This policy explains what personal information we collect, how we use and disclose it, how we protect it, and how you can request access to or correction of your information or make a privacy complaint.
1. Information We Collect
Depending on how you interact with our website, we may collect the following information:
Personal and contact information:
- Your name, email address and phone number
- Billing address, delivery address and delivery instructions
Account, order and transaction information:
- Account details and preferences
- Products purchased, order history, order status, refunds, returns and customer support records
- Billing details and transaction references
Payment information: Payments may be processed by third-party payment providers. Where applicable, those providers collect and process your payment details. We do not intentionally store full payment card details on our own systems unless this is specifically disclosed and appropriately secured.
Technical and usage information: This may include your IP address, browser type, device information, operating system, pages visited, referring pages and website usage data collected through cookies or similar technologies.
We may also collect information you choose to provide when contacting customer support, submitting a form or participating in a promotion.
2. How We Use Your Information
We may use personal information for purposes including:
- Processing and fulfilling orders, payments, shipping, returns and refunds
- Managing customer accounts and providing customer support
- Sending order confirmations, invoices, delivery updates and other service messages
- Maintaining, securing and improving our website, products and services
- Understanding website usage and customer preferences
- Detecting, investigating and preventing fraud, unauthorised activity and security incidents
- Sending marketing communications where permitted by law and subject to your preferences
- Meeting applicable legal, regulatory, tax and accounting obligations
- Establishing, exercising or defending legal claims where necessary
We take reasonable steps to use personal information for the purpose for which it was collected or for another purpose permitted or required by applicable law.
3. When We Share Your Information
We do not sell or rent your personal information to third parties for their independent marketing purposes.
We may disclose relevant information where reasonably necessary to operate our store, provide services or meet legal obligations, including to:
- Payment providers, to process transactions and refunds
- Shipping and delivery companies, to deliver orders
- Product suppliers and fulfilment partners, where needed to fulfil orders
- Website hosting, technology, security and support providers
- Analytics and marketing providers, where such services are used and permitted
- Professional advisers, such as accountants, auditors, lawyers and insurers
- Government agencies, regulators or law enforcement where disclosure is required or authorised by law
We aim to limit disclosures to information reasonably necessary for the relevant purpose. Third-party providers may handle information under their own privacy policies and applicable obligations.
4. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support website functionality, remember preferences, understand website usage and improve performance.
- Maintain shopping cart and session functionality
- Remember website preferences
- Measure website traffic and performance
- Understand how visitors interact with products and pages
- Support relevant advertising or marketing activities, where enabled
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect shopping cart functionality, account access or other website features. Where required by applicable law, we will obtain consent for relevant cookies or tracking technologies.
5. Data Security and Retention
We take reasonable technical and organisational measures to protect personal information against misuse, interference, loss, unauthorised access, modification or disclosure. Depending on the systems used, these measures may include access controls, authentication, secure connections and restricted access to customer records.
No website, electronic transmission or storage system can be guaranteed to be completely secure. If a data breach occurs, we will respond in accordance with applicable legal requirements, including any obligations that apply under Australia's Notifiable Data Breaches scheme.
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing support, maintaining business records, resolving disputes and meeting legal obligations. When information is no longer required, we will take reasonable steps to delete or de-identify it, subject to applicable requirements and secure backup practices.
6. Access, Correction and Deletion Requests
You may request access to personal information we hold about you and ask us to correct information that is inaccurate, incomplete or outdated. You may also ask us to delete your personal information.
To make a request, email [email protected] and describe what you would like us to access, correct or delete. We may need to verify your identity before processing your request.
We will assess and respond to requests within a reasonable period and in accordance with applicable law. In some circumstances, we may be permitted or required to refuse a request or retain certain records, for example to complete transactions, comply with legal obligations, prevent fraud, resolve disputes or establish, exercise or defend legal claims. Where required, we will explain the reasons for refusing a request.
7. Overseas Disclosure of Personal Information
Some service providers, technology platforms, suppliers or other recipients may be located outside Australia or may process personal information in other countries. This may occur depending on the services used to operate our website and fulfil orders.
We will take reasonable steps to identify relevant overseas recipients and the countries in which they are located where required by applicable law and practicable in the circumstances. Where the Australian Privacy Principles apply, we will take the steps required by the Privacy Act in relation to overseas disclosures.
8. Marketing Communications
We may send promotional emails or other marketing communications where permitted by applicable law. You can unsubscribe from marketing emails using the unsubscribe link in the message or by contacting [email protected].
Unsubscribing from marketing will not prevent us from sending essential transactional or service messages, such as order confirmations and delivery updates. We will handle marketing communications in accordance with applicable laws, including the Spam Act 2003 (Cth), where applicable.
9. Third-Party Websites and Services
Our website may contain links to third-party websites, payment services, delivery tracking platforms or other external services. These third parties may collect and process information under their own privacy policies and terms. We encourage you to review those policies before providing personal information directly to them.
10. Children's Privacy
Our website is intended for general shopping purposes and is not specifically directed at children. We do not knowingly seek to collect children's personal information in circumstances where doing so would be contrary to applicable law. If you believe a child has provided personal information to us inappropriately, please contact us so we can assess the matter and take appropriate steps where required.
11. Privacy Complaints
If you believe we have mishandled your personal information, please email [email protected] with a description of your concern and any relevant details. We will investigate and respond within a reasonable period.
If you are not satisfied with our response, or your complaint remains unresolved, you may be able to contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au/.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our business operations, website functionality, service providers or legal requirements. The updated version will be published on this page with a revised “Last updated” date. We encourage you to review this page periodically.
13. Contact Us
If you have questions, requests or concerns about this Privacy Policy or the handling of your personal information, contact us:
- Business name: Xtra Deals (Xtradeals)
- Website: https://xtradeals.com.au
- Privacy contact email: [email protected]