1. Data We Collect

When you visit our website, place an order, or interact with us, we may collect the following personal data:

• Full name, shipping and billing address
• Email address and phone number
• Order and customer support history
• IP address, browser type, device information, location (non-precise)
• Payment status and transaction confirmation (Note: we do not collect or store your credit or debit card details. Payments are handled securely by certified third-party processors such as Stripe or PayPal.)

2. Purpose and Legal Basis of Processing

We process your personal data for specific and lawful purposes under GDPR. Our legal bases include:

• Performance of contract: To process, deliver, and support your orders.
• Consent: For marketing communications (opt-in only).
• Legal obligation: For invoicing, tax, and regulatory compliance.
• Legitimate interest: To detect fraud, improve website performance, and respond to customer inquiries.

3. Data Sharing and Processors

We never sell your personal data. We only share it with trusted service providers who help us operate our website and fulfill our services:

• Payment providers (e.g., Stripe, PayPal) for secure checkout
• Shipping carriers (e.g., DHL, Australia Post)
• Email marketing platforms (if you opted in)
• Analytics and security tools (e.g., Google Analytics, Cloudflare)
• Legal or government authorities when required

All third-party processors are under strict contractual obligation to process your data lawfully and securely (as per Article 28 GDPR).

4. International Data Transfers

Some of our service providers are located outside the EU. In such cases, we ensure your data is protected by using EU-approved Standard Contractual Clauses (SCCs) or other legally valid transfer mechanisms.

5. Data Retention

We retain personal data only as long as necessary to fulfill the purpose it was collected for, including legal, tax, accounting, or reporting obligations. You may request deletion of your data if it is no longer needed for these purposes.

6. Your Rights Under GDPR

You have the following rights under GDPR:

• Right to access – Request a copy of your personal data.
• Right to rectification – Request correction of incorrect or incomplete data.
• Right to erasure – Request deletion of your data (“right to be forgotten”).
• Right to restriction – Request limitation of how your data is used.
• Right to data portability – Receive your data in a structured format.
• Right to object – Object to data processing based on legitimate interests.
• Right to withdraw consent – Unsubscribe from marketing at any time.
• Right to lodge a complaint with a supervisory authority in your EU country.

To exercise any of these rights, please contact us at [email protected].

7. Cookies and Tracking

We use cookies and similar technologies to remember preferences, analyze traffic, and serve personalized content. You can manage your cookie preferences in your browser or decline non-essential cookies on our site.

8. Data Security

We implement industry-standard physical, administrative, and technical safeguards to protect your data from unauthorized access, misuse, or disclosure. All data is encrypted in transit and stored securely.

9. Children’s Privacy

We do not knowingly collect personal data from children under 13. If we become aware of such data, we will delete it immediately. Parents or guardians may contact us to request removal.

10. Policy Updates

This privacy policy may be updated to reflect changes in law or our practices. Updates will be posted with a new effective date. Continued use of our services after changes constitutes agreement to the updated terms.

11. Contact Information

If you have any questions, requests, or complaints related to your data or this policy, you can contact us at:

Email: [email protected]
Hours: Monday to Friday, 9 AM to 5 PM (AEST)