Privacy & Cookie Policy

1. (a)

   The kind of Personal Information that we collect from you will depend on how you use the website.

2. (b)

   The Personal Information which we collect and hold about you may include:

   1. (i)

      Name and contact details (including email address, phone number, and delivery address)

   2. (ii)

      Billing and payment information (including credit card details processed through secure payment gateways)

   3. (iii)

      Purchase history and order details

   4. (iv)

      Shipping and delivery preferences

   5. (v)

      Account login credentials and password information

   6. (vi)

      Communication preferences and marketing consent

   7. (vii)

      IP address, browser type, and device information

   8. (viii)

      Website usage data and cookies for analytics and user experience improvement

   9. (ix)

      Customer feedback, reviews, and correspondence

   10. (x)

       Any other information voluntarily provided through contact forms, customer service enquiries, or account registration.

   11. (xi)

       For Orders delivered to an International Destination, customs declaration information (such as the description, value and country of origin of the Products in your Order).

3. (c)

   This information is collected and shared with service providers to help us provide customer support, improve our services, and communicate with customers about their orders and our products.

1. (a)

   The Privacy Act 1988 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

2. (b)

   Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

   1. (i)

      whether the information or opinion is true or not; and

   2. (ii)

      whether the information or opinion is recorded in a material form or not.

3. (c)

   If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as Personal Information and will not be subject to this privacy policy.

4. (d)

   Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

5. (e)

   Sensitive Information will be used by us only:

   1. (i)

      for the primary purpose for which it was obtained;

   2. (ii)

      for a secondary purpose that is directly related to the primary purpose; and

   3. (iii)

      with your consent or where required or authorised by law.

1. (a)

   We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to us in any other way.

2. (b)

   We generally don't collect Sensitive Information, but when we do, we will comply with the requirements set out in Section 2 above.

3. (c)

   Where reasonable and practicable we collect your Personal Information directly from you. However, we may sometimes receive information from a third party. In such cases, we will take steps to make you aware of the information that was provided by that third party.

4. (d)

   We may also collect Personal Information from you in person at pop-up events, markets, or other promotional events. This may include your name, email address, phone number, and dietary or product preferences, collected through sign-up sheets, order forms, or QR code registration forms.

5. (e)

   Where we collect your Personal Information at an event, we will take reasonable steps to make you aware of this policy at the time of collection.

1. (a)

   Cookies are small text files placed on your device when you visit our Website. They allow us to recognise your browser, remember your preferences, and improve your experience. Cookies do not contain your name or payment information.

2. (b)

   Types of cookies we use:

   1. (i)

      Essential cookies - Required for the website function (e.g., shopping cart, login sessions, checkout process). This cannot be disabled.

   2. (ii)

      Analytics cookies - Help us understand how visitors use the Website (e.g., pages visited, time on site). We use tools such as Google Analytics.

   3. (iii)

      Marketing and advertising cookies - Used to deliver relevant advertisements and track campaign performance (e.g., Meta Pixel, Google Ads).

   4. (iv)

      Preference cookies - Remember your settings and preferences (e.g., language, currency, region).

3. (c)

   Third-party cookies

   1. (i)

      Some cookies on our Website are set by third-party services we use, including: Google Analytics, Meta (Facebook) Pixel, Mailchimp, Shopify payment platform powered by Stripe

   2. (ii)

      These third parties have their own privacy policies governing their use of cookie data. We recommend reviewing their policies directly.

4. (d)

   You can control and manage cookies in several ways:

   1. (i)

      Browser settings: Most browsers allow you to refuse or delete cookies. Refer to your browser's help documentation for instructions.

   2. (ii)

      Opt-out: You can opt-out of receiving marketing communications by following the instructions provided in our emails or by contacting us directly.

   3. (iii)

      Cookie consent banner: When you first visit our Website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies.

Please note that disabling certain cookies may affect the functionality of the Website, including your ability to complete purchases.

1. (a)

   We use your personal information to process and fulfill your orders, communicate with you about your purchases, and provide customer support.

2. (b)

   We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about our products and promotions.

3. (c)

   We ordinarily only disclose Personal Information to our service providers who assist us in operating the Website. We analyse non-personal information to improve our website's functionality, user experience, and to customise our content based on user preferences.

4. (d)

   You may opt in to receive direct marketing communications from us (for example, by subscribing to our newsletter or ticking a consent box at checkout). We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive Personal Information in direct marketing activity. All direct marketing communications will include a simple means by which you can opt out, such as an unsubscribe link.

5. (e)

   Where you sign up to our mailing list or provide your contact details at a pop-up event, market, or other in-person event (for example, by completing a sign-up form or scanning a QR code), we will use your Personal Information to send you marketing communications in accordance with the consent you provided at the time. You may opt out at any time using the unsubscribe link in any communication or by contacting us.

6. (f)

   We may photograph, film, or otherwise record our pop-up events, markets, and promotional events for use on our Website, social media channels, and other marketing materials. By attending one of our events, you acknowledge that you may be photographed or recorded. If you do not wish to be included in event photography or recordings, please notify a member of our team at the event. We will take reasonable steps to accommodate your request. We will not use a clearly identifiable image of you for direct marketing purposes without your express consent.

7. (g)

   Where you place an Order for delivery to an International Destination, we will disclose the Personal Information necessary to fulfil that Order (such as your name, delivery address, phone number and order and customs declaration details) to our shipping carrier and to customs or border protection authorities in the destination country, for the purpose of clearing customs and delivering your Order. See clause 7 (Overseas transfer) below for further information.

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us as on the contact details set out at the bottom of this policy. All complaints will be considered by CHAWU Tea Pty Ltd and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

1. (a)

   Your Personal Information may be transferred to, or stored in, countries outside Australia, including for the purposes of order fulfilment (including international shipping), cloud storage, or third-party service providers. We take reasonable steps to ensure that overseas recipients handle your Personal Information in a manner consistent with the Australian Privacy Principles, including by seeking contractual commitments from recipients where appropriate.

2. (b)

   The countries to which your Personal Information may be transferred include:

   1. (i)

      China (in connection with our supply chain);

   2. (ii)

      the United States (in connection with cloud services and analytics providers such as Google and Mailchimp);

   3. (iii)

      where you place an Order for delivery to an International Destination: the destination country of your Order (currently the United States, Canada, New Zealand, Singapore, Hong Kong, Malaysia or Indonesia), our shipping carrier (currently DHL eCommerce and its group entities, which operate internationally), and the customs or border protection authority of that destination country, for the purposes of clearing customs and delivering your Order; and

   4. (iv)

      any other country where our service providers operate.

3. (c)

   You acknowledge that, where we have taken such steps, we are not required to ensure that overseas recipients comply with the Privacy Act, and we will not be accountable under the Privacy Act for any breach by an overseas recipient in those circumstances.

4. (d)

   Disclosure of your Personal Information to a customs or border protection authority in connection with an international Order is made because it is required or authorised by the law of the destination country in order to import and deliver your Order.

1. (a)

   We take reasonable steps to protect the Personal Information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

   1. (i)

      Encryption of data in transit using SSL/TLS technology

   2. (ii)

      Access controls limiting staff access to Personal Information on a need-to-know basis

   3. (iii)

      Secure, reputable third-party payment processing (we do not store your credit card details on our systems)

   4. (iv)

      Regular review of our data security practices

2. (b)

   While we take these precautions, no data transmission over the internet is completely secure. We cannot guarantee the absolute security of information transmitted to or from our Website.

1. (a)

   We retain your Personal Information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:

   1. (i)

      Customer account information - retained for the life of your account and for 7 years after account closure;

   2. (ii)

      Transaction and order records - retained for 7 years from the date of the transaction (as required for tax and accounting purposes);

   3. (iii)

      Marketing preferences and consent records - retained until you withdraw your consent or unsubscribe; and

   4. (iv)

      Website analytics data (including cookie data) - retained in accordance with the applicable third-party provider's retention settings, which we review periodically.

2. (b)

   When Personal Information is no longer required, we will take reasonable steps to destroy or de-identify it.

3. (c)

   You have the right to request access to the Personal Information we hold about you. We will respond to your request within a reasonable period (and in any event within 30 days).

4. (d)

   If you believe that the Personal Information we hold about you is inaccurate, incomplete or out of date, you may request that we correct it. We will take reasonable steps to correct the information.

5. (e)

   We may charge a reasonable fee for providing access to your Personal Information, but we will not charge you for making a request or for correcting your information.

6. (f)

   To make an access or correction request, please contact us using the details set out in clause 11.

7. (g)

   If we become aware of a data breach that is likely to result in serious harm to any individual whose Personal Information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner as required under Part IIIC of the Privacy Act.

We may update this Privacy and Cookie Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. The latest version will be posted on our website with the effective date.

If you have any queries, wish to access or correct your Personal Information, or if you would like to make a complaint, please contact us at: hello@chawutea.com.