1. Information we collect

Information you provide to us

We collect information you voluntarily provide when you:

• Place an order on our website (name, email, shipping address, billing address, phone number)
• Create an account or subscribe to our newsletter (name, email address)
• Contact us via email or our contact form (name, email, message content)
• Leave a product review (name, review content)
• Participate in surveys, promotions, or competitions

Payment information

We do not store your credit card or payment details. All payment processing is handled securely by our third-party payment processors (Shopify Payments and/or PayPal), who comply with PCI-DSS standards.

Information collected automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring website
• Cookies and similar tracking technologies (see Section 4)

2. How we use your information

We use the information we collect to:

• Process and fulfil your orders, including shipping and delivery
• Communicate with you about your orders, account, or enquiries
• Send marketing communications (only with your consent, and you can opt out at any time)
• Improve our website, products, and customer experience
• Analyse website traffic and usage patterns
• Prevent fraudulent transactions and protect against illegal activity
• Comply with legal obligations under Australian law

We will never sell your personal information to third parties for their marketing purposes.

3. How we share your information

We may share your information with the following types of third parties, solely for the purposes described in this policy:

• Shopify: Our e-commerce platform, which hosts our website and processes transactions
• Payment processors: Shopify Payments, PayPal, or other payment providers to process your transactions securely
• Shipping providers: Australia Post and courier partners, to deliver your orders
• Email marketing: Our email service provider (e.g., Klaviyo), to send marketing communications you've opted into
• Analytics: Google Analytics or similar tools, to understand how visitors use our website
• Advertising platforms: Meta (Facebook/Instagram) and Google Ads, for retargeting and conversion tracking (using anonymised or aggregated data where possible)

We require all third-party service providers to respect the security of your personal information and to treat it in accordance with applicable laws.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Cookies and tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and support our marketing efforts.

Types of cookies we use

• Essential cookies: Required for the website to function (e.g., shopping cart, checkout, login sessions). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These collect anonymised data about page views and navigation.
• Marketing cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns (e.g., Meta Pixel, Google Ads). These may track your activity across other websites.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

5. Third-party services

Our website may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of any third-party sites you visit.

6. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Specifically:

• Order data: Retained for 7 years to comply with Australian tax and accounting requirements
• Account data: Retained for as long as your account remains active, plus a reasonable period after closure
• Marketing data: Retained until you unsubscribe or request deletion
• Analytics data: Typically retained for 26 months (Google Analytics default)

7. Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or outdated information
• Request deletion of your personal information (subject to legal obligations)
• Opt out of marketing communications at any time
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise any of these rights, please contact us at support@hewnwellness.com.au. We will respond to your request within 30 days.

8. Data security

We take reasonable steps to protect your personal information from unauthorised access, use, modification, or disclosure. Our website uses SSL/TLS encryption for all data transmitted between your browser and our servers.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

9. Children's privacy

Our website and products are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after changes have been posted constitutes your acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy, your personal information, or wish to make a complaint, please contact us:

hewn.
Operated by MBC Ventures Pty Ltd
Brisbane, Queensland, Australia

Email: support@hewnwellness.com.au

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.