Privacy policy

Who we are

This policy applies to aubacwater.com, which is run by AUH2O Pty Ltd (ACN 703 768 192), trading as AUBACWATER (“we”, “us”). We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

When you order: your name, email address, phone number if you give one, delivery address, the items you bought and the delivery option you chose.

When you pay: payment is handled by Stripe. Your card details are entered into Stripe’s secure payment field and go directly to Stripe; we never see or store your full card number. Stripe tells us whether the payment succeeded, the amount, and limited details such as the card type and its last four digits.

When you contact us: your name, email address, company if you include it, and your message.

Automatically: technical information such as your IP address, browser and device type, and the pages you request. Our hosting provider and Stripe use this to run the site and detect fraud, and Stripe may set cookies for that purpose. We also use Vercel Web Analytics and Speed Insights, which are cookieless and record aggregated page views, referrers, countries, device types and page-performance timings; they do not identify you. We do not run advertising trackers.

In your browser: your cart is saved in your browser’s local storage so it is still there when you come back. It stays on your device and is only sent to us when you check out.

Please don’t send us sensitive information, such as health information, through the contact form or in order details. We don’t need it to supply our products.

How we use it

We use your information to process and deliver orders, send receipts and dispatch updates, answer enquiries and handle returns, prevent fraud and keep the site secure, keep the records that tax and consumer law require, and improve the site. We only send marketing email if you have asked for it, and you can opt out at any time.

Who we share it with

• Stripe, which processes payments, prevents fraud and sends receipts on our behalf. Stripe operates in Australia and overseas, including in the United States, under its own privacy policy.
• Delivery carriers, which receive your name, address and phone number so they can deliver your order.
• Our hosting, database and email providers, whose servers may be located overseas, including in the United States.
• Professional advisers and authorities, where the law requires or allows it.

We do not sell personal information or share it with advertisers.

Storage and retention

We keep order and payment records for at least five years, as tax and consumer law require. We keep enquiries for as long as we need them to deal with your question. After that, information is deleted or de-identified.

Security

The site is served over HTTPS, card details never touch our servers, and access to customer information is limited to the people who need it to fulfil orders and answer enquiries. No online service is completely secure, so please contact us if you think your information has been mishandled.

Access, correction and complaints

You can ask to see or correct the personal information we hold about you, or make a privacy complaint: use our contact form. We respond within 30 days and may need to confirm your identity first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy as our services change. The current version, with its date, is always published on this page.