Privacy Policy
Last updated:
1. Introduction
Phythraxquezl ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website phythraxquezl.world and use our services.
We comply with the Australian Privacy Act 1988 (including the Australian Privacy Principles, or APPs) and other applicable Australian State or Territory privacy laws, and—for individuals in the European Economic Area or United Kingdom where relevant—the General Data Protection Regulation (GDPR) or UK GDPR. By using our website, you acknowledge this policy; where the law requires separate consent (for example, certain marketing messages), we will obtain it as described below.
2. Data Controller / APP Entity Information
The organisation responsible for your personal information under the Privacy Act 1988 (APP entity) and, where applicable, the data controller under GDPR is:
- Company Name: Phythraxquezl
- Address: 24-26 Nicholson St, Banana QLD 4702, Australia
- Email: chat@phythraxquezl.world
- Country: Australia
3. Information We Collect
3.1 Personal Information You Provide
We may collect personal information that you voluntarily provide when you:
- Place an order through our website
- Contact us via email or contact forms
- Subscribe to our newsletter
- Create an account on our website
This information may include:
- Full name
- Email address
- Phone number
- Shipping and billing address
- Payment information (processed securely through third-party providers)
- Any other information you choose to provide
If you voluntarily include health-related or other sensitive information in a message or form, we will only use it for the purpose you provided it (for example, to respond to your enquiry), unless a law requires otherwise. We do not ask you to send us medical records through this website.
3.2 Automatically Collected Information
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
- Device identifiers
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given explicit consent for specific purposes
- Contractual Necessity: When processing is necessary to fulfill a contract with you (e.g., processing orders)
- Legal Obligation: When we are required to comply with legal requirements
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided your rights do not override these interests
5. How We Use Your Information
We use the collected information for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders and inquiries
- Providing customer support
- Sending marketing communications (with your consent)
- Improving our website and services
- Analyzing website usage and trends
- Preventing fraud and ensuring security
- Complying with legal obligations
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Order Information: 7 years (for tax and legal compliance)
- Account Information: Until you request deletion or account closure
- Marketing Preferences: Until you withdraw consent
- Website Analytics: 26 months
7. Data Sharing and Disclosure
We may share your personal information with:
- Service Providers: Third-party companies that help us operate our business (payment processors, shipping companies, email service providers)
- Legal Requirements: When required by law or to protect our legal rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
8. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions by the European Commission
- Other legally recognized transfer mechanisms
9. Your Rights (Australia)
Under the Australian Privacy Principles, you generally have the right to:
- Know: Understand whether we hold personal information about you and, if so, obtain access to it (APP 12)
- Correct: Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13)
- Complain: Lodge a complaint with us and, if not satisfied, with the OAIC (see section 13)
Where we use or disclose personal information for direct marketing, we will comply with APP 7 and the Spam Act 2003 (Cth) (for commercial electronic messages). You may opt out of marketing at any time using the unsubscribe link in our emails or by contacting us at chat@phythraxquezl.world.
9a. Your Rights (EEA / UK — where applicable)
If GDPR or UK GDPR applies to our processing of your data, you may have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data in certain circumstances
- Right to Restriction: Request limitation of processing of your data
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise Australian or other rights, contact us at chat@phythraxquezl.world. We will respond within a reasonable period and, for Australian requests, within 30 days where the APPs require it, unless an extension applies under the Privacy Act.
9b. Notifiable Data Breaches (Australia)
If we become aware of eligible data breaches under the Notifiable Data Breaches (NDB) scheme, we will assess and, where required, notify affected individuals and the Office of the Australian Information Commissioner in accordance with Part IIIC of the Privacy Act 1988.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure storage systems with access controls
- Regular security assessments and updates
- Employee training on data protection
While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
11. Children's Privacy
Our website is not intended for children under 18 years of age (consistent with our Terms of Use for purchases). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
13. Complaints
If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter. You may also lodge a complaint with:
- Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au; phone 1300 363 992; postal GPO Box 5218, Sydney NSW 2001.
- EU/EEA: Your local Data Protection Authority (where GDPR applies)
- UK: Information Commissioner's Office (ICO) (where UK GDPR applies)
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: chat@phythraxquezl.world
- Address: 24-26 Nicholson St, Banana QLD 4702, Australia