Privacy policy

This Privacy Policy explains how tuaoru.shop collects, uses, stores, discloses, and protects personal information when you visit our website, create a customer account, place an order, contact us, subscribe to marketing communications, or otherwise interact with our services.

Throughout this Privacy Policy:

• “tuaoru.shop”, “we”, “us”, and “our” refer to the operator of tuaoru.shop.

• “You”, “your”, “customer”, and “user” refer to any person who visits or interacts with our website.

• “Website” refers to tuaoru.shop and its associated pages, checkout functions, and services.

• “Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable.

By using our website or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Our Commitment to Privacy

We are committed to handling personal information responsibly, transparently, and securely.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and other applicable privacy, consumer-protection, marketing, and data-security requirements.

We aim to:

• Collect personal information lawfully and fairly

• Collect only information reasonably necessary for our activities

• Explain why personal information is collected

• Use and disclose information for appropriate purposes

• Protect information against misuse, loss, and unauthorised access

• Provide reasonable access and correction procedures

• Respond fairly to privacy questions and complaints

• Retain personal information only for as long as reasonably necessary

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

• Visit or browse tuaoru.shop

• Create or use a customer account

• Add products to your shopping cart

• Place or attempt to place an order

• Complete a payment

• Contact customer support

• Request a cancellation, return, refund, repair, or replacement

• Subscribe to promotional communications

• Submit a review, comment, photograph, or other content

• Participate in a promotion, survey, or competition

• Interact with our advertisements

• Use a function provided through Shopify or an integrated application

This policy does not control the independent privacy practices of external websites or services that we do not own or operate.

3. Personal Information We May Collect

The personal information we collect depends on how you interact with our website.

Identity Information

We may collect:

• Full name

• Customer account name

• Account identifier

• Date of birth or age confirmation where reasonably required

• Information used to verify identity

Contact Information

We may collect:

• Email address

• Telephone number

• Billing address

• Delivery address

• Suburb or city

• State or territory

• Postcode

• Country

Order and Transaction Information

We may collect:

• Order number

• Products ordered

• Product sizes, colours, or variations

• Purchase amount

• Discounts and promotional codes

• Order status

• Shipping method

• Delivery and tracking information

• Return, exchange, and refund information

• Transaction dates

• Customer service records

Payment Information

Payments may be processed by Shopify, Shopify Payments, banks, card networks, digital-wallet providers, or other authorised payment processors.

Payment-related information may include:

• Payment method

• Billing details

• Transaction identifier

• Payment status

• Limited card information, such as card type and final digits

• Fraud-screening information

We generally do not directly receive or store complete payment-card numbers or card security codes.

Customer Account Information

If customer accounts are available, we may collect:

• Login email address

• Protected account credentials

• Saved delivery addresses

• Order history

• Account preferences

• Communication preferences

• Account activity

Customer Service Information

When you contact us, we may collect:

• The content of your enquiry

• Your order details

• Complaint information

• Photographs and videos

• Product issue descriptions

• Return and refund information

• Supporting documents

• Records of our communications

Device and Technical Information

When you use our website, certain information may be collected automatically, including:

• Internet Protocol address

• Browser type

• Device type

• Operating system

• Device identifiers

• Language settings

• Time zone

• Referring website

• Pages viewed

• Links clicked

• Session information

• Date and time of access

• Approximate location derived from technical information

• Website interaction and performance data

Marketing and Preference Information

We may collect:

• Email subscription status

• Marketing preferences

• Product interests

• Advertisement interactions

• Campaign source

• Survey responses

• Promotion participation

• Communication history

• Cookie and consent preferences

User-Submitted Content

Where available, you may submit:

• Product reviews

• Ratings

• Comments

• Questions

• Photographs

• Videos

• Suggestions

• Testimonials

• Other content

Please do not submit personal information about another person unless you have permission or another lawful basis to do so.

4. How We Collect Personal Information

We may collect personal information in the following ways.

Directly From You

We may collect information when you:

• Place an order

• Create an account

• Complete checkout

• Contact customer service

• Request a return or refund

• Subscribe to marketing

• Submit a review

• Complete a survey

• Participate in a promotion

Automatically Through the Website

Information may be collected using:

• Cookies

• Pixels

• Tags

• Local storage

• Server logs

• Analytics tools

• Advertising technologies

• Shopify functions

• Integrated applications

From Service Providers

We may receive information from:

• Shopify

• Payment processors

• Shipping carriers

• Fulfilment providers

• Customer support platforms

• Analytics providers

• Advertising platforms

• Fraud-prevention providers

• Cloud and technology providers

From Public or Lawful Sources

Where lawful and reasonably necessary, we may obtain information from publicly available records, fraud-prevention databases, or other legitimate sources.

5. Why We Collect and Use Personal Information

We may collect, use, and process personal information for the following purposes.

Providing Products and Services

We may use your information to:

• Process and confirm orders

• Accept and verify payments

• Prepare and fulfil orders

• Arrange shipping and delivery

• Provide tracking information

• Manage customer accounts

• Provide customer support

• Process cancellations, returns, and refunds

• Arrange repairs or replacements

• Respond to product enquiries

Communicating With You

We may use your information to send:

• Order confirmations

• Payment notifications

• Shipping updates

• Tracking information

• Delivery notices

• Customer support responses

• Account and security messages

• Return and refund updates

• Policy or service notices

Operating and Improving Our Website

We may use information to:

• Maintain website functionality

• Remember shopping-cart contents

• Improve website navigation

• Analyse website performance

• Identify technical problems

• Understand customer interests

• Improve our products and services

• Test new website functions

• Personalise parts of the shopping experience

Security and Fraud Prevention

We may use information to:

• Verify payment authorisation

• Detect suspicious transactions

• Prevent fraud

• Protect customer accounts

• Investigate misuse

• Enforce store policies

• Protect our website and systems

• Comply with payment-provider requirements

Legal and Regulatory Purposes

We may use information to:

• Maintain transaction and accounting records

• Comply with lawful requests

• Respond to regulatory enquiries

• Resolve disputes

• Establish or defend legal claims

• Enforce our Terms of Service

• Protect customers, our business, and third parties

• Meet applicable legal obligations

Marketing and Advertising

Where permitted, we may use information to:

• Send promotional emails

• Recommend products

• Measure campaign performance

• Understand advertisement interactions

• Create or measure advertising audiences

• Limit repetitive advertising

• Improve marketing activities

You may unsubscribe from promotional emails at any time.

6. Shopify

Our online store is hosted and powered by Shopify.

Shopify provides services that may include:

• Website hosting

• Shopping-cart functions

• Checkout

• Customer accounts

• Payment processing

• Order management

• Fraud prevention

• Security

• Analytics

• Privacy controls

• Other e-commerce functions

When you visit our website or place an order, personal information may be processed by Shopify to provide these services.

Shopify may process information through systems located in Australia or other countries, depending on its infrastructure, service providers, and applicable requirements.

Shopify’s handling of personal information is also subject to its applicable privacy policies and contractual terms.

7. Payment Processors

When you submit payment information, it may be provided directly to Shopify, a bank, card network, digital-wallet provider, or another authorised payment processor.

Payment processors may use information to:

• Authorise transactions

• Confirm account ownership

• Prevent fraud

• Process refunds

• Handle payment disputes

• Meet financial and regulatory obligations

We recommend reviewing the privacy terms of the payment method you select.

For your security, do not send complete payment-card numbers, card security codes, banking passwords, or digital-wallet passwords to us by email.

8. Cookies and Similar Technologies

Our website and approved service providers may use:

• Essential cookies

• Functional cookies

• Analytics cookies

• Advertising cookies

• Pixels

• Tags

• Local storage

• Similar technologies

These technologies may collect information about your browser, device, website activity, and preferences.

Essential Cookies

Essential cookies may be required to:

• Operate the website

• Maintain the shopping cart

• Support checkout

• Remember privacy choices

• Protect website security

• Prevent fraud

• Maintain customer sessions

Disabling essential cookies may prevent parts of the website from functioning correctly.

Functional Cookies

Functional cookies may be used to:

• Remember language preferences

• Remember location or currency settings

• Save account preferences

• Improve website convenience

Analytics Cookies

Analytics technologies may help us understand:

• How customers reach our website

• Which pages are viewed

• How visitors navigate the store

• Whether technical errors occur

• How website performance can be improved

Advertising Cookies and Pixels

Advertising technologies may be used to:

• Measure advertising performance

• Understand campaign interactions

• Display more relevant promotions

• Create or measure advertising audiences

• Limit repetitive advertisements

The technologies used may depend on our current Shopify configuration and installed applications.

9. Managing Cookies

You may manage cookies through:

• Your browser settings

• Available website privacy controls

• A cookie banner or preference tool

• Advertising-platform settings

• Device privacy settings

Blocking or deleting cookies may affect:

• Shopping-cart functions

• Checkout

• Customer accounts

• Saved preferences

• Website personalisation

• Other website features

Cookie settings may need to be managed separately on each device and browser.

10. Analytics

We may use Shopify Analytics and other approved analytics services to understand website traffic, customer activity, orders, and website performance.

Analytics information may include:

• Pages visited

• Time spent on pages

• Referring source

• Approximate location

• Device and browser details

• Product interactions

• Shopping-cart activity

• Completed transactions

• Campaign information

Where reasonably possible, analytics information may be aggregated or de-identified.

11. Marketing Communications

Where permitted, we may send promotional communications concerning:

• New products

• Special offers

• Discounts

• Store updates

• Abandoned shopping carts

• Product recommendations

You may unsubscribe from promotional emails by:

• Using the unsubscribe link included in the message

• Contacting us at info@tuaoru.shop

Unsubscribing from marketing will not stop necessary service communications, including:

• Order confirmations

• Payment notices

• Shipping updates

• Security alerts

• Customer support responses

• Return and refund communications

We do not require customers to receive promotional marketing as a condition of completing an ordinary purchase.

12. Abandoned Checkout Communications

Where permitted and depending on your actions and communication preferences, we may send a reminder when products are left in your shopping cart or checkout is not completed.

You may unsubscribe from promotional abandoned-checkout communications using the available unsubscribe link or by contacting us.

13. Disclosure to Service Providers

We may disclose personal information to service providers where reasonably necessary to operate our store and provide services.

Recipients may include:

• Shopify

• Payment processors

• Banks and card networks

• Digital-wallet providers

• Shipping carriers

• Fulfilment centres

• Product suppliers

• Warehousing providers

• Customer support platforms

• Email and communication providers

• Analytics providers

• Advertising platforms

• Fraud-prevention providers

• IT, hosting, and cloud providers

• Professional advisers

• Insurers

• Government agencies, regulators, courts, or law-enforcement authorities where legally required

We expect service providers to handle information only for appropriate purposes and subject to applicable contractual and legal requirements.

14. Overseas Processing and Disclosure

Shopify, payment providers, shipping carriers, technology companies, fulfilment partners, and other service providers may operate internationally.

As a result, personal information may be processed, accessed, or stored outside Australia.

Possible overseas locations may depend on:

• Shopify’s infrastructure

• The customer’s location

• Fulfilment arrangements

• Shipping providers

• Payment providers

• Cloud and technology services

• Applications installed on our store

Where applicable, we take reasonable steps to use reputable providers and protect personal information when it is disclosed or processed overseas.

Information handled in another country may also be subject to that country’s laws.

15. Advertising and Social Media Platforms

We may use advertising or social media platforms to promote our products and measure campaign performance.

Depending on our website configuration, these providers may receive information such as:

• Cookie identifiers

• Device information

• IP address

• Website activity

• Product interactions

• Campaign source

• Purchase or conversion information

These providers may process information under their own privacy policies.

You may be able to manage personalised advertising through your browser, device, website privacy controls, or the relevant platform’s settings.

16. Fraud Screening and Automated Tools

Orders may be reviewed using automated or manual fraud-prevention tools.

These tools may consider information including:

• Billing and delivery addresses

• IP address

• Device information

• Order value

• Payment status

• Transaction history

• Behavioural indicators

• Information supplied by payment or fraud-prevention providers

An order may be delayed, cancelled, or referred for manual review where suspicious or unauthorised activity is reasonably identified.

Where appropriate, you may contact us to provide additional information or request further review.

17. Data Security

We use reasonable administrative, technical, and organisational measures designed to protect personal information against:

• Misuse

• Interference

• Loss

• Unauthorised access

• Unauthorised modification

• Unauthorised disclosure

Measures may include:

• Secure website connections

• Access controls

• Password protections

• Payment-provider security

• Fraud-prevention tools

• Restricted staff or service-provider access

• Software and system maintenance

• Data backup and monitoring practices

However, no website, internet transmission, payment system, or electronic storage method can be guaranteed to be completely secure.

You are responsible for keeping your account password and devices secure.

Please contact us promptly if you believe your account or personal information has been compromised.

18. Data Breaches

If we become aware of a data breach, we will assess the incident and take reasonable steps to:

• Contain the breach

• Investigate what occurred

• Reduce potential harm

• Protect affected systems

• Notify relevant parties where required

• Review security procedures

Where legally required, we may notify affected individuals and the appropriate regulator.

19. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for purposes including:

• Completing orders

• Providing customer support

• Processing cancellations, returns, and refunds

• Maintaining transaction records

• Preventing fraud

• Resolving disputes

• Meeting tax, accounting, payment, and legal requirements

• Enforcing agreements

• Protecting legal rights

Retention periods may vary depending on:

• The type of information

• The reason it was collected

• Applicable legal requirements

• Payment-provider requirements

• The existence of a complaint or dispute

• Security and fraud considerations

When personal information is no longer reasonably required, we may securely delete, destroy, or de-identify it, subject to applicable legal and technical limitations.

20. Access to Personal Information

You may request access to personal information that we hold about you.

To submit a request, contact:

Email: info@tuaoru.shop

Please include:

• Your full name

• The email address associated with your account or order

• Relevant order numbers

• A clear description of the information requested

We may request reasonable identity verification before providing account-specific or personal information.

Access may be limited or refused where permitted or required by law. Where appropriate, we will explain the reason.

21. Correction of Personal Information

You may ask us to correct personal information that is inaccurate, incomplete, outdated, or misleading.

Contact us at info@tuaoru.shop and provide:

• The information to be corrected

• The correct information

• Supporting evidence where reasonably required

We will take reasonable steps to review and correct verified information.

Some information may also be updated directly through your customer account where that function is available.

22. Deletion Requests

You may request deletion of certain personal information by contacting info@tuaoru.shop.

We will assess the request subject to:

• Legal record-keeping requirements

• Payment and tax obligations

• Fraud-prevention requirements

• Existing disputes or claims

• Technical and security requirements

• Other lawful grounds for retention

Deleting personal information may affect our ability to provide customer accounts, order history, warranties, returns, or other services.

23. Withdrawing Consent

Where an activity depends on your consent, you may withdraw that consent by contacting us or using the relevant privacy or unsubscribe control.

Withdrawal will not affect processing that occurred lawfully before consent was withdrawn.

Some information may still need to be processed where reasonably necessary to:

• Complete an order

• Comply with legal obligations

• Prevent fraud

• Resolve a dispute

• Protect legal rights

24. Anonymity and Pseudonyms

You may browse parts of our website without creating an account or identifying yourself.

However, we generally require accurate identity and contact information to:

• Process payments

• Deliver products

• Prevent fraud

• Provide tracking

• Process returns or refunds

• Respond to account-specific requests

• Meet applicable legal obligations

Where identification is not reasonably required, you may contact us using a preferred name or limited identifying information.

25. Sensitive Information

We do not ordinarily seek to collect sensitive information such as information concerning health, race, religion, political opinions, sexual orientation, criminal records, or biometric information.

Please do not provide sensitive information unless it is reasonably necessary for your enquiry and you consent to its collection.

Where sensitive information is provided, we will handle it only as reasonably necessary and in accordance with applicable law.

26. Children’s Privacy

Our website is intended for general online shopping and is not specifically directed at young children.

We do not knowingly seek to collect personal information from children who are unable to provide valid consent or enter into a purchase independently.

Where a minor uses our website, the involvement and permission of a parent or legal guardian may be required.

If you believe a child has provided personal information without appropriate permission, contact us at info@tuaoru.shop.

27. Customer Reviews and Public Content

Information submitted through public reviews, comments, photographs, or similar website functions may be visible to other users.

Do not include confidential or sensitive information in public content, including:

• Home addresses

• Telephone numbers

• Payment details

• Passwords

• Identification documents

• Private information about another person

We may moderate or remove content that creates privacy, security, legal, or safety concerns.

28. External Links

Our website may contain links to third-party websites, applications, social media platforms, payment services, or tracking services.

We do not control the independent privacy practices of external services.

Before providing information to an external provider, you should review its:

• Privacy policy

• Cookie policy

• Terms of use

• Security practices

The presence of a link does not necessarily mean that we endorse or control the third party.

29. Business Transfers

If our business or assets are sold, merged, reorganised, financed, or transferred, personal information may be disclosed to professional advisers, potential purchasers, or the new operator where reasonably necessary.

Any such disclosure will be subject to appropriate confidentiality, legal, and privacy requirements.

30. Legal Requests and Protection of Rights

We may use or disclose personal information where reasonably necessary to:

• Comply with applicable law

• Respond to a lawful court order

• Respond to a regulator or government authority

• Investigate fraud or unlawful activity

• Protect customers or the public

• Establish, exercise, or defend legal claims

• Enforce our Terms of Service

We will not voluntarily disclose personal information to authorities without a lawful basis or legitimate necessity.

31. Privacy Complaints

If you believe we have mishandled your personal information, contact:

Email: info@tuaoru.shop

Please include:

• Your full name

• Your contact information

• A clear description of your concern

• Relevant dates or order numbers

• Supporting information

• The outcome you are seeking

We will:

• Review the complaint within a reasonable period

• Investigate the relevant circumstances

• Request additional information where necessary

• Communicate the outcome

• Take appropriate corrective action where required

We encourage you to contact us first so that we have an opportunity to resolve the matter.

Where applicable, you may also have the right to contact the Office of the Australian Information Commissioner or another relevant authority.

32. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• Our website

• Products and services

• Shopify functions

• Applications and service providers

• Cookies and advertising tools

• Business operations

• Security practices

• Legal or regulatory requirements

The updated policy will be published on this page with a revised “Last Updated” date.

Material changes may also be communicated through the website or another appropriate channel.

Changes will not retrospectively authorise unlawful handling of personal information.

33. Contact Us

For privacy questions, complaints, access requests, correction requests, deletion requests, or marketing preferences, contact:

Company: tuaoru.shop
Website: tuaoru.shop
Email: info@tuaoru.shop

When contacting us about an order or customer account, please include your full name, order number, and the email address associated with the transaction.