Custeum · Legal

Privacy policy

Last updated · 13 Oct 2026

Custeum is the record a shop keeps of a piece it makes, sells or services, published stage by stage to the client who commissioned it and held by that client afterwards. This page says what personal information that involves, what we do with it, and what you can do about it.

It is written for four readers: someone visiting custeum.com, a client a shop has opened a record for, someone a shop has noted without being its client, and someone who works at a shop.

Who we are

Custeum is operated by Organikode (ABN 88 490 922 768), of Melbourne, Australia. On this page “Custeum”, “we” and “us” mean Organikode.

For anything on this page, write to contact@custeum.com.

Whose information it is

Two parties hold information in Custeum, and it helps to know which is which.

The shop’s. A shop’s client book and the records it publishes are the shop’s own. The shop decides what goes into them, and we hold them on the shop’s behalf and on its instructions. Under European and UK law the shop is the controller of that information and we are its processor.
Ours. Your Custeum account, the sign-in behind it, the email Custeum sends in its own name and this website are ours to answer for.

If you want to know or change what a shop holds about you, ask the shop first. If that does not settle it, write to us and we will help.

What we hold

If you visit custeum.com. The site sets no cookies and runs no analytics or advertising. Our host keeps ordinary server logs: the address a request came from, the time and the page. If you send the enquiry form we receive what you typed: your name, your email address, the shop, which kind of shop it is, your message and the language of the page.

If a shop opens a record for you. The contact details the shop holds for you (name, email address, phone number); the record itself (the piece, its serial or chassis number, and the photographs, captions, documents and films the shop publishes); and a log of the emails sent to you about it, including whether each was delivered, bounced or was marked as spam.

If you take custody of a record. Taking custody creates your Custeum account. It holds your email address, the name and phone number you choose to add, your language, the records you hold and when you took custody of each, your favourites, your notification choices for each shop, your consent choice and the dates you changed it, and the replies you press on an invitation. There is no password.

What a shop keeps about you. A shop may note your interests as tags, write notes, record who advises you or who introduced you, list pieces you own, and record invitations, replies and the events you came to. The shop enters this, and only that shop sees it.

If you work at a shop. Your name, work email address, role and language, the times you signed in, and a password that is stored only in hashed form.

On your device. The portals keep your sign-in, your language and your choice of light or dark in the browser’s own storage. Nothing there is used for advertising or analytics.

If a shop has noted you and you are not its client

A shop may record people connected to a client: a partner, an adviser, the person who made an introduction. It may hold your name and contact details, how you are connected, and its own notes. The shop decides this and is responsible for telling you; Custeum holds it on the shop’s behalf, and sends you nothing unless you become a client.

Everything on this page about your rights applies to you. Ask the shop, or write to contact@custeum.com and we will pass your request to the shop and help see it answered.

What is recorded only with your consent

When your account is created you are offered one box, unticked: let the shop see whether its stage emails were opened and which documents were downloaded. Custody never depends on it.

If you tick it, each stage email carries a small image that tells us it was opened, and we note which documents you download. The shop sees both. Some mail programs load every image on arrival, so an email can read as opened when it was not.
If you leave it unticked, nothing of the kind is recorded, before or after you take custody.
You can turn it off in Profile at any time. Nothing new is recorded from then on. What was recorded while it was on stays with the shop.
A shop is never told that you declined. Nothing recorded reads the same whether you said no or simply opened nothing.
Your visits to the record itself are never recorded, with or without consent.

We keep the history of this choice, because the law expects us to be able to show when consent was given and withdrawn. You can read your own history; no shop can.

What we use it for

To show you your record and send you the emails that are part of it: the commission beginning, each stage, the record being sealed, a service falling due.
To sign you in and keep your account yours.
To let a shop look after its own clients: who they are, what they care for, whom to invite.
To send you Exclusives (invitations, offers and news) from a shop you hold a record with. A shop sends these without asking first, because you are its client; they are about that shop’s own work and events, and you can stop them at any time with the unsubscribe link in each one or the switch for that shop in Preferences.
To answer you when you write, to fix faults, and to keep Custeum secure.
To invoice the shops we work with, and to meet our legal obligations.

We do not sell personal information, show advertising, or pass anything to data brokers. Nothing about you is decided by a machine: where the shop portal points out a client who has gone quiet, it is a prompt for a person at the shop and nothing follows from it automatically.

Where European or UK law applies, we rely on our contract with you for your account and your record, on our legitimate interests for security, support and the email log, and on your consent for opens and downloads. The shop relies on its own grounds for its client book.

Who can see it

Anyone with the link. A record opens at its link without signing in, for you and for whoever you show it to. The link is long and unguessable, the record is not listed anywhere, and we instruct search engines not to index it. Share it as you would the piece’s own papers.
The shop that made the record. It sees its own records and its own client book. Once you take custody with a shop, it also sees the name, email address, phone number and language you registered.
No other shop. If you hold records from several shops, no shop ever learns about the others. A shop is never told whether an email address already has a Custeum account.
Us. Our own people may look at a shop’s screens to help it or to investigate a fault. A support session can look and cannot act, and every session is logged.

Who we share it with

We use a small number of companies to run Custeum. They handle information only to provide their service to us.

A database and file host: the database, sign-in and the storage of photographs, documents and films.
An email delivery service: sending email.
A web host: serving the website and the portals.
A form service: delivering the website’s enquiry form to us.

The current list of these companies is available on request from contact@custeum.com.

We also disclose information where the law requires it, and to a buyer if the business behind Custeum is ever sold, on the terms of this page.

Where it is held

The database, the sign-in and the stored photographs, documents and films are held in Sydney, Australia. The email delivery service, the web host and the form service are run by companies based in the United States, so your information may be handled there and in other countries they operate in. We use providers who commit to protecting it, and where European or UK law applies we rely on the transfer terms those laws approve.

How long we keep it

A record is kept for as long as Custeum operates. It is never removed because a shop left, was suspended or stopped paying. We take down or restrict a record, or part of one, only where the law requires it, including on a valid request from a person it identifies.
Your account is kept until you ask us to delete it.
A shop’s client book is kept for as long as the shop works with us, and then returned or deleted as the shop agreement says.
The email log, the history of your consent and the log of support sessions are kept as the evidence of what happened.
An enquiry from the website is kept for as long as we are in conversation with you.

Deleting your account

Write to contact@custeum.com from the address your account uses and we will carry it out. There is no delete control in the portal.

Your sign-in is removed, and your name, email address and phone number are removed from your account, with your favourites and your notification choices.
The records you held go back to awaiting custody. They stay live at their links, because a record is something you and the shop made together and the shop’s link must not break. If you want a record itself taken down, say so and we will tell you what the law allows.
The shop keeps the contact details it holds for you, as its own business record. To have those removed, ask the shop.
If you come back, you can take custody again in the usual way.

Your rights

You can ask us for a copy of the information we hold about you, to correct it, to delete it, to stop or limit a use of it, or to give it to you in a form you can take elsewhere. You can change your name and phone number in Profile at any time. Changing your email address is confirmed at both the old address and the new one.

We answer within thirty days and do not charge for it. If you are unhappy with our answer you can complain to the Office of the Australian Information Commissioner, or to the data protection authority where you live.

Security

Each shop’s information is kept apart from every other shop’s by rules in the database itself, not only by the screens. Clients have no password to lose: sign-in is a link or a code sent to your inbox. Everything travels encrypted. No system is beyond failure, and if a breach is likely to cause you serious harm we will tell you and the regulator.

Children

Custeum is made for adults commissioning work from a shop. We do not knowingly open accounts for anyone under sixteen.

Changes to this page

When this page changes, the date at its head changes with it. If a change matters to how your information is used, we will email account holders and shops before it takes effect.