Some links on PoTayto Picks are affiliate links, and we may earn a commission. How we're paid

Privacy policy

Last updated: 14 November 2026

PoTayto Picks ("we", "us") runs potaytopicks.com.au, an Australia-wide deals and guides site. We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We follow the APPs regardless of any small business exemption that might apply to us.

Business name: PoTayto Picks · Contact: hello@potaytopicks.com

1. What we collect

  • Newsletter sign-ups (only if we start a newsletter): your email address and (optionally) first name. We don't collect these yet.
  • Emails you send us: your name, email address and whatever you tell us.
  • Website visits: We use Cloudflare Web Analytics to understand page views, visits and website performance. When the analytics script runs, your browser sends Cloudflare page and referring-page information and performance measurements, including page-load and layout information. Reports can include country, browser, operating system and device type. Cloudflare says Web Analytics does not use cookies or browser storage for analytics, fingerprint visitors, or track individuals across its customers’ sites. Cloudflare receives your IP address to handle the analytics request; it says the RUM service discards that IP at the nearest data centre and does not store it in its core databases or logs. Cloudflare says Web Analytics does not log query strings. The current beacon strips query strings and fragments from its main page and referrer fields. This does not mean that no technical information is processed. Cloudflare Pages also processes technical information to deliver and secure this site.
  • Affiliate clicks: when you click an affiliate link on a labelled guide, the affiliate network or retailer records the click and any sale that follows. We see reports of clicks and sales, not your name or payment details. Today that covers: (1) the Marley Spoon link in our meal-kit guide, tracked by Awin — the only things in that link are our publisher ID and the label meal-kit-guide; (2) NordVPN and/or NordPass links on the guides named on our Affiliate disclosure page, tracked by Nord's own affiliate platform — those links identify our publisher account to Nord. No personal information from us is added to either kind of link.

We don't ask you to submit health or other sensitive information. Please don't put it in emails or page URLs. Analytics also measures visits to our resource pages; a page address can reveal the topic someone is viewing. This does not tell us a visitor's diagnosis or establish who they are.

2. How we collect it

We collect information directly from emails you send us. Technical information is processed automatically through Cloudflare hosting and the Web Analytics script in your browser. Affiliate networks and retailers collect information through their links and cookies when you follow an affiliate link. We don't buy email lists.

Who reads your emails: emails sent to hello@potaytopicks.com are read and answered by our team of AI assistants and by PoTaytoHead, the person behind the site. The AI assistants use third-party AI services to read and draft replies, so the text of your email may be processed by those providers, including outside Australia. Please don't put sensitive information in an email to us.

3. Why we use it

  • Sending the newsletter you asked for, if we start one
  • Replying to your messages
  • Understanding which pages and deals are useful, and keeping the site secure
  • Getting paid commission by retailers when a referred purchase is made

We don't sell your personal information, and we only use it for other purposes if you'd reasonably expect it or the law allows.

4. The newsletter and the Spam Act

We don't send a newsletter yet. If we start one, we will:

  • only email you if you've signed up and confirmed (double opt-in)
  • name PoTayto Picks as the sender and include hello@potaytopicks.com in every email
  • put a working unsubscribe link in every email. Unsubscribing will be free, will need no login, and we'll action it within 5 business days (usually straight away)

We'll update this policy before we send the first one.

5. Who we share it with

We share information only with service providers who help us run the site, such as:

  • AI service providers that power our AI assistants, when they process emails you send us
  • Kit (ConvertKit): newsletter delivery, only if we start a newsletter
  • Cloudflare, Inc. — website hosting and security (Cloudflare Pages), and website usage and performance measurement (Cloudflare Web Analytics). Your browser sends analytics measurements directly to Cloudflare.
  • Affiliate networks and retailers: we currently use Awin for Marley Spoon, and Nord's in-house affiliate programme (nordvpn S.A. / Nord Security) for NordVPN and NordPass. They may process data outside Australia. If we add other networks or retailers, we'll list them here first. Their own privacy policies apply to what they collect: Awin privacy policy, Marley Spoon privacy policy, Nord Privacy Policy (and Nord's service-specific NordVPN / NordPass privacy notices linked from that page).

We may also disclose information if required by law.

6. Overseas disclosure

Some of these providers store data outside Australia, including the United States (Kit, if we use it, is a US-based company). Affiliate networks may store data in the US, UK, Europe or elsewhere. We take reasonable steps to choose providers with sound privacy and security practices.

Cloudflare is US-based and operates globally. It says information covered by its privacy policy is primarily stored in the United States and the European Economic Area. RUM requests are generally processed at a nearby Cloudflare data centre, which may be outside Australia; the handling country can differ from the visitor's country. Cloudflare group companies and service providers may support its services in other countries. See Cloudflare's privacy policy and current service sub-processor list for more information.

7. Cookies and affiliate tracking

Cookies are small files saved by your browser.

  • Our site: we use cookie-free Cloudflare Web Analytics. We do not use advertising cookies on our own pages.
  • Affiliate tracking cookies: our own pages use cookie-free Cloudflare Web Analytics and do not run advertising scripts. The search box on the All guides page runs only in your browser and sends nothing to us. When you click the Marley Spoon link, Awin and Marley Spoon can set cookies on their own sites to track the sale. We can't see or control those. The programme sets the tracking window, which is up to 30 days. Their own privacy policies apply. Awin is part of a group based in Germany, and its privacy policy says it may transfer data outside the UK and EU, so information it collects may be handled outside Australia. Read the Awin privacy policy and the Marley Spoon privacy policy.
  • When you click a NordVPN or NordPass affiliate link, Nord can set a tracking cookie on their own site so they can credit a sale if you create a Nord account within about 30 days. We can't see or control that cookie. Our own pages use cookie-free Cloudflare Web Analytics and do not run advertising scripts. The All guides search box runs only in your browser. Read Nord's Privacy Policy and cookie information on nordvpn.com. If you'd rather not be tracked, go straight to nordvpn.com or nordpass.com instead of using our link.

You can block or delete cookies in your browser settings, and our site still works if you do. We may not be credited for a referral. If you'd rather not be tracked, go straight to the retailer's own site instead of using our link.

8. Security and keeping data

We use reputable providers and limit access to what's needed. If we start a newsletter, we'll keep subscriber details until you unsubscribe, plus 30 days, then delete them (apart from a minimal suppression record if needed so we don't email you again). We keep email enquiries for 2 years, then delete them. No system is completely secure; if a breach is likely to cause serious harm, we'll follow the Notifiable Data Breaches scheme where it applies.

Cloudflare says it stores unsampled Web Analytics beacon data for seven days, then reduces the data to approximately 10% for longer-term storage. Web Analytics reports are available for the previous six months. These periods describe the analytics service, not all Cloudflare hosting or security logs. See Cloudflare's Web Analytics FAQ and privacy policy for its data-handling details.

9. Access and correction

You can ask to see or correct the personal information we hold about you by emailing hello@potaytopicks.com. We'll respond within a reasonable time (generally 30 days) and won't charge for the request.

10. Complaints

Email hello@potaytopicks.com with "Privacy" in the subject. We'll look into it and reply in writing. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au

11. Changes

We'll update this page if our practices change and show the new date at the top.

Sources (checked 23 Oct 2026, Melbourne time)

Cloudflare analytics sources (checked 8 Nov 2026, Melbourne time)