1. About this policy
Pretty and Practical Pty Ltd (ABN 46 670 097 668) (“Pretty and Practical”, “we”, “us” or “our”) operates the ecommerce website www.prettyandpractical.com.au and associated customer services. This policy explains how we collect, hold, use and disclose personal information when you browse our website, create or use an account, place an order, contact us, subscribe to marketing, submit a review or otherwise interact with us.
This policy is intended to describe our practices; it does not make consent the basis for every activity. Where consent is legally required, we will seek it separately. If you do not provide information that is reasonably required for an order or requested service, we may be unable to provide that order or service.
We voluntarily follow the Australian Privacy Principles as a framework for handling personal information. References to statutory obligations apply where the Privacy Act 1988 (Cth) applies to us.
2. Who to contact
Questions about this policy, access or correction requests, and privacy complaints can be sent to our Privacy Officer:
- Privacy Officer
- Email: contact@prettyandpractical.com.au
- Telephone: +61 411 597 261
- Postal address: Suite 1.01, Level 1, 4 Burbank Place, Norwest NSW 2153, Australia
3. Personal information we collect and hold
The kinds of personal information we collect and hold depend on how you interact with us and may include the categories below.
- Identity and contact information, such as your name, email address, telephone number, billing address and delivery address.
- Order and transaction information, such as products purchased, order value, delivery instructions, returns, refunds and payment confirmation. Payment card details are generally collected and processed by our payment providers rather than stored in full by us.
- Account information, such as your account identifier, preferences and order history. Authentication credentials may be handled by Shopify or another authentication provider and may not be visible to us.
- Website and device information, such as IP address, browser type, device identifiers, cookie identifiers, referring pages and how you use our website.
- Marketing information, such as subscription status, campaign interactions and advertising preferences.
- Communications and customer-service information, including enquiries, complaints, chat messages and information you choose to provide.
- User-generated content, such as product reviews, photographs or other content you submit.
- Fraud-prevention information, including information used to identify suspicious or unauthorised transactions.
We do not intend to collect sensitive information unless it is reasonably necessary for a specific purpose and permitted by law. Please do not send sensitive information through ordinary email, chat, reviews or other unsecured channels.
4. How we collect personal information
We may collect personal information:
- directly from you when you make a purchase, create an account, contact us, subscribe, enter a promotion, request a return or submit content;
- automatically when you use our website, through cookies, pixels, server logs and similar technologies;
- from Shopify and service providers that operate parts of our store, payments, delivery, customer support, analytics, fraud prevention and marketing;
- from delivery recipients or other people who provide your details to us, for example when sending you a gift; and
- from publicly available sources or social media where lawful and relevant to our dealings with you.
If you provide us with another person’s personal information, you should have authority to do so and, where appropriate, tell that person about this policy.
5. Why we collect, use and disclose personal information
We may collect, use and disclose personal information to:
- process payments, accept and fulfil orders, arrange delivery, manage returns and refunds, and provide requested products and services;
- create and administer customer accounts;
- communicate about orders, deliveries, enquiries, complaints, warranties and customer support;
- operate, maintain, secure and improve our website, products and customer experience;
- prevent and investigate fraud, misuse, security incidents and unlawful activity;
- conduct analytics, forecasting and business administration;
- send marketing where permitted by law and personalise advertising, subject to your choices;
- publish reviews or other content at your direction;
- comply with legal, tax, accounting and regulatory obligations; and
- establish, exercise or defend legal claims and enforce our terms.
We may also use or disclose information for another purpose where you would reasonably expect it, where you consent, or where the use or disclosure is otherwise authorised or required by law.
We and our payment and ecommerce providers use automated tools to detect fraud, misuse and security risks. These tools may assess transaction details, payment-verification results, device and network information, location indicators and purchasing patterns. A transaction may be flagged for review or, in some circumstances, blocked before an order is created. Existing orders are reviewed by our team unless we later implement and disclose a different process.
6. Cookies, analytics and advertising
We use cookies and similar technologies to operate the website, remember preferences, maintain shopping-cart functions, understand website performance, prevent fraud and, where enabled, measure or personalise advertising. These technologies may collect device, browser, network, cookie identifier, approximate location and website-interaction information.
Some cookies are necessary for the website to function. You can control cookies through your browser settings and manage targeted-advertising preferences through services such as Google, Meta and TikTok. Blocking some cookies may affect website functions and may not prevent all online tracking or advertising.
We currently use Google Analytics, Google Ads, Meta Pixel, Shopify Audiences and TikTok Pixel for analytics, advertising measurement and targeted advertising.
Information about cookies used by Shopify is available at https://www.shopify.com/legal/cookies.
7. Direct marketing
Where permitted by law, we may use your contact details to send information about our products, offers and news by email or SMS. Marketing messages will identify the sender and provide an unsubscribe method. You can opt out at any time by using the unsubscribe facility in a message or contacting us. We may still send non-promotional communications about your account, orders, safety notices or customer-service requests.
8. When we disclose personal information
We may disclose personal information to:
- Shopify and providers that host, maintain or secure our ecommerce website;
- payment gateways, banks and fraud-prevention providers;
- warehousing, fulfilment, courier, postal and logistics providers;
- customer-support, email, SMS, review, analytics and advertising providers;
- professional advisers, insurers, auditors and technology providers;
- regulators, courts, law-enforcement bodies and other parties where required or authorised by law;
- a purchaser, adviser or relevant counterparty in connection with a proposed or completed business sale, merger, restructure or insolvency; and
- other parties where you direct us or provide consent.
We do not sell, rent or exchange customer contact lists. We may disclose limited personal information or digital identifiers to service providers and advertising platforms for the purposes described in this policy.
9. Overseas disclosures
Some of our service providers and operations personnel may store or access personal information outside Australia. The countries in which overseas recipients are likely to be located include Canada, the Philippines and the United States. These locations may change if our service-provider arrangements change. Where the Privacy Act applies, we take reasonable steps required by law in relation to overseas disclosures.
If laws outside Australia apply to a particular customer or processing activity, we will take any additional steps required by those laws.
10. How we hold and protect personal information
Personal information may be held in our ecommerce platform, cloud services, payment and order systems, customer-support tools and business records. We use reasonable administrative, technical and physical safeguards appropriate to the information and risks, such as limiting access, using reputable service providers and protecting accounts and systems. No method of storage or transmission is completely secure, so please avoid sending sensitive or confidential information through unsecured channels.
If an eligible data breach occurs and the Notifiable Data Breaches scheme applies, we will assess and notify affected individuals and the Office of the Australian Information Commissioner as required by law.
11. Retention and deletion
We retain personal information only for as long as reasonably needed for the purpose for which it was collected, to provide services, maintain business and tax records, resolve disputes, manage fraud and security risks, and satisfy legal obligations. Retention periods vary by record type. When information is no longer required, we take reasonable steps to destroy it or permanently de-identify it, unless retention is required or authorised by law.
12. Access, correction and privacy choices
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity. We will respond within the period required by applicable law and, if we refuse a request, will generally explain why and identify available complaint options. In some circumstances, another law may provide additional rights such as deletion, restriction, portability, consent withdrawal or review of a decision.
You may manage some account information through your account settings, change browser cookie controls, or unsubscribe from promotional communications. Requests may be sent to the Privacy Officer using the contact details in section 2.
13. Complaints
If you believe we have mishandled your personal information, contact our Privacy Officer and describe the issue and the outcome you are seeking. We will acknowledge your complaint, investigate it and respond within a reasonable time. If we require additional time, we will let you know.
If you are not satisfied with our response and the Australian Privacy Act 1988 applies, you may complain to the Office of the Australian Information Commissioner. Information about lodging a complaint is available at https://www.oaic.gov.au/privacy/privacy-complaints or by calling 1300 363 992.
14. Children
Our website and products are intended for a general adult audience and are not directed to children. We do not knowingly collect personal information directly from children without appropriate involvement from a parent or guardian. A parent or guardian who believes a child has provided personal information may contact us to request appropriate action.
15. Public content and third-party links
If you submit a review, photograph or other content for public display, the content and any name or identifier you choose to display may be visible to others. Do not include information you do not want made public.
Our website may link to third-party websites or services. Their handling of personal information is governed by their own privacy policies, and we are not responsible for their practices.
16. Changes to this policy
We may update this policy to reflect changes to our practices, services or legal obligations. We will publish the current version on our website and update the effective or review date. Where a change is material and additional notice is appropriate or legally required, we will take reasonable steps to provide that notice.