Privacy Policy

Effective date: [DATE] · Last updated: [DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] (ABN [ABN]) trading as Flossei ("Flossei", "we", "us", "our") collects, uses, discloses and protects your personal information when you visit flossei.com, buy from us, or contact us.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where we serve customers in the EU or UK, we also act consistently with the GDPR.

1. Information We Collect

Information you give us:

Name, email address, shipping and billing address, phone number
Order and transaction history
Account login details, if you create an account
Reviews, photos and messages you send us
Marketing preferences

Information collected automatically:

IP address, device type, browser and operating system
Pages viewed, time on site, referring URL, and how you navigate the store
Cookie and pixel data (see our Cookie Policy)

Payment information: card numbers are entered directly into our payment processors' secure systems. Flossei never sees or stores your full card number.

2. How We Use Your Information

To process, fulfil and deliver your order and send order updates
To provide customer support and handle returns, warranties and enquiries
To send marketing emails and SMS where you have opted in (you can unsubscribe at any time)
To show you relevant advertising on platforms such as Meta, TikTok and Google
To detect and prevent fraud, chargeback abuse and misuse of the site
To improve our products, site performance and merchandising
To comply with our legal, tax and record-keeping obligations

3. Who We Share It With

We do not sell your personal information. We share it only with service providers who need it to run the business:

Shopify — e-commerce platform hosting this store
Payment providers — Shopify Payments, PayPal, and buy-now-pay-later services
Shipping and fulfilment partners — to pick, pack and deliver your parcel
Email and SMS platforms — to send order notifications and marketing you've opted into
Analytics and advertising platforms — Google, Meta, TikTok
Review platforms — to collect and display customer feedback
Professional advisers and authorities — where required by law or to protect our legal rights

We may also disclose information in connection with a sale, merger or restructure of our business.

4. Overseas Disclosure

Some of our providers store or process data outside Australia, including in the United States, Canada, Ireland and Singapore. Where we transfer personal information overseas we take reasonable steps to ensure it is handled to a standard consistent with the Australian Privacy Principles.

5. Cookies & Tracking

We use cookies and similar technologies to keep your cart working, remember your preferences, measure site performance and deliver relevant advertising. You can control these — see our Cookie Policy for the full breakdown and your options.

6. Marketing & Opting Out

If you subscribe, we may email or text you offers, product news and content. Every marketing email has an unsubscribe link at the bottom, and you can reply STOP to any SMS. Opting out of marketing does not stop transactional messages such as order confirmations and shipping updates.

7. Data Retention

We keep order and transaction records for at least seven years to meet Australian tax and record-keeping requirements. Marketing data is kept until you unsubscribe or ask us to delete it. Account data is kept while your account is active.

8. Security

Our store runs over encrypted HTTPS connections, and payment data is handled by PCI-DSS compliant processors. Access to customer data internally is restricted to those who need it. No system is perfectly secure, so we cannot guarantee absolute security — but we will notify you and the OAIC as required if a notifiable data breach occurs.

9. Children

Our store is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

10. Your Rights

You may:

Request access to the personal information we hold about you
Ask us to correct anything inaccurate or out of date
Ask us to delete your information, subject to our legal retention obligations
Withdraw consent to marketing at any time
Request a portable copy of your data
Object to or restrict certain processing (EU/UK residents)

Email [SUPPORT EMAIL] and we'll respond within 30 days. We may need to verify your identity first.

11. Complaints

If you're unhappy with how we've handled your personal information, contact us first at [SUPPORT EMAIL]. If we can't resolve it, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

12. Changes

We may update this policy from time to time. The current version is always published on this page with its last-updated date. Material changes will be communicated by email or a site notice.