ABL Skincare

Privacy Policy

Draft. Under legal review.

Last updated: [DATE]

1. About this policy

This Privacy Policy explains how ABL Skincare Pty Ltd (ABN 85 702 933 159), trading as ABL Skincare, collects, uses, discloses and protects personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

By using our website at https://www.ablskincare.com.au, creating an account, placing an order or
contacting us, you agree to your personal information being handled as set out in
this policy.

2. What we collect

Information you give us

• name, email address, phone number
• delivery address and billing address
• order history and the contents of your orders
• account login details, where you create an account
• messages, enquiries, reviews and any information you send us, including reports of an adverse reaction to a product
• your marketing preferences

Information we collect automatically

• IP address, device type, browser type and operating system
• pages viewed, time on site and referring website
• cookies and similar technologies (see section 7)

Payment information

Payments are processed by Shopify Payments, using Stripe, and by PayPal or Afterpay where you choose those methods. Your full card number is entered directly with that provider. We do not collect or store complete card numbers. We may receive limited information such as the card type, the last four digits, and whether the payment succeeded.

Sensitive information

We do not seek health information. If you choose to tell us about a skin condition, allergy, pregnancy or adverse reaction — for example when asking for product advice or reporting a reaction — we will treat that as sensitive information, use it only to respond to you and to meet our product safety obligations, and keep it no longer than we need it.

3. How we collect it

We collect personal information directly from you when you order, create an account, subscribe to marketing, leave a review, or contact us. We also collect it automatically through our website and analytics tools, and occasionally from third parties such as our payment provider, delivery partners, or a platform you use to interact with us.

4. Why we use it

We use personal information to:

• process, fulfil and deliver your orders, and contact you about them
• take payment and manage refunds, returns and exchanges
• provide customer service and answer enquiries
• manage your account
• record and respond to adverse reaction reports, and manage product safety issues or recalls
• send marketing communications where you have consented
• improve our products, website and service, including through analytics
• detect and prevent fraud and misuse
• meet our legal and record-keeping obligations

We do not sell your personal information.

5. Who we disclose it to

We disclose personal information to service providers who help us run the business, and only for that purpose. These typically include:

• E-commerce platform and checkout — Shopify (Shopify Inc.)
• Card payments — Shopify Payments, processed by Stripe
• Alternative payment methods — PayPal, and Afterpay if offered at checkout
• Website hosting — Netlify
• Email and marketing — Shopify Email
• Analytics — Shopify's built-in analytics. We do not currently use Google Analytics.
• Delivery — Australia Post, which receives your name, delivery address and contact details
• Professional advisers, such as accountants and lawyers

We may also disclose personal information where required or authorised by law, where necessary to investigate suspected fraud or a safety issue, or to a buyer in connection with a sale or restructure of the business.

6. Overseas disclosure

Some of our service providers store or process personal information outside Australia. Based on our current setup, this includes:

• Canada and the United States — Shopify, which runs our store, checkout and email, and Shopify's built-in analytics
• The United States — Stripe, which processes card payments through Shopify Payments, and Netlify, which hosts this website
• The United States and elsewhere — PayPal, and Afterpay if offered at checkout, where you choose those payment methods

Where we disclose personal information overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

7. Cookies and analytics

Our website uses cookies and similar technologies to keep your cart and session working, remember your preferences, and understand how the site is used.

Essential cookies are needed for the site to function. [Analytics and marketing cookies are only set where you consent through our cookie banner.] You can also block or delete cookies in your browser settings, though parts of the site may stop working correctly if you do.

8. Direct marketing and how to opt out

We will only send marketing emails or messages where you have consented, or where we are otherwise permitted under the Spam Act 2003 (Cth). Every marketing message identifies us and includes an unsubscribe link.

You can opt out at any time by using that link or emailing info@ablskincare.com.au. Opting out does not stop transactional messages — order confirmations, dispatch notices, refund confirmations and safety notices.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include access controls, encryption of our website in transit (HTTPS), and using reputable providers for payments and hosting.

No method of transmission or storage is completely secure. If we become aware of a data breach likely to result in serious harm, we will respond in line with the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

10. How long we keep it

We keep personal information only as long as we need it for the purposes above, or as required by law. Order and transaction records are generally kept for [7] years to meet taxation and record-keeping obligations. Marketing preferences are kept until you opt out. Adverse reaction reports are kept for [PERIOD] for product safety purposes. When we no longer need information, we destroy or de-identify it.

11. Accessing and correcting your information

You can ask for a copy of the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Email info@ablskincare.com.au. We may need to verify your identity first.

We will respond within a reasonable time, normally within 30 days. There is no charge for making a request, though we may charge a reasonable fee for the cost of providing access in some circumstances. If we refuse a request we will tell you why in writing.

12. Complaints

If you believe we have mishandled your personal information, contact us at info@ablskincare.com.au with the details. We will acknowledge your complaint and respond within [30] days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner:

• Website: oaic.gov.au
• Phone: 1300 363 992

13. Children

Our website and products are intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy when our business, systems or legal obligations change. The current version is published on this website with the date it was last updated. Material changes will be [notified by email to account holders / highlighted on the website].

15. Contact

ABL Skincare Pty Ltd trading as ABL Skincare ABN 85 702 933 159 75 King Street, Caboolture QLD 4510 Email: info@ablskincare.com.au

ABL Skincare Pty Ltd · ABN 85 702 933 159 · 75 King Street, Caboolture QLD 4510