This policy explains how [CONFIRM: legal entity name] (ABN [CONFIRM: ABN]) handles personal information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Last updated: [CONFIRM: date].
What we collect
- Order information — name, delivery and billing address, email, phone number, and the contents of your order
- Account information — if you create an account, your username and order history
- Age confirmation — the fact that you confirmed you are 18 or over, and any proof of age you provide
- Payment information — processed by our payment provider. We do not store full card numbers
- Technical information — IP address, browser type, pages visited and referring site, collected through cookies and server logs
Why we collect it
- To process, dispatch and support your orders
- To verify age and eligibility to purchase
- To respond to enquiries and handle returns
- To detect and prevent fraud
- To meet our legal and record-keeping obligations
- To send marketing, only where you have opted in
Who we share it with
We disclose personal information only as needed to run the business: to carriers for delivery, to our payment provider, to our hosting and IT providers, and to professional advisers, insurers or law enforcement where we are legally required or permitted. We do not sell personal information.
Some providers may store data outside Australia. Where that happens we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles. Current known locations: [CONFIRM: overseas data locations, e.g. United States for payment or analytics providers].
Cookies
This site uses cookies to keep your cart and session working, remember preferences, and measure traffic. You can block cookies in your browser, but the cart and checkout will not function correctly without them.
How long we keep it
Order and transaction records are kept for [CONFIRM: retention period — note tax records generally require 5 years]. Account data is kept until you ask us to delete it. Marketing consent is kept until you unsubscribe.
Security
The site is served over TLS and access to order data is restricted to staff who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Accessing and correcting your information
You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email [CONFIRM: privacy contact email]. We will respond within a reasonable period, normally 30 days.
Complaints
If you are not satisfied with how we have handled your information, contact us first at [CONFIRM: privacy contact email]. If the matter is unresolved you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.