Privacy Policy

Effective date: 11 August 2026

Shirley & Island Wattle respects your privacy. This policy explains how we collect, hold, use and disclose personal information when you visit shirleyandislandwattle.com.au, purchase products or communicate with us.

Where the Privacy Act 1988 and Australian Privacy Principles apply to us, we will handle personal information in accordance with those requirements. We also aim to follow the Australian Privacy Principles as a matter of good practice where a small-business exemption may apply.

1. Information we collect

Depending on your interaction with us, we may collect:

• your name, email address, telephone number and billing or delivery address;
• order, payment, transaction, return and customer-service information;
• account credentials and shopping preferences;
• reviews, enquiries and other content you submit;
• device, browser, IP address and website interaction data; and
• cookie, analytics and advertising information, where permitted.

Complete payment-card details are normally processed by Shopify or our payment providers and are not stored directly by us.

2. How we collect information

We generally collect information directly from you when you place an order, create an account, contact us, submit a review or use our website. We may also receive information from payment providers, delivery carriers, fraud-prevention services and marketing platforms.

3. How we use information

We may use personal information to:

• process payments and fulfil, deliver and manage orders;
• provide customer service and administer returns;
• operate accounts and personalise services;
• detect fraud, abuse, security threats and unlawful activity;
• analyse and improve our website and services;
• meet tax, accounting, regulatory and legal obligations;
• establish, exercise or defend legal claims; and
• send marketing communications with the consent or authority required by the Spam Act 2003.

4. Marketing choices

You may unsubscribe from promotional electronic messages through the unsubscribe facility in the message or by contacting us. We may continue sending transactional messages relating to orders, delivery, returns, security and important service matters.

5. Cookies

We and our service providers may use cookies and similar technologies to operate the website, remember preferences, measure performance, prevent fraud and support advertising.

You may control cookies through your browser or available consent settings. Disabling essential cookies may affect website functionality.

6. Disclosure

We may disclose relevant information to:

• Shopify, hosting, payment and technology providers;
• warehouses, suppliers, delivery carriers and fulfilment partners;
• analytics, marketing, support and fraud-prevention providers;
• professional advisers, auditors, insurers and financial institutions;
• government, regulatory or law-enforcement authorities where required or authorised; and
• a purchaser or successor involved in a proposed or completed business transaction.

We do not sell personal information for monetary payment.

7. Overseas disclosures

Some providers may process or store personal information outside Australia, including in Canada, the United States and other locations used by Shopify or our providers.

Where applicable, we take reasonable steps to ensure overseas recipients handle information consistently with Australian privacy requirements, subject to lawful exceptions.

8. Retention

We retain information only for as long as reasonably necessary for order fulfilment, customer service, fraud prevention, tax, accounting, legal and dispute-resolution purposes. Information is then securely destroyed or de-identified where appropriate.

9. Security and data breaches

We use reasonable administrative, technical and physical safeguards against misuse, interference, loss and unauthorised access, modification or disclosure.

No system can be guaranteed completely secure. Where the Notifiable Data Breaches scheme applies, we will assess suspected eligible data breaches and notify affected individuals and the Office of the Australian Information Commissioner when legally required.

10. Access and correction

You may request access to personal information we hold about you or ask us to correct inaccurate, incomplete or out-of-date information. We may verify your identity before responding.

If access or correction is refused where the Privacy Act applies, we will provide the legally required explanation and complaint information.

11. Children

Our services are not directed to children under 13. We do not knowingly collect their personal information without appropriate parental or guardian authorisation.

12. Complaints

Send privacy complaints to our Privacy Contact. We will investigate and respond within a reasonable period. If you are dissatisfied and the Privacy Act applies, you may lodge a complaint with the Office of the Australian Information Commissioner.

13. Changes

We may update this policy to reflect changes in our practices, technology or legal obligations. The revised version will be posted with a new effective date.

14. Privacy contact

Privacy Contact — Shirley & Island Wattle
Email: privacy@shirleyandislandwattle.com.au
Telephone: +61 7 5550 1842
25 Shirley Street
Coochiemudlo Island QLD 4184
Australia