Your details, kept safe
We only ask for what we need to send your order — and we never sell or share your details. Here's exactly what we collect, why, and how you stay in control.
We never sell your data. Not once. Not ever. Full stop.
Simple, transparent, respectful
No cryptic clauses. Here's what you're actually agreeing to when you shop with us.
Secure by default
Payments are handled by certified providers (Stripe, PayPal, Afterpay, Apple Pay). We never see or store your card numbers.
Never sold
Your name, email and address stay with us. We don't sell, rent or share your details with advertisers — ever.
You're in control
You can view, update, or ask us to delete your details at any time. Just send us one email — we handle it within 2 business days.
Everything, in plain English
Our complete privacy policy — no hidden clauses, no confusing language.
Who we are
Aroma Banksia Australia is a small Australian-owned business. This Privacy Policy explains how we collect, use, store and protect any personal information you share with us when visiting our website or placing an order.
We are committed to handling your information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
What we collect
We only collect information we need to process your order and keep in touch with you:
- Your name and contact details — so we can send your order and respond to enquiries
- Shipping address — so Australia Post can deliver your parcel
- Email address — for order confirmations and shipping updates (and marketing, only if you opt in)
- Order details — items, totals, and the date of purchase
- Website analytics — anonymous data such as pages visited and device type, so we can improve the site
We never see or store your full credit card details — these are handled directly by our secure payment providers.
How we use your information
- Fulfilling your orders and getting your Banksia pieces to you
- Sending order confirmations, shipping updates and tracking
- Responding to questions and handling returns or warranty claims
- Sending marketing emails — only if you've opted in, and you can unsubscribe any time
- Improving the website and fixing bugs
- Meeting legal obligations (for example, keeping tax records)
Who we share information with
We share the minimum necessary information with a small number of trusted providers:
- Shopify — to run our online store and process payments
- Payment processors (Stripe, PayPal, Afterpay, Apple Pay) — to process your payment securely
- Australia Post — to deliver your order
- Email provider — to send order confirmations and any newsletters you've opted into
We do not sell, rent or trade your information with anyone else, ever.
Cookies
Our website uses cookies — small files that help the site work properly (keeping your cart, remembering preferences) and help us understand which pages are most useful. You can turn cookies off in your browser, though this may stop some parts of the site from working correctly.
How we keep it safe
Your information is stored on secure servers via our Shopify platform. Access is restricted to our team, and all data is protected using industry-standard encryption in transit and at rest.
How long we keep it
We only keep your information for as long as we need it to serve you and meet our legal obligations (Australian tax law requires us to keep order records for up to seven years). If you ask us to delete your account or marketing profile, we'll do so within a reasonable time.
Your rights
You have the right to:
- Ask what personal information we hold about you
- Correct any information that is out of date
- Ask us to delete your information (subject to legal retention rules)
- Opt out of marketing at any time
- Make a complaint if you feel your privacy has been breached
To exercise any of these rights, just email us.
Changes to this policy
We may update this policy from time to time — for example, if we add new services. Any changes will be posted on this page with a revised date. Significant changes will be communicated by email if they affect you directly.
Questions about your data?
We're happy to explain exactly what we hold, correct anything that's wrong, or delete your details entirely. Just reach out — we usually reply within one business day.