Privacy Policy

Last updated 15 October 2026

Saturn Program Returns Pty Ltd (“Whip”, “we”, “us” or “our”) operates whip.to (the “Site”). This policy explains what personal information we collect, how we use and share it, and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, to the extent they apply to us.

The short version

• We collect your email address if you join the early access list, and whatever you send us if you email us.
• We use it to tell you about Whip and to reply to you. We don’t sell it.
• The Site doesn’t set cookies or use analytics or advertising trackers.
• You can unsubscribe, or ask to see, correct or delete your information, by emailing hi@whip.to.

1. What we collect

• Early access list. Your email address, when you joined and where you signed up.
• Emails you send us. When you email hi@whip.to or another whip.to address, we receive your name and email address, your message, any attachments and standard email details such as the date, time and delivery route.
• Technical information. When you visit the Site, our hosting provider automatically processes information such as your IP address, browser and device type, the pages you request, the page that referred you and the date and time of your visit. This is used to deliver the Site and keep it secure and reliable.

We don’t ask for sensitive information, and we ask that you don’t send it to us.

2. Cookies and tracking

The Site doesn’t set cookies and doesn’t use analytics, advertising or social media tracking tools. If that changes, we’ll update this policy first.

Emails we send to the early access list may include standard email tracking, such as a small image or links that pass through our email provider, which tells us whether an email was opened and which links were clicked. We use this to understand what’s useful and to keep the list healthy.

3. How we use it

• To manage the early access list and email you about Whip, including launch news, early access invitations and requests for feedback.
• To reply to your messages and requests.
• To run, protect and improve the Site and our email, including detecting and preventing spam, abuse and security incidents.
• To meet our legal obligations and enforce our Terms of Use.

We only send marketing emails with your consent, and every one includes a way to unsubscribe, as the Spam Act 2003 (Cth) requires.

4. Who we share it with

We don’t sell or rent personal information. We share it only with:

• service providers that help us run the Site and our email, and that must protect it: Vercel Inc. (website hosting), Nitrosend Pty Ltd (early access list, email delivery and our inbox) and Google LLC (email, where messages sent to whip.to addresses are forwarded and read). These providers may use their own sub-processors, such as Amazon Web Services for email delivery;
• professional advisers, such as lawyers and accountants, when we need their help;
• a buyer or successor if Whip or its assets are sold, merged or restructured, who must handle it consistently with this policy; and
• regulators, courts, law enforcement or others when the law requires or allows it, or when it’s reasonably necessary to protect someone’s safety or our legal rights.

5. Information sent overseas

Our service providers store and process information outside Australia, mainly in the United States. Vercel and Google also run global networks, so information may pass through or be stored in other countries where they have infrastructure. It isn’t practicable to list every one of those countries. When we disclose personal information overseas, we take reasonable steps to make sure it’s handled in a way that’s consistent with the Australian Privacy Principles, including by using providers bound by data protection terms.

6. Keeping it secure

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, change or disclosure. That includes encrypting it in transit, limiting who can access it and using established providers. No system is perfectly secure, so we can’t guarantee the security of information you send us.

7. How long we keep it

• We keep your early access details until you unsubscribe or ask us to delete them, or until we no longer need them. If you unsubscribe, we keep your email address on a suppression list so we don’t email you again.
• We keep emails for as long as we need them to deal with the matter and keep reasonable business records.
• Our hosting provider keeps technical logs for a limited time under its own retention settings.

When we no longer need personal information, we take reasonable steps to delete or de-identify it.

8. Your choices and rights

• Unsubscribe from our emails at any time using the link in any email, or by emailing hi@whip.to. We action unsubscribe requests within five working days and won’t ask you for anything other than your email address to do it.
• Ask for access to the personal information we hold about you, or ask us to correct it.
• Ask us to delete your personal information.

To ask for access, correction or deletion, email hi@whip.to. We may need to confirm your identity first. We’ll respond within a reasonable time, usually within 30 days. If we refuse a request, we’ll tell you in writing how to complain and, unless it would be unreasonable, why we refused.

9. If you’re in the EU, EEA or UK

If the GDPR or UK GDPR applies to you, we rely on your consent to add you to the early access list and email you (you can withdraw it at any time by unsubscribing), and on our legitimate interests to reply to your messages and keep the Site secure. You also have the right to restrict or object to our use of your information, to data portability, and to complain to your local data protection authority.

10. Children

The Site isn’t intended for children under 16, and we don’t knowingly collect their personal information. If you think a child has given us their details, contact us and we’ll delete them.

11. Complaints

If you’re concerned about how we’ve handled your personal information, email hi@whip.to with the details. We’ll acknowledge your complaint and aim to respond within 30 days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this policy from time to time. We’ll publish the new version on this page with a new date at the top. If a change is significant, we’ll take reasonable steps to let you know, such as emailing the early access list.

13. Contact