1. Compliance With Global Privacy Laws

We are dedicated to safeguarding your privacy in compliance with:

• Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
• General Data Protection Regulation (GDPR) (EU/EEA & UK).
• California Consumer Privacy Act (CCPA/CPRA).
• Meta Commercial Terms & Advertising Standards regarding conversion data transparency and tracking disclosure.

2. Personal Data We Collect

When you interact with our Site, we collect information in two main categories:

A. Information You Provide to Us Directly:

• Order & Checkout Details: Full name, shipping address, billing address, phone number, and email address.
• Payment Details: Encrypted transaction data processed securely by Shopify Payments, Stripe, PayPal, or Apple Pay. We never store your complete credit card number or CVV on our servers.
• Customer Support Communications: Emails, messages, or warranty registration queries sent to support@gethushband.com.

B. Information Collected Automatically (Device & Usage Data):

• IP address, browser type and version, device identifier, time zone, and operating system.
• Pages viewed, product interaction timestamps, referring URLs, search terms, and cart abandonment events.

3. Meta Advertising, Pixels & Tracking Technologies

How Meta technologies operate on our store:

• When you view a product, add an item to your cart, or make a purchase, these actions may trigger hashed, pseudonymized event data (such as an encrypted email hash or transaction value) sent to Meta.
• Meta uses this data to match your activity with your Meta profile in accordance with their Data Policy.
• Your Right to Opt-Out: You can manage or disable personalized advertising across Meta products by visiting Meta Ad Preferences. You may also opt out of cross-site digital advertising via the Digital Advertising Alliance (DAA) or the Your Online Choices portal.

4. Why We Process Your Data (Legal Basis)

We process your information under the following lawful bases:

• Fulfillment of a Contract: To process payments, arrange delivery via Australia Post and courier partners, and send dispatch tracking notifications.
• Legitimate Business Interests: Fraud detection, website analytics, conversion optimization, and brand security.
• Consent: For opt-in SMS/email marketing and tracking cookies (which can be withdrawn at any time).
• Legal Obligation: Tax reporting and consumer warranty records under Australian Consumer Law.

5. Sharing of Personal Information

We do NOT sell, rent, or trade your personal information. We share data strictly with trusted service partners essential to store operations:

• Shopify: Cloud e-commerce infrastructure provider (Shopify Privacy Policy).
• Fulfillment & Couriers: Australia Post, DHL, and local delivery carriers to deliver your order.
• Payment Gateways: PCI-DSS compliant providers including Shopify Payments, Stripe, and PayPal.
• Analytics & Ads: Meta Platforms Inc., Google LLC, and Klaviyo.

6. Your Privacy Rights

Depending on your location, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your personal data ("Right to be Forgotten").
• Opt out of marketing communications by clicking "Unsubscribe" in any email or replying "STOP" to SMS.

To exercise any of these rights, email us at support@gethushband.com. We respond to all verified requests within 30 days.

7. Data Retention & Security

We maintain industry-standard 256-bit SSL encryption across our entire checkout. We retain order records for financial accounting and warranty verification purposes as required by Australian taxation law, after which data is safely anonymized or deleted.