✨ Free shipping Australia-wide! ✨

Privacy policy

This Privacy Policy explains how Pantry Beauty and Wellness collects, uses, stores and protects personal information when you visit our website, place an order, contact us, subscribe to our marketing, leave a review or comment, interact with us on social media, or purchase from us in person at local markets.

Pantry Beauty and Wellness is a small business based in Victoria, Australia. We currently sell and deliver our website orders within Australia only. Our website is intended for Australian customers, although visitors from outside Australia may still access our website. Where relevant, their personal information will be handled in accordance with this Privacy Policy.

We are not a health service provider. We sell skincare, haircare, soaps, body care products, bundles and educational content. Any information shared on our website, blog, product pages, emails or social media is general educational information only. It is not medical, dermatological or health advice and should not replace advice from a qualified professional.

Although Pantry Beauty and Wellness is a small business and may not currently be required to comply with all requirements of the Australian Privacy Act, we choose to handle personal information carefully, transparently and in line with good privacy practice.

For privacy questions, requests or complaints, you can contact us at:

Email: contact@pantrybeautyandwellness.com.au

1. What personal information we collect

The personal information we collect depends on how you interact with us.

Website orders

When you place an order on our website, we collect the information needed to process, fulfil and update you about your order, including:

  • your name
  • your email address
  • your billing address
  • your shipping address
  • order details
  • optional phone number, if you choose to provide it

Customers may choose to use a shipping address that is different from their billing address, including where an order is being sent to another person.

Our website checkout does not currently include an order notes or delivery instructions field.

Website payments are processed by Stripe via WooCommerce. We do not see or store your full payment card details.

In-person market purchases

For in-person purchases at local markets, payments are processed through Square. Sharing personal information at markets is optional. If you choose to receive a receipt, Square may send it to you by email or SMS.

Newsletter, email and SMS marketing

When you subscribe to our newsletter, we collect the minimum information required:

  • first name
  • email address

Newsletter subscription is optional and uses double opt-in. Customers are only added to our marketing list if they clearly opt in. We do not add customers to marketing simply because they have purchased from us.

We use Klaviyo for email marketing, SMS marketing and automated flows. If you opt in, we may use Klaviyo to send:

  • welcome emails
  • browse abandonment emails
  • cart abandonment emails
  • checkout abandonment emails
  • post-purchase emails
  • product education emails
  • event-based campaigns, such as Mother’s Day, Christmas or new product launches
  • SMS campaigns or SMS flows, where you have consented to receive SMS marketing

Klaviyo may also help us personalise or segment emails and SMS messages based on customer behaviour, such as products viewed, cart activity, checkout activity, past purchases, email clicks, SMS clicks and customer interests.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email. You can also unsubscribe from SMS marketing at any time, including by replying STOP or using another unsubscribe option provided.

Service communications

Even if you are not subscribed to marketing, we may contact you about important service-related matters, including:

  • order updates
  • delivery issues
  • refund or return matters
  • product safety notices
  • important changes to our policies

These messages are not marketing messages and may be necessary to manage your order, protect customers, or operate the business properly.

Contact forms, emails and customer enquiries

Our website contact forms are published through Elementor. Messages submitted through those forms are sent to our mailbox hosted by Zoho Mail.

If you contact us by email, contact form or social media message, we may collect the information you choose to provide, such as your name, email address, order information, enquiry details, photos or other information included in your message.

Customer communications are sent to contact@pantrybeautyandwellness.com.au, which is hosted by Zoho Mail. Only Flora and Pascal have access to this mailbox.

Customers may make product enquiries through Instagram, Facebook or TikTok. Orders are normally completed through our website. In very rare cases, we may create an order on behalf of a customer and send a secure payment link, but this is not part of our normal operating process.

Refunds, returns and product issues

If you contact us about a refund, return, damaged product, faulty product, incorrect item or missing item, we may collect information needed to assess and process the matter, including:

  • your name
  • email address
  • order number
  • issue details
  • photos of the product or packaging, where needed

Photos requested for refund, return or damage claims are used to assess and process the request.

Reviews, testimonials, photos and feedback

Customers may voluntarily share reviews, testimonials, photos, product feedback or personal stories by email, social media or through our website.

We treat customer photos carefully. We will ask for permission before using customer photos on our website or social media.

Product reviews submitted on the website are moderated. If a product review is published, it may appear publicly as posted by the customer, including the customer’s chosen name, rating and review content. Reviews shared privately by email may only be uploaded to the website with permission.

Published reviews may be featured on our website.

Blog comments

Blog comments are enabled on our website and are moderated before publishing.

When you leave a blog comment, WordPress may collect information such as:

  • your name
  • email address
  • website URL, if provided
  • comment content
  • IP address
  • browser and device information

If a comment is approved, it may appear publicly with your chosen name and comment content.

Technical and website usage information

When you visit our website, our website, hosting provider, analytics tools, cookie tools and security tools may collect technical information, including:

  • IP address
  • browser type
  • device type
  • pages visited
  • referring website
  • date and time of visit
  • cookie data
  • general website usage information

This information helps us operate, protect and improve our website.

Sensitive information

Customers may sometimes choose to share sensitive information with us, such as skin concerns, allergies, scalp issues, children’s skin reactions or health-related details. We cannot control what customers choose to share.

We do not actively request sensitive information unless it is reasonably needed to respond to an enquiry, provide customer support or handle a matter raised by the customer. If sensitive information is voluntarily shared with us, we will only use it for the purpose of responding to the enquiry, providing customer support, handling the matter raised, or where otherwise required by law.

2. Children’s privacy

Some Pantry Beauty and Wellness products may be suitable for children, but purchases, enquiries, newsletter sign-ups and SMS sign-ups should be made by adults, parents or guardians.

We do not knowingly collect personal information directly from children under 16. If we become aware that we have collected personal information from a child under 16 without appropriate parent or guardian involvement, we will take reasonable steps to delete or de-identify that information, unless we are required to keep it for legal, accounting or business record purposes.

3. How we use personal information

We may use personal information to:

  • process, fulfil and deliver orders
  • send order confirmations, delivery updates and customer service messages
  • respond to enquiries, product questions and customer support requests
  • assess and process refunds, returns, damaged product claims or order issues
  • send marketing emails or SMS messages where you have opted in
  • personalise email or SMS content through Klaviyo, where relevant
  • publish moderated reviews or comments where submitted or permitted
  • manage product feedback, testimonials and customer photos with permission
  • improve our website, products, customer experience and marketing
  • understand website traffic and customer behaviour
  • prevent spam, misuse, fraud, chargebacks or order disputes
  • verify payments where needed
  • comply with legal, accounting, tax, regulatory or business record requirements
  • protect the rights, property or safety of Pantry Beauty and Wellness, our customers or others

We may also use or disclose personal information where required by law, regulation, court order, law enforcement request, or to protect our legal rights.

4. Cookies, analytics and tracking technologies

Our website uses cookies and similar technologies for:

  • checkout functionality
  • cart handling
  • analytics
  • marketing and retargeting
  • improving the browsing experience

Our website has a cookie popup that allows visitors to accept, reject or manage different cookie categories.

You can also control or delete cookies through your browser settings. If you disable essential cookies, some website features may not work properly, including cart, checkout or other core website functions.

We currently use or intend to use tools such as:

  • Google Analytics
  • Google Search Console
  • Meta Pixel
  • Pinterest Pixel

These tools may help us understand website traffic, improve our website, measure marketing performance, and support advertising or retargeting.

5. Google reCAPTCHA

We use Google reCAPTCHA to help protect our forms, comments or checkout from spam, misuse and automated abuse. Google reCAPTCHA may collect technical information such as IP address, device information, browser information and interaction data to provide this protection. Use of Google reCAPTCHA is subject to Google’s own privacy terms.

6. Social media, embedded content and third-party links

Pantry Beauty and Wellness currently uses Instagram, Facebook and TikTok. Our website footer links to these platforms and may display recent Instagram content.

If you interact with us on Instagram, Facebook or TikTok, or interact with embedded or linked social media content on our website, those platforms may collect information according to their own privacy policies, terms and account settings.

Our website may also include links to third-party websites, including social media platforms, payment platforms, blog sources or other external websites. We are not responsible for the privacy practices of third-party websites. You should review their privacy policies before sharing personal information with them.

7. Who we share personal information with

We do not sell, rent or trade customer personal information.

We may share personal information with trusted service providers only where needed to operate our business, provide our products and services, process orders, manage marketing, protect the website, or comply with legal or business obligations.

These providers may include:

  • WooCommerce, for online store functionality
  • Stripe, for website payment processing
  • Square, for in-person market payments and receipts
  • Klaviyo, for email and SMS marketing
  • Zoho and Zoho Mail, for customer communications
  • Bluehost, for website hosting
  • Google Analytics, Google Search Console and Google reCAPTCHA
  • Meta, including Instagram and Facebook
  • TikTok
  • Pinterest Pixel
  • Australia Post
  • courier services
  • contractors, agencies or advisers, where access is needed for their work
  • future accountants, bookkeepers or tax advisers, where information is reasonably needed for their work

Most orders are delivered through Australia Post or courier services. To deliver your order, we may share your name, delivery address and relevant contact details with the delivery provider where required to complete the delivery and provide tracking or delivery updates. Occasionally, Pantry Beauty and Wellness may deliver orders directly where practical.

We currently use Hnry for bookkeeping. Hnry receives order dates and amounts only and does not require customer personal information from us.

8. Contractors, agencies and access controls

We may work with contractors, agencies or advisers to help operate or improve the business, including website, marketing, email or technical support.

Access to customer or subscriber information is not given by default. Where access is needed, it is limited to the systems and information required for the work.

We use the Members plugin to manage WordPress access at a granular level. For Klaviyo, we do not share our credentials with third parties. Each person who needs Klaviyo access is given their own credentials, and access is removed once their engagement ends.

Access to WooCommerce, Stripe, Square and Klaviyo is limited to Flora, Pascal and limited contractors or agencies where needed.

We use ClickUp for project management, but customer personal information is not shared in ClickUp.

Under our operational guidelines, customer personal information is not shared with AI tools or design/content tools.

9. Overseas storage or processing

Some of the third-party platforms we use are global technology providers. This means personal information may be stored or processed outside Australia by providers such as Klaviyo, Stripe, Square, Google, Meta, Pinterest, TikTok, WooCommerce, Zoho or Bluehost.

Where we use these platforms, we rely on their systems, security measures and privacy practices to help provide our website, marketing, payment, communication and business services.

10. How we protect personal information

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification or disclosure.

Our security practices include:

  • SSL/HTTPS website security
  • password-protected admin access
  • two-factor authentication for WordPress and Klaviyo users
  • limiting access to personal information based on role and business need
  • removing access when a person’s work is complete
  • weekly WordPress plugin updates as part of our operational guidelines
  • website backups before plugin updates
  • careful handling of customer photos, messages and sensitive information

No method of online transmission or electronic storage is completely secure, but we take privacy and security seriously and use practical safeguards appropriate for our business size and operations.

11. Website backups

We take website backups for security and business continuity purposes. Backups are handled through All-in-One WP Migration and Backup.

Backups are taken weekly before plugin updates. Backup files are downloaded, deleted from the website/server, and stored on a private NAS. The private NAS is accessed only by Flora and Pascal.

We take website backups for security and business continuity purposes. Backups are stored on a private NAS accessed only by authorised Pantry Beauty and Wellness personnel. We retain backups only for as long as reasonably necessary for security, recovery, legal, accounting or business purposes, and delete backups when they are no longer needed.

12. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose it was collected, including legal, accounting and business record requirements.

When personal information is no longer needed, we will take reasonable steps to delete, de-identify or securely dispose of it, unless we are required or permitted to keep it for legal, accounting, tax, order record-keeping, dispute resolution or business purposes.

13. Accessing, correcting or deleting your personal information

You can contact us to request access to, correction of, or deletion of your personal information.

Please email:

contact@pantrybeautyandwellness.com.au

We may need to verify your identity before responding to a request. We will take reasonable steps to respond within a reasonable time.

Some information may need to be retained where required for legal, accounting, tax, order record-keeping, dispute resolution or business purposes.

14. Privacy complaints

If you have a privacy concern or complaint, please email us at:

contact@pantrybeautyandwellness.com.au

We will review your concern and respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

15. Data breaches and security incidents

If Pantry Beauty and Wellness becomes aware of a privacy or data security incident, we will take reasonable steps to investigate the issue, reduce harm, and notify affected people or relevant authorities if legally required.

16. Features we do not currently use

At the time of this Privacy Policy, Pantry Beauty and Wellness does not currently use or offer:

  • customer accounts
  • loyalty programs
  • referral programs
  • rewards systems
  • memberships
  • subscriptions
  • live chat
  • chatbots
  • WhatsApp buttons
  • Messenger chat
  • booking forms
  • quizzes
  • skin or hair questionnaires
  • product recommendation tools
  • giveaways
  • competitions
  • surveys
  • market sign-up sheets
  • wholesale, retail, stockist or market partnership data collection

If we introduce new features that involve collecting additional personal information, we may update this Privacy Policy.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, systems, services, legal requirements or privacy practices.

The updated version will be published on our website with a new “Last updated” date.