Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when you use our Website, make a purchase, create an account, subscribe to our newsletter, or contact us. The types of personal information we may collect include:

Personal Identification Information

• Full name
• Email address
• Phone number
• Billing and shipping addresses
• Date of birth (if provided)

Payment Information

• Credit card details (processed securely through Stripe)
• Payment method preferences
• Transaction history

Account Information

• Username and password (encrypted)
• Order history
• Wishlist and saved items
• Product reviews and ratings
• Communication preferences

Pet Information (Optional)

• Pet name, breed, size, and age
• Pet health information (if voluntarily provided for product recommendations)

Technical Information

• IP address
• Browser type and version
• Device information
• Operating system
• Referring website addresses
• Pages viewed and time spent on pages
• Cookies and similar tracking technologies

2. How We Collect Your Information

We collect personal information through various methods:

Directly From You

• When you create an account on our Website
• When you make a purchase or place an order
• When you subscribe to our newsletter or marketing communications
• When you submit a product review or testimonial
• When you contact us via email, phone, or contact forms
• When you participate in surveys, promotions, or competitions
• When you add items to your wishlist

Automatically Through Technology

• Cookies and similar tracking technologies when you browse our Website
• Web analytics tools (such as Google Analytics) to understand user behavior
• Server logs that automatically record information about your visit

From Third Parties

• Payment processors (Stripe) for transaction processing
• Shipping and delivery partners for order fulfillment
• Marketing and analytics service providers
• Social media platforms (if you interact with our social media content)

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Order Processing & Fulfillment

• Process and fulfill your orders
• Arrange shipping and delivery
• Send order confirmations and shipping notifications
• Process payments and prevent fraudulent transactions
• Handle returns, refunds, and warranty claims

Account Management

• Create and manage your customer account
• Maintain your order history and preferences
• Enable wishlist and saved items functionality
• Authenticate your identity and secure your account

Customer Service & Communication

• Respond to your inquiries and support requests
• Provide customer service and technical support
• Send important updates about your orders or account
• Notify you of changes to our policies or services

Marketing & Personalization

• Send newsletters, promotional offers, and marketing communications (with your consent)
• Personalize your shopping experience and product recommendations
• Display targeted advertisements based on your interests
• Conduct market research and customer surveys

Website Improvement & Analytics

• Analyze website usage and user behavior
• Improve our Website functionality and user experience
• Develop new products and services
• Monitor and prevent security threats and fraudulent activity

Legal Compliance

• Comply with legal obligations and regulatory requirements
• Enforce our Terms and Conditions
• Protect our rights, property, and safety, and that of our customers
• Resolve disputes and investigate complaints

4. How We Store & Protect Your Information

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction.

Security Measures

• Encryption: All sensitive data, including payment information, is encrypted using SSL/TLS technology during transmission
• Secure Storage: Personal information is stored securely using Supabase, a trusted cloud database provider with enterprise-grade security
• Payment Security: Credit card information is processed through Stripe, a PCI-DSS compliant payment processor. We do not store complete credit card details on our servers
• Access Controls: Access to personal information is restricted to authorized personnel only, on a need-to-know basis
• Password Protection: Account passwords are encrypted using industry-standard hashing algorithms
• Regular Security Audits: We regularly review and update our security practices

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account information is retained while your account is active and for 7 years after account closure for legal and tax purposes
• Order and transaction records are retained for 7 years in accordance with Australian tax laws
• Marketing communications data is retained until you unsubscribe or request deletion
• Website analytics data is retained for 26 months

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you in accordance with applicable laws if a data breach occurs.

5. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your information with trusted third parties in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment Processing: Stripe (for secure payment processing)
• Database & Hosting: Supabase (for secure data storage and authentication)
• Shipping & Delivery: Australia Post, courier services (for order fulfillment)
• Email Services: Email marketing platforms (for newsletters and communications)
• Analytics: Google Analytics (for website performance analysis)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (such as court orders, subpoenas, or warrants)
• Requests from government authorities or law enforcement agencies
• Protection of our legal rights and property
• Investigation of fraud, security issues, or illegal activities
• Protection of the safety of our customers or the public

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Website of any such change in ownership or control of your personal information.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content.

What Are Cookies?

Cookies are small text files stored on your device when you visit our Website. They help us recognize your browser and remember your preferences.

Types of Cookies We Use

• Essential Cookies: Required for the Website to function properly (e.g., shopping cart, login sessions)
• Performance Cookies: Collect information about how you use our Website (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies
• Delete all cookies when you close your browser

Please note that disabling cookies may affect the functionality of our Website and your user experience.

7. Your Rights Under the Privacy Act 1988

Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your information within 30 days of your request, subject to certain exceptions under the Privacy Act.

Right to Correction

You have the right to request correction of any inaccurate, incomplete, or out-of-date personal information we hold about you. You can update most of your information directly through your account settings, or contact us for assistance.

Right to Erasure

You may request deletion of your personal information, subject to certain legal obligations that require us to retain information (such as tax and accounting records). We will delete or anonymize your information where legally permissible.

Right to Opt-Out of Marketing

You can unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at support@petsheaven.com.au

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your orders and account.

Right to Complain

If you believe we have breached the Australian Privacy Principles, you have the right to lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

8. How to Access or Correct Your Information

To access, update, or correct your personal information:

Self-Service Options

• Log in to your account and update your profile information
• Manage your communication preferences in account settings
• View and update your saved addresses
• Access your order history and tracking information

Contact Us

For requests that cannot be completed through your account, please contact us:

When contacting us, please provide sufficient information to verify your identity and specify the information you wish to access or correct. We may request additional identification to protect your privacy and security.

9. Children's Privacy

Our Website and services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, please do not provide any personal information through our Website.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as soon as possible. If you believe we have collected information from a child under 18, please contact us immediately at support@petsheaven.com.au.

10. International Data Transfers

Your personal information is primarily stored and processed in Australia. However, some of our service providers may store or process data outside of Australia, including:

• United States (Stripe for payment processing, Supabase for database hosting)
• Other countries where our service providers operate

When we transfer your information overseas, we ensure that appropriate safeguards are in place to protect your information in accordance with the Australian Privacy Principles. By using our Website and services, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our Website
• Notify you via email if the changes are significant (if you have provided your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Website after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us: