope, we securely shred and dispose of it. A fresh send requires you to provide the PDF again if the digital file is no longer available for reprinting. An item that is not returned to us cannot be held or destroyed by us under this process.
4. How We Use Your Information
We use the information we collect to:
- Process and fulfil your order: printing and posting your document
- Send order confirmation, printing & packaging, dispatch and tracking notifications to your email address
- Send push notifications to your mobile device about your order status (App only)
- Respond to your enquiries and provide customer support
- Improve the Service — website and app performance, user experience and features
- Monitor and analyse usage patterns via Firebase Analytics to understand how customers use the App
- Detect, investigate and prevent fraudulent transactions and abuse of the Service
- Comply with legal obligations including tax record keeping
- Enforce our Terms and Conditions
We do not use the content of uploaded PDF documents for analytics, advertising or product development.
5. Disclosure of Your Information
We disclose personal information to service providers where needed to process and deliver your order, operate and protect the Service, or understand how those services are used. The information shared depends on the feature you use. We do not sell, rent or trade your personal information.
5.1 Printing and delivery We provide recipient names, delivery addresses and necessary postage details to Australia Post to deliver items and provide tracking where applicable. Authorised PostMyDoc personnel handle uploaded documents to prepare, print and post orders. Our handling and deletion of document content is described in Section 3.
5.2 Payments Stripe processes payments and payment-related security information. We receive information needed to confirm and administer a payment, but do not receive or store your full card number. If you select an available Afterpay or Klarna option, that provider processes information needed to offer and administer it.
5.3 Address services When you use address search, autocomplete or matching, address text you enter and relevant delivery-address details may be provided to Google Places and Addressfinder to suggest, check or match an address. Addressfinder may also be used to obtain or check a delivery point identifier (DPID) for an Australian address. We use the results to help you enter an address and prepare your order for delivery.
5.4 Website and App services Our hosting and email providers may handle information needed to host the Service, store order information and send service-related messages. Google Analytics and Firebase Analytics may handle website or App usage and device information so we can understand and improve the Service. Firebase Cloud Messaging may handle a device token and related technical information to send order-related App notifications. Security providers may handle technical information, such as an IP address or information about an attempted login to our administration systems, to help protect the Service. These providers do not receive uploaded document content for advertising.
5.5 Overseas handling Some providers described above may handle personal information outside Australia. Section 6 identifies the overseas countries we are likely to disclose personal information to, where practicable, and explains our approach to overseas disclosures. An overseas provider’s handling of information does not change the document-deletion arrangements described in Section 3.
5.6 Legal requirements We may disclose personal information where required or authorised by law, including to courts, regulators and law-enforcement agencies
5.7 Business transfers In the event PostMyDoc or its assets are acquired, transferred, or sold, your personal information may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer.
6. Overseas Disclosure of Personal Information
We primarily store order information in Australia. Some personal information may be disclosed to service providers outside Australia when you use the Service. This may include information needed to process a payment, check or complete a delivery address, measure use of the website or App, send an App notification, or protect the Service from misuse. The information involved depends on the feature you use. We do not disclose uploaded PDF content to overseas providers for advertising.
The overseas recipients we are currently likely to disclose personal information to are located in the United States. We will update this section if our use of a service provider makes disclosure to another country likely, where it is practicable to identify that country. Information merely passing through a country in transit is not necessarily a disclosure to a recipient in that country.
Before disclosing personal information to an overseas recipient, we take steps reasonable in the circumstances to ensure the recipient does not breach the Australian Privacy Principles in relation to that information, unless an exception under the Privacy Act 1988 (Cth) applies. These steps may include reviewing the information shared, the recipient’s terms and privacy and security practices, and the protections available for that information.
Where we disclose your personal information to overseas recipients we take reasonable steps to ensure those recipients handle your information in accordance with the Australian Privacy Principles or a comparable privacy framework.
7. Firebase Analytics and App Data Collection
The PostMyDoc app uses Firebase Analytics to collect analytics data. Analytics data may include device or app identifiers. This data helps us understand how customers use the mobile app and identify areas for improvement.
Data collected by Firebase Analytics includes:
- App open events
- Order flow steps completed and abandoned
- Payment completion and failure events
- Device type and operating system version
- App version
Firebase Analytics does not collect:
- Your name or email address
- The content of documents you upload
- Your recipient’s address
- Payment card details
You can opt out of Firebase Analytics data collection by disabling analytics tracking in your device settings.
8. Cookies and Tracking Technologies
Website: The PostMyDoc website uses cookies and similar technologies to:
- Remember your selections on the order form
- Analyse website traffic via Google Analytics (Site Kit)
- Ensure the checkout process functions correctly
You can control cookies through your browser settings. Disabling cookies may affect the functionality of the order form.
App: The PostMyDoc app does not use traditional browser cookies. The app uses local device storage for the following purposes:
- Saving your sender name and email address if you tick “Save my details for next time” — stored locally on your device only
- Storing your order history locally on your device
9. Data Security
PostMyDoc implements industry-standard security measures to protect your personal information including:
- HTTPS/TLS encryption for information transmitted between your device and our systems.
- Restricted server directory storage for uploaded PDF documents
- Automated hourly removal of uploaded PDF files from live server storage once they become more than 24 hours old, whether or not the order has been dispatched. Temporary printing copies and backup copies, if held, follow the separate handling described in Sections 3.4 and 3.5.
- Secure payment processing via Stripe — PostMyDoc never receives or stores full card details
- Login attempt limiting on the PostMyDoc website administration
- Regular security audits of the website and app codebase
While we take every reasonable precaution to protect your information, no online transmission or storage system is 100% secure. You provide your information at your own risk.
10. Data Retention
We retain your personal information for the following periods:
| Data Type | Retention Period |
|---|---|
| Uploaded PDF documents | An automated process runs hourly and removes each PDF from live server storage once it becomes more than 24 hours old. If the process is interrupted, removal completes when it next runs successfully. Backup copies, if held, follow the separate handling described in Sections 3.4 and 3.5. |
| Physical envelope returned to PostMyDoc | Held securely for up to five business days from receipt. If you request earlier destruction, we securely shred and dispose of it promptly after your request or, if it has not yet arrived, promptly after receipt; we do not hold it for the remainder of the five-business-day period. If you do not contact us within that period, we securely shred and dispose of it. An envelope may instead be reposted or handled under another arrangement agreed with you. |
| Order details (name, email, recipient address, order value) | 7 years — required for Australian tax record keeping obligations |
| Payment records | 7 years — required for Australian tax record keeping obligations |
| Customer communications | 3 years from the date of the communication |
| Firebase Analytics data | 14 months — Google’s standard retention period |
| App crash logs | 90 days |
11. Your Rights Under the Australian Privacy Principles
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles you have the right to:
11.1 Access your information You may request access to the personal information we hold about you. After an uploaded PDF document has been removed from live server storage, we may be unable to provide it from that system. Any other copy, if held, is handled under the separate process described in Section 3. We can provide access to your order details, email address and recipient address information.
If an envelope is returned to us and remains in our custody, it may contain personal information. We will assess requests concerning that information under applicable privacy law and the returned-envelope handling process described in Section 3.7.
11.2 Correct your information If you believe any personal information we hold about you is inaccurate, incomplete or out of date you may request that we correct it.
11.3 Anonymity Where practical you may interact with us anonymously or using a pseudonym. However providing accurate information is required to process and deliver your order.
11.4 How to exercise your rights To request access to or correction of your personal information please contact us at postmydoc.au/contact-us/ or via the contact details in Section 13. We will respond within 30 days.
12. Children’s Privacy
The PostMyDoc Service is not directed at children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child please contact us immediately and we will delete it.
13. Complaints
To request access or correction, ask a privacy question, or make a complaint, contact PostMyDoc Privacy at privacy@postmydoc.au.
We will acknowledge a privacy complaint within 5 business days and aim to respond within 30 days. If you are dissatisfied with our response, you may lodge a formal complaint to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
14. Changes to This Privacy Policy
PostMyDoc may update this Privacy Policy from time to time to reflect changes to our practices, the Service or applicable law. Updated versions will be posted on the website and app with a revised “Last updated” date. Continued use of the Service after an updated Privacy Policy is posted constitutes your acceptance of the updated policy.
For significant changes we will notify you by email if we hold your email address.
15. Contact Us
For any questions about this Privacy Policy or how we handle your personal information:
PostMyDoc Privacy privacy@postmydoc.au OR postmydoc.au/contact-us/