Privacy policy

What this covers

This policy explains what personal information this website collects, why, where it goes and what you can do about it. It is written against the Privacy Act 1988 and the Australian Privacy Principles.

What we collect

When you order

Name, email, delivery address, billing address, phone if you give one, and what you bought.

When you message us

Name, email, order number if you give one, and the contents of your message.

When you subscribe

Your email address and the date you subscribed.

When you ask to be notified

Your email address and the product you asked about.

Automatically

Your IP address and browser user agent, recorded in the server log with the request.

In your own browser

Your cart, stored in this browser only, in local storage. It never leaves your device until you check out.

We do not collect date of birth, gender, health information, or anything about your hair or skin unless you volunteer it in a message. We ask for nothing we do not need to send you a parcel.

Payment details

This build does not collect card details at all. There is no card form on the site and no card data reaches our server. Payment is arranged separately once we confirm your order.

Why we collect it

• To pack and deliver your order and to give the carrier an address.
• To email you about that order, including dispatch and tracking.
• To answer the message you sent us.
• To send marketing email only if you asked for it, and to stop the moment you unsubscribe.
• To keep the site running, to spot abuse, and to meet our tax and record keeping obligations.

Tracking and cookies

This site runs no third party analytics, no advertising pixels, no social media trackers and no tracking cookies. There is no Google Analytics tag, no Meta pixel and no session cookie set by this site. That is a design decision and it is verifiable: view the page source.

Your cart uses local storage in your own browser rather than a server side session. Clearing your browser data clears your cart.

Who else sees it

Carriers

Your name, address, phone and email, so the parcel can be delivered and tracked.

Email provider

TO BE FILLED

Hosting

TO BE FILLED

Payment provider

None. No payments are processed on this build.

Advertisers

None. We do not sell, rent or trade your details to anyone.

Law enforcement

Only where we are legally required to, and only what is required.

Where it is stored and for how long

• Orders, messages and subscriptions are stored on our own server as files, not in a third party CRM.
• Order records are kept for seven years because tax law requires it.
• Contact messages are kept for two years, then deleted.
• Newsletter subscriptions are kept until you unsubscribe, and the unsubscribe record itself is kept so we do not email you again by accident.

Server location and provider: TO BE FILLED. If data is stored or backed up outside Australia this policy must say so before launch.

How it is protected

• Order and message files are stored on the server and are not exposed through any public URL.
• The site is served over HTTPS in production.
• Access to stored orders is limited to the people who need it to run the store.
• No system is perfect. If we ever have a breach that is likely to cause serious harm we will notify you and the OAIC as the notifiable data breaches scheme requires.

Your rights

• You can ask what personal information we hold about you and we will tell you.
• You can ask us to correct anything wrong.
• You can ask us to delete your details, and we will, except where tax law makes us keep an order record.
• You can unsubscribe from marketing at any time, on one click, in any marketing email.
• You can ask us not to email you at all beyond what an order requires.

Send any of those requests through the contact form. We reply within one business day and complete the request within 30 days.

Complaints

If you think we have mishandled your information, tell us first through the contact form and we will investigate and reply in writing within 30 days. If you are not satisfied you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Privacy contact

TO BE FILLED

Privacy email

TO BE FILLED

Postal address

TO BE FILLED

Children

This site is not aimed at children and we do not knowingly collect information from anyone under 18. If you believe a child has given us their details, tell us and we will delete them.

Changes to this policy

We will update this page when what we do changes, and we will change the date at the top. If a change is material we will say what changed rather than quietly reissue the page.