Privacy policy

Deluxe Detail Pty Ltd (ABN 68 626 679 721) trading as Deluxe Detail ("we", "us", "our") operates the online store at shop.deluxedetail.com.au and the website at deluxedetail.com.au. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access, correct or complain about it.

We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs). Where you live outside Australia, additional rights may apply and we have set those out near the end of this policy.

1. The personal information we collect

Order and delivery information. Your name, email address, phone number, billing address and delivery address, the items you ordered, and the amount paid. We need all of this to take payment, pack your parcel and get it to you.

Payment information. Payments are processed by our payment providers, not by us. We receive confirmation that a payment succeeded, the payment method type, and the last four digits of a card. We never see or store your full card number, expiry date or security code.

Account information. If you create an account, your email address, password (stored encrypted by Shopify), saved addresses and order history.

Marketing information. If you sign up to our email list or give us your email during checkout and consent to marketing, your email address and what you have bought or browsed, so that what we send you is relevant.

Customer service information. Anything you tell us by email, phone, SMS, our website chat widget or social media, including the content of those messages, so we can help you and keep a record of what was agreed.

Reviews and content you submit. Product reviews, ratings, photos and videos you choose to publish, along with the name or display name you attach to them. These are public once published.

Device and browsing information. Your IP address, browser and device type, time zone, the pages and products you view, referring website, search terms used on our site, and how you move through it. This is collected automatically using cookies and similar technologies. See section 7.

In store information. If you visit our Oxley studio or use click and collect, your name, contact details and the details of your booking or order.

2. How we collect it

Most of it you give us directly, when you place an order, create an account, sign up to our list, leave a review or contact us. Device and browsing information is collected automatically when you use the site. We may also receive information from our service providers, for example a delivery scan from Australia Post or a review submitted through our reviews platform.

Where it is lawful and practicable, you can deal with us anonymously or under a pseudonym, for example when asking a general question about a product. We cannot ship an order or process a refund anonymously.

3. Why we collect and use it

To take and process your order, take payment, and arrange delivery or collection
To send order confirmations, dispatch notices and tracking updates
To answer your questions and handle returns, warranty claims and complaints
To detect and prevent fraud, chargebacks and misuse of the site
To operate, secure and improve the website, including understanding which products and pages people use
To send you marketing, where you have asked for it or where you are an existing customer and it is what you would reasonably expect
To meet our obligations under Australian tax, consumer and other laws

We do not sell your personal information, and we do not disclose it to third parties for their own direct marketing.

4. Direct marketing and how to stop it

We send marketing emails only where you have opted in, or where you have bought from us and would reasonably expect to hear from us about similar products. Every marketing email contains an unsubscribe link that works, and we act on unsubscribes promptly. You can also email admin@deluxedetail.com.au and ask to be removed.

Unsubscribing from marketing does not stop transactional messages such as order confirmations and tracking notifications, because those are part of fulfilling your order.

5. Who we share it with

We share personal information with service providers who help us run the business, and only for that purpose. They are not permitted to use it for anything else. The main ones are:

Shopify Inc. — our ecommerce platform, hosting, checkout, customer accounts and store analytics. Shopify's privacy policy: shopify.com/legal/privacy
Payment providers — including Shopify Payments, PayPal and Shop Pay, which process card and wallet payments and carry out their own fraud screening
Australia Post — to quote freight, print labels and deliver and track your parcel. Your name, delivery address, phone number and email are provided so they can deliver and notify you
Yotpo — our product reviews platform, which emails you after a purchase to invite a review and publishes reviews you submit
Podium — the chat widget on our site, which handles messages you send us through it
GoAffPro — our affiliate program, which records that an order came through an affiliate link so commission can be paid
Email and messaging platforms — used to send order notifications and, where you have opted in, marketing
Our accountants and professional advisers — where needed for tax, audit or legal purposes

We also install apps on our Shopify store from time to time to add functionality, and some of those apps can access order or customer data. If you want the current list of every provider that can access your information, email us and we will tell you.

We may disclose personal information where we are required or permitted to by law, for example to comply with a court order, a subpoena or a request from a regulator, or where it is necessary to protect our legal rights or someone's safety.

If our business is sold or restructured, customer information may be transferred as part of that sale. We would require the buyer to handle it consistently with this policy.

6. Overseas disclosure

Several of our service providers are based outside Australia, or store data outside Australia, so your personal information will be disclosed overseas. Based on where those providers operate, the likely destinations are Canada and the United States (Shopify, PayPal, Podium and other apps), Israel and the United States (Yotpo), India and the United States (GoAffPro), and countries in the European Union and United Kingdom for some apps.

We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles, principally by using established providers with published privacy commitments and contractual data protection terms. You should be aware that once information is held overseas, Australian law may not apply to it and you may not be able to seek redress under the Privacy Act against the overseas recipient.

7. Cookies and tracking

A cookie is a small file placed on your device when you visit a website. We use them to keep your cart working, keep you logged in, remember your preferences, and understand how the store is used.

Essential cookies keep the store functioning. These include Shopify's cart, cart_sig, cart_ts, checkout_token, secret, _secure_session_id, secure_customer_sig and storefront_digest. Blocking these will break checkout.

Analytics cookies tell us how the store is used, in aggregate. These include Shopify's _s, _y, _shopify_s, _shopify_y, _shopify_fs, _shopify_sa_p, _shopify_sa_t, _landing_page, _orig_referrer and _tracking_consent.

Third party cookies and scripts are set by the providers listed in section 5 when their features load, for example the reviews widget, the chat widget and the affiliate tracker.

Session cookies last until you close your browser. Persistent cookies last between thirty minutes and two years. You can block or delete cookies in your browser settings, but parts of the store will stop working. There is no consistent industry standard for responding to browser "Do Not Track" signals, so we do not currently alter our collection in response to them.

8. How we keep your information secure

Our store runs on Shopify, which is PCI DSS compliant and encrypts data in transit using TLS. Card details are handled by our payment providers and never reach our systems. Access to customer data in our admin is limited to staff who need it, and is protected by individual accounts and passwords.

No system is completely secure. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9. How long we keep it

We keep order and transaction records for at least seven years, because Australian tax law requires it. Marketing contact details are kept until you unsubscribe or ask us to remove them. Customer service correspondence is kept while it may still be needed for a warranty claim or dispute. Account information is kept while your account is open. Information we no longer need for any lawful purpose is deleted or de-identified.

10. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct anything that is wrong or out of date. Email admin@deluxedetail.com.au with enough detail for us to identify you and find the records.

We will respond within thirty days. There is normally no charge. If we refuse a request, we will tell you why in writing and how you can complain.

You can also ask us to delete your information. We will do so unless we are required to keep it, for example transaction records we must retain for tax purposes.

11. Complaints

If you think we have mishandled your personal information, please tell us first so we can put it right. Email admin@deluxedetail.com.au or write to us at 4/89 Factory Road, Oxley QLD 4075. We will acknowledge your complaint and respond within thirty days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

Online: oaic.gov.au/privacy/privacy-complaints
Phone: 1300 363 992
Post: GPO Box 5288, Sydney NSW 2001

12. Children

Our store is intended for adults and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has given us personal information, contact us and we will delete it.

13. If you are outside Australia

European Economic Area and United Kingdom. If you are in the EEA or the UK, we process your personal information on the basis of performing our contract with you (to fulfil your order), your consent (for marketing and non-essential cookies), our legitimate interests (to secure and improve the store and prevent fraud), and compliance with our legal obligations. You have the right to access, correct, erase, restrict or object to our processing of your personal information, and to receive it in a portable format. To exercise any of these, email admin@deluxedetail.com.au. You may also complain to your local data protection authority. Your information will be transferred outside the EEA and UK, including to Australia, Canada and the United States, as described in section 6.

California. If you are a California resident, you have the right to know what personal information we hold about you, to have it deleted, to have it corrected, and to receive it in a portable format. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act. To exercise your rights, or to appoint an authorised agent to do so, email admin@deluxedetail.com.au.

Automated decision making. We do not make decisions about you using solely automated processing that produce legal or similarly significant effects. Shopify and our payment providers apply limited automated fraud screening, such as temporarily blocking IP addresses and cards linked to repeated failed transactions. Those blocks are short lived and do not have a legal effect on you.

14. Changes to this policy

We may update this policy to reflect changes to our practices, our service providers or the law. The current version always appears on this page, with the date it was last updated shown below. If we make a significant change, we will make that clear on the site.