PRIVACY POLICY

1. Who We Are

Shayona Australia Ltd (ACN 647 509 439) ("we", "our", or "Shayona") is committed to protecting your privacy and handling your personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy applies to personal information collected through our website (shayona.com.au), including online orders, and any online interactions with us.

2. Information We Collect

We collect the following information:

• Order details: when you place an online order (shop, cafe or festival pre orders), your name, email address and phone number, any note you add, the items you ordered, your chosen pickup store, and the order and payment reference numbers.
• Enquiry details: when you use a contact, quote, services or message form, or subscribe to our newsletter, the details you enter in that form.
• Payment details: card details are entered into a secure payment form provided by Square and go directly to Square. We never see or store your card number.
• Page visit records: when a page is requested, our hosting provider records the page address, the date and time, the result, the referring page, and the country the request came from. These records do not include your IP address, your browser or device details, or any cookies, and we do not use them to identify anyone. When you return to an order you have started, the page address can include your order number.

We do not intentionally collect sensitive information unless you voluntarily provide it.

3. How We Collect Information

We collect personal information:

• Directly from you when you place an order, submit a form on our website, contact us by email or phone, or subscribe to our communications.
• Automatically, in the page visit records described in section 2.

4. How We Use Your Information

We use your personal information to:

• Prepare your order, take payment, and hand your order to you at the store you chose
• Send your order confirmation and contact you about your order
• Respond to your enquiries and service requests
• Send marketing communications (with your consent)
• Count visits to our pages so we can improve our website and services
• Meet our legal, accounting, and tax obligations
• Maintain the security of our website, for example by limiting repeated requests

5. Disclosure of Your Information

We may disclose your personal information to:

• Square, which processes payments and records each order for the store that will prepare it
• Amazon Web Services, which hosts our website and order records and sends our emails
• The Shayona store you chose for pickup, so its team can prepare your order
• Related entities, for administrative and governance purposes
• Regulatory or law enforcement bodies where required by law or to protect our legal rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Overseas Disclosure

Our website and order records are stored with Amazon Web Services in Sydney, Australia. Our pages are delivered through a worldwide network of servers, so a page request may be handled outside Australia. Square may process payment and order information outside Australia, including in the United States. We take reasonable steps to ensure that overseas recipients handle your information consistently with Australian privacy standards.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, use, disclosure, loss, or alteration, including encrypted data transmission, encrypted storage, and access controls. No method of internet transmission is completely secure, and we cannot guarantee absolute security.

8. Cookies, Browser Storage and Analytics

We do not use analytics, advertising or tracking tools on our website, and our website does not set tracking cookies.

Your browser keeps your cart and your chosen store on your own device so they are still there when you return. You can clear them at any time through your browser settings. The secure payment form provided by Square may use its own cookies to process payments and prevent fraud; see Square's privacy notice at squareup.com/au/en/legal/general/privacy.

9. Marketing Communications

With your consent, we may send you:

• Newsletters about Shayona news and updates
• Event invitations and festival announcements
• Special offers and promotions
• Information about our services

Marketing communications are sent only with express consent. Order and service communications are sent as reasonably necessary to fulfil your order or request.

You can opt out of marketing at any time by contacting us using the details in section 12.

10. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate, incomplete, or out of date information
• Opt out of marketing communications at any time
• Lodge a complaint about how we handle your personal information

To exercise any of these rights, please contact us using the details in section 12 below. We aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Retention

• Paid orders are kept as business records. Australian tax law requires us to keep these records for at least five years.
• Orders that are started but not paid are deleted automatically after seven days.
• Copies of order emails held by our website for sending are deleted automatically after 30 days.
• Page visit records are deleted automatically after 90 days.
• Enquiries are kept in our email for as long as needed to respond and to keep a record of our dealings with you.

12. Contact: Privacy

For privacy related enquiries, access requests, or complaints:

• Email: info@shayona.com.au
• Phone: 02 6535 2277
• Post: 40 Eleanor Street, Rosehill NSW 2142

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on our website.