Privacy policy

 

Privacy Policy

This Privacy Policy is issued by AIMALL PTY LTD (ABN: 68 601 572 043) trading as AquaDownUnder, an Australian company based at 1a/19 Berry St, Clyde NSW 2142 (referred to in this policy as "we", "us" or "our"). It explains how we collect, hold, use and disclose personal information when you visit or make a purchase from https://aquadownunder.com.au/ (the "Site") and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. The personal information we collect

When you visit the Site, we automatically collect certain information about your device, including your IP address, web browser type, time zone, operating system, referring URL and information about your interaction with the Site. We refer to this as Device Information.

We collect Device Information using the following technologies:

  • Cookies — small data files placed on your device. For more information and to manage cookies, visit allaboutcookies.org.
  • Log files — server records of actions occurring on the Site, including IP address, browser type, referring pages and timestamps.
  • Web beacons, tags and pixels — electronic files used to record analytics and advertising information.

When you place (or attempt to place) an order, we also collect Order Information including your name, billing address, shipping address, email, phone number, and payment details (processed securely by our payment providers — we do not store full card numbers on our servers).

If you subscribe to our newsletter, leave a product review, or contact us via email or the contact form, we collect the information you voluntarily provide.

Together, Device Information and Order Information are referred to in this policy as Personal Information.

2. How we use your personal information

We use Order Information to:

  • Fulfil orders placed through the Site (processing payment, arranging shipping, providing invoices and order confirmations).
  • Communicate with you about your order, returns, or customer service queries.
  • Screen orders for potential fraud or risk.
  • With your consent, send you marketing communications about our products and services (you can opt out at any time by clicking "unsubscribe" in any email).

We use Device Information to:

  • Screen for fraud (particularly your IP address).
  • Improve and optimise the Site (via analytics).
  • Measure the effectiveness of marketing and advertising.

3. Who we share your information with

We share Personal Information only with the third parties needed to run our business, including:

  • Shopify Inc. — powers our e-commerce platform and payment processing. See Shopify's privacy policy: shopify.com/legal/privacy.
  • Google LLC (Google Analytics, Google Ads) — helps us understand traffic and measure advertising. See Google's privacy policy: policies.google.com/privacy. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
  • PayPal Australia Pty Limited and other payment processors — to process transactions securely.
  • Shipping carriers (Australia Post, Sendle, PFL Logistics, Courier Please) — to deliver your order.
  • Review platforms (e.g. Judge.me) — if we invite you to leave a post-purchase review, your name and email may be shared with the review platform solely for that purpose.
  • Email and communication tools (e.g. Shopify Email, Klaviyo) — used for transactional and marketing emails if you have opted in.

We may also disclose your Personal Information to comply with applicable laws, respond to a subpoena or lawful request, or to protect our rights or the rights of others.

4. International transfers

Some of our third-party service providers (including Shopify and Google) store and process data outside of Australia, including in Canada, the United States and the European Union. By using the Site, you consent to your Personal Information being transferred and stored overseas. We take reasonable steps to ensure overseas recipients handle your information in accordance with the APPs.

5. Behavioural advertising

We may use your Personal Information to show you targeted advertisements about our products. For more information about how targeted advertising works, visit the Network Advertising Initiative at networkadvertising.org. You can opt out of some of these services via the Digital Advertising Alliance's portal: optout.aboutads.info.

We do not alter data collection practices in response to "Do Not Track" signals.

6. Data security

We take reasonable steps to protect the Personal Information we hold from misuse, interference, loss, unauthorised access, modification or disclosure. Payment card data is handled by PCI-DSS compliant processors (Shopify Payments / PayPal). While we strive to protect your information, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data retention

We retain Order Information for a minimum of 7 years as required by Australian taxation and record-keeping laws. Marketing contact details are retained until you unsubscribe. Browser cookies and analytics data are retained as described by the respective providers.

8. Your rights

Access and correction — Under the APPs, you have the right to request access to the Personal Information we hold about you and to ask that it be corrected or updated. Please contact us using the details below.

Complaints — If you believe we have breached the APPs, please contact us first so we can try to resolve it. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phoning 1300 363 992.

European Economic Area / United Kingdom residents — If you are located in the EEA or UK, you may also have rights under the GDPR / UK GDPR, including the right to request access, rectification, erasure, restriction, portability and to object to processing. To exercise these rights, contact us using the details below.

California residents — California residents may have additional rights under the CCPA/CPRA, including the right to know, delete and opt out of the "sale" of personal information. We do not sell personal information.

9. Children's privacy

The Site is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided personal information to us, please contact us so we can delete it.

10. Data breach notification

We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). If an eligible data breach occurs, we will notify affected individuals and the OAIC as required.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. The latest version will always be available on this page.

12. Contact us

For any questions about this Privacy Policy, or to exercise your rights, please contact us:

  • Business: AIMALL PTY LTD (ABN: 68 601 572 043) trading as AquaDownUnder
  • Address: 1a/19 Berry St, Clyde NSW 2142, Australia
  • Email: support@aquadownunder.com.au
  • Hours: Mon – Fri 9:30 am – 5:00 pm (Sydney time, excluding public holidays)