Your privacy.

Last updated: [date you publish]

[Your legal business or trading name] (ABN [your ABN]) (“Mistic Aura”, “we”) respects your privacy. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Account details: name, email address, phone number and password (stored only as a one-way encrypted hash).
• Order details: delivery address, phone number, items bought and order history.
• Payment details: handled by Stripe. We receive confirmation that a payment was made, not your card number.
• Marketing preferences: whether you agreed to receive our emails, and when.
• Technical information: IP address and browser type, kept for security (for example to stop people trying to guess passwords).

Why we collect it

To process and deliver your orders, run your account, answer your questions, keep the site secure, meet our tax and legal obligations, and, only if you agree, send you news and offers.

Who we share it with

• Stripe (payments). Stripe may store and process data in the United States and other countries.
• Australia Post (delivery): your name, delivery address and phone number.
• Hostinger (website and database hosting). Servers located in [server location shown in your Hostinger panel].
• Our email provider [e.g. Hostinger Mail / Google Workspace], to send order and account emails.

We do not sell your personal information. Some of these providers are located overseas. Where that happens, we take reasonable steps to make sure they protect your information.

Cookies and browser storage

We use essential cookies only: one to keep you signed in, one security token that protects forms, and one that remembers your shopping bag. Your browser also remembers which products you recently viewed. We do not use advertising cookies.

Marketing emails

We only send marketing emails if you have agreed to receive them. Every marketing email has an unsubscribe link, and we process unsubscribe requests within 5 working days.

How long we keep it

We keep order and tax records for 5 years, as Australian tax law requires. We keep account information while your account is open. You can ask us to delete your account at any time.

Security

All connections to the site are encrypted (HTTPS). Passwords are hashed, admin access needs two-step verification, and access to customer data is limited and logged. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC).

Access, correction and complaints

You can see and update most of your details in your account. To ask for a copy of your information, a correction or deletion, or to make a privacy complaint, email [privacy@misticaura.com.au]. We will reply within 30 days. If you are not happy with our response, you can contact the OAIC at oaic.gov.au or on 1300 363 992.