Privacy policy

Simply Being (we, us) is committed to protecting your privacy. This policy explains how we collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It also explains how you can access and correct your information and how to make a complaint.

1. What we collect

• Identity and contact details: name, email address, phone number, delivery and billing address.
• Order details: products purchased, order history, delivery information and communications with us about your orders.
• Payment information: handled entirely by Shopify and its payment processors. We do not receive or store your full card number.
• Product reaction reports: if you tell us about an adverse reaction, we record the details you provide, including any health information you choose to share, so that we can respond to you and meet our product safety obligations. We only collect health information with your consent.
• Marketing preferences: whether you have subscribed to our emails and how you interact with them.
• Technical data: IP address, browser type, device, pages viewed and referring site, collected through cookies and similar technologies described below.

We collect information directly from you when you place an order, create an account, subscribe, contact us or submit a review, and automatically when you use the Site. You may deal with us anonymously or under a pseudonym when browsing, but we need your real details to fulfil an order.

2. Why we collect it

We use personal information to process and deliver your orders, provide customer service, handle returns and consumer guarantee claims, monitor product safety, prevent fraud, improve the Site, comply with legal obligations (including tax and consumer law), and, with your consent, send you marketing.

3. Direct marketing

We only send marketing emails to people who have opted in, in accordance with the Spam Act 2003 (Cth). Every email includes a working unsubscribe link, and you can also opt out at any time by emailing privacy@simplybeingbeauty.au. We do not sell or rent your information to third parties for their marketing.

4. Who we share it with

We disclose personal information only where necessary to run our business, to service providers who are bound to protect it:

• Shopify Inc. (checkout, payments, order management), which stores data in Canada and the United States.
• Payment providers such as Shopify Payments, PayPal, Apple Pay, Google Pay and buy-now-pay-later services you choose at checkout, which process your payment under their own privacy policies.
• Australia Post and courier partners to deliver your order.
• Email service providers to send order confirmations and, if you opt in, our newsletter.
• Website hosting and analytics providers, including Vercel Inc. (hosting) and Google LLC (web fonts), which may process technical data in the United States.
• Professional advisers and regulators where required by law, including the Therapeutic Goods Administration or AICIS in relation to product safety.

5. Overseas disclosure

Some of the providers above store or process information outside Australia, principally in the United States, Canada and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs, including through contractual protections. By providing your information you acknowledge this disclosure.

6. Cookies and similar technologies

The Site uses:

• Essential cookies, set by Shopify's Buy Button, to remember the contents of your bag and complete checkout. These cannot be switched off without disabling shopping.
• Preference storage in your browser to remember your cookie choice.
• Analytics cookies, only if you accept them, to understand how the Site is used in aggregate. We do not currently run advertising or retargeting pixels.

You can change your choice at any time by clearing your browser's storage for this site, and most browsers let you block cookies entirely, though the bag will not work without essential cookies.

7. Security and retention

We store personal information on secure, access-controlled systems and use encryption in transit throughout the Site. We keep order records for seven years to meet Australian tax and consumer law obligations, product reaction reports for the life of the product plus seven years for safety monitoring, and marketing data until you unsubscribe. Information we no longer need is destroyed or de-identified.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

8. Access and correction

You may ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@simplybeingbeauty.au. We will respond within 30 days and will not charge for a reasonable request. If we decline a request, we will tell you why in writing and how to complain.

9. Children

The Site is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us with information, please contact us and we will delete it.

10. Complaints

If you have a concern about how we have handled your personal information, please contact our Privacy Officer at privacy@simplybeingbeauty.au or by post to Level 7, 333 Collins Street, Melbourne VIC 3000. We will acknowledge your complaint within 7 days and aim to resolve it within 30. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

11. Changes

We may update this policy from time to time. The current version, with its effective date, is always available on this page.

Simply Being · Privacy Officer: privacy@simplybeingbeauty.au