Privacy policy

This Privacy Policy describes how fytoya.shop (“fytoya.shop”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information when you visit our website, place an order, create an account, contact us, subscribe to marketing communications, or otherwise use our products and services.

Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and services to you.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

By accessing or using fytoya.shop, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

We may collect the following categories of personal information:

Contact Information

This may include:

• Your full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Country or region of residence

Order and Transaction Information

When you place or attempt to place an order, we may collect:

• Products ordered or added to your shopping cart
• Order number
• Purchase amount
• Billing and delivery details
• Payment method
• Payment and transaction status
• Discount or promotional code information
• Shipping and tracking information
• Returns, exchanges, cancellations, and refund information
• Communications relating to your order

Payment details are generally collected and processed by Shopify, payment gateways, banks, or other authorised payment service providers.

We generally do not directly collect or store your complete credit card or debit card number.

Customer Account Information

If customer accounts are available and you create an account, we may collect:

• Your name
• Email address
• Account login and authentication information
• Saved addresses
• Order history
• Shopping preferences
• Account settings

Device and Usage Information

When you access our website, certain technical information may be collected automatically, including:

• Internet Protocol address
• Browser type
• Device type
• Operating system
• Language and time-zone settings
• Referring website
• Pages viewed
• Links clicked
• Products viewed
• Shopping cart activity
• Session duration
• Cookie identifiers
• Advertising and analytics identifiers

Customer Service Information

When you contact us, we may collect:

• Your name and contact details
• The contents of your enquiry
• Order information
• Product questions
• Return or refund requests
• Complaints and feedback
• Photographs, videos, or documents you provide
• Copies of correspondence between you and our customer service team

Marketing Information

If you subscribe to our marketing communications or interact with our advertising, we may collect:

• Your marketing preferences
• Email subscription status
• Information about whether you opened or clicked a marketing email
• Advertising interactions
• Products or categories that may interest you
• Promotion or survey participation

Fraud and Security Information

We and our service providers may collect or analyse information to:

• Verify transactions
• Prevent payment fraud
• Detect unauthorised account activity
• Protect our website and systems
• Investigate suspicious or unlawful behaviour

2. How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order
• When you create or update a customer account
• When you contact customer service
• When you subscribe to marketing communications
• When you enter a competition, survey, or promotion
• Automatically through cookies and similar technologies
• From Shopify and Shopify applications
• From payment processors
• From shipping and fulfilment providers
• From analytics and advertising providers
• From fraud prevention and cybersecurity providers
• From social media platforms when you interact with our content
• From publicly available sources where lawful and appropriate

Where lawful and practical, you may interact with us anonymously or by using a pseudonym.

However, we generally require accurate identifying and contact information to process payments, fulfil orders, arrange delivery, manage returns, issue refunds, investigate fraud, or respond to account-related enquiries.

3. Why We Collect and Use Personal Information

We may collect and use personal information to:

• Provide and operate our website
• Process and confirm orders
• Verify and collect payments
• Arrange product fulfilment and delivery
• Send order confirmations and shipping updates
• Maintain customer accounts
• Provide customer service
• Respond to enquiries and complaints
• Process cancellations, returns, exchanges, and refunds
• Detect and prevent fraud and unauthorised transactions
• Protect our website, customers, and business
• Improve our products, services, and website
• Analyse website traffic and customer behaviour
• Personalise website content and product recommendations
• Manage inventory and business operations
• Measure advertising and marketing performance
• Send marketing communications where permitted
• Maintain accounting and taxation records
• Comply with legal and regulatory obligations
• Enforce our Terms of Service and other store policies
• Establish, exercise, or defend legal claims
• Conduct business restructuring, sale, or transfer activities

We will not use personal information for an unrelated purpose unless you have provided consent or the use is otherwise authorised or required by law.

4. Shopify

Our website is hosted and operated using Shopify.

Shopify may process personal information when you:

• Visit our website
• Browse products
• Add products to your shopping cart
• Create a customer account
• Complete checkout
• Make a payment
• Place an order
• Interact with Shopify-powered functions

Shopify may process information to provide:

• Website hosting
• Shopping cart functions
• Checkout services
• Payment processing
• Fraud prevention
• Account authentication
• Analytics
• Security
• Customer privacy tools
• Platform personalisation
• Other e-commerce services

Shopify handles personal information in accordance with its own privacy policies and applicable legal obligations.

5. Cookies and Similar Technologies

We, Shopify, and our service providers may use cookies, pixels, tags, local storage, software development kits, and similar technologies.

These technologies may be used to:

• Operate the website
• Remember products in your shopping cart
• Save your preferences
• Maintain secure account sessions
• Provide checkout functions
• Detect fraud and security threats
• Understand how visitors use our website
• Measure website performance
• Personalise content and product recommendations
• Measure advertising performance
• Display advertising that may be relevant to you

Essential Cookies

Essential cookies support important website functions, including:

• Shopping carts
• Customer accounts
• Secure checkout
• Payment processing
• Website security
• Order processing

Disabling essential cookies may prevent parts of the website from functioning correctly.

Analytics Cookies

Analytics cookies help us understand:

• How visitors find our website
• Which pages and products are viewed
• How customers navigate the website
• Whether technical errors occur
• How we can improve website performance

Advertising Cookies

Advertising cookies and similar technologies may be used to:

• Measure advertising campaigns
• Understand interactions with advertisements
• Limit repeated advertisements
• Create audience groups
• Display more relevant marketing content

You can manage cookies through your browser settings and, where available, through the cookie or privacy controls displayed on our website.

Disabling certain cookies may affect website functionality and your shopping experience.

6. Marketing Communications

Where permitted by law, we may send you promotional communications about:

• New products
• Special offers
• Discount codes
• Store updates
• Abandoned shopping carts
• Customer surveys
• Promotional campaigns

You may unsubscribe from marketing emails at any time by:

• Clicking the unsubscribe link in the email
• Contacting us at info@fytoya.shop

After unsubscribing, you may continue to receive non-marketing communications relating to:

• Existing orders
• Payments
• Deliveries
• Returns
• Refunds
• Account security
• Customer service enquiries
• Changes to important store terms or policies

7. Disclosure of Personal Information

We may disclose personal information to third parties that assist us in operating our website and business.

These parties may include:

• Shopify and its related companies
• Payment processors and financial institutions
• Shipping carriers
• Warehousing and fulfilment providers
• Customer service providers
• Website and cloud-hosting providers
• Information technology providers
• Analytics providers
• Advertising and marketing platforms
• Email and communication providers
• Fraud prevention and cybersecurity providers
• Accountants, auditors, insurers, and professional advisers
• Government agencies, courts, regulators, and law enforcement authorities
• Potential purchasers or advisers involved in a merger, acquisition, restructuring, financing, or sale of our business

We may also disclose personal information where:

• You have consented to the disclosure
• Disclosure is reasonably necessary to complete your order
• Disclosure is required or authorised by law
• Disclosure is necessary to investigate fraud or unlawful activity
• Disclosure is necessary to protect our rights, property, customers, or systems
• Disclosure is necessary to respond to legal proceedings or government requests

We do not sell customer contact information to third parties in exchange for money.

However, certain advertising or analytics activities may be treated as “sharing”, “targeted advertising”, or a “sale” under some international privacy laws. Where legally required, we will provide applicable privacy choices.

8. Overseas Processing and Disclosure

Shopify and some of our service providers may operate or store information outside Australia.

As a result, personal information may be transferred to, processed in, or accessed from countries outside Australia.

Overseas service providers may include:

• Shopify platform providers
• Cloud-hosting providers
• Payment processors
• Analytics providers
• Marketing platforms
• Customer support providers
• Shipping and fulfilment providers

Privacy laws in other countries may differ from Australian privacy laws.

Where required by law, we take reasonable steps to ensure overseas recipients handle personal information appropriately and protect it against unauthorised access, use, or disclosure.

9. Payment Information

Payments made through our website are processed using Shopify-supported payment gateways or other authorised payment service providers.

Payment processors may collect:

• Cardholder name
• Billing address
• Payment card details
• Payment authentication information
• Transaction information
• Fraud prevention data

Payment providers process information under their own privacy policies and security requirements.

We do not normally receive or store complete payment card numbers.

10. Data Security

We take reasonable administrative, technical, and organisational measures to protect personal information against:

• Misuse
• Interference
• Loss
• Unauthorised access
• Unauthorised modification
• Unauthorised disclosure
• Accidental destruction

Security measures may include:

• Secure website connections
• Restricted access controls
• Password and account protections
• Secure payment processing
• Fraud monitoring
• Service-provider security requirements
• System monitoring and maintenance

However, no internet transmission, website, payment system, or electronic storage method can be guaranteed to be completely secure.

You are responsible for keeping your login details and passwords confidential.

Please contact us immediately if you believe your account or personal information has been accessed without authorisation.

11. Data Breaches

If we become aware of a data breach involving personal information, we will investigate the incident and take reasonable steps to contain and address it.

Where required by applicable law, we will notify affected individuals and the relevant Australian regulatory authority of an eligible data breach.

12. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• Order fulfilment requirements
• Customer service requirements
• Return and refund periods
• Product warranty periods
• Accounting and taxation obligations
• Fraud prevention requirements
• Chargeback and payment dispute periods
• Legal limitation periods
• Regulatory requirements
• The need to establish, exercise, or defend legal claims

When personal information is no longer reasonably required, we will take reasonable steps to securely delete, destroy, or de-identify it, unless retention is required or permitted by law.

13. Accessing Your Personal Information

You may request access to personal information that we hold about you.

To make an access request, contact:

Email: info@fytoya.shop

Please provide sufficient information to help us identify you and locate the relevant records.

We may need to verify your identity before releasing personal information.

In certain circumstances, access may be refused or limited where permitted or required by law. Where appropriate, we will explain the reason for refusing access.

14. Correcting Your Personal Information

You may ask us to correct personal information that is:

• Inaccurate
• Incomplete
• Out of date
• Irrelevant
• Misleading

To request a correction, contact us at info@fytoya.shop.

We may ask you to provide evidence supporting the requested correction.

We will take reasonable steps to correct information where appropriate.

15. Your Privacy Choices

Depending on your location and applicable law, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Withdraw consent
• Unsubscribe from marketing communications
• Manage cookie preferences
• Request deletion or de-identification of certain information
• Object to certain processing activities
• Restrict certain uses of personal information
• Make a privacy complaint

These rights may be subject to legal, security, fraud prevention, accounting, taxation, operational, or recordkeeping exceptions.

We may be unable to delete information that we are legally required to retain.

16. Privacy Complaints

If you believe we have mishandled your personal information, please contact us at:

Email: info@fytoya.shop

Your complaint should include:

• Your name and contact information
• A description of your concern
• Relevant order or account details
• Supporting information or documents
• The outcome you are seeking

We will acknowledge and investigate your complaint within a reasonable period.

We aim to provide a response within 30 days. If additional time is required, we will inform you where reasonably possible.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner for further information or to lodge a privacy complaint.

17. Children’s Privacy

Our website is intended for use by adults and persons who are legally able to enter into online purchase agreements.

We do not knowingly collect personal information directly from children without appropriate authorisation where consent is legally required.

If you are a parent or guardian and believe that a child has provided personal information without appropriate permission, please contact us at info@fytoya.shop.

We will review the request and take appropriate action.

18. Sensitive Information

We do not generally seek to collect sensitive information, such as:

• Health information
• Biometric information
• Racial or ethnic information
• Religious beliefs
• Political opinions
• Sexual orientation
• Criminal record information

Please do not provide sensitive information unless it is necessary for a specific request.

Where sensitive information is collected, we will handle it only where permitted by law and, where required, with your consent.

19. Third-Party Websites

Our website may contain links to third-party websites, social media services, applications, payment platforms, or other external services.

We are not responsible for the privacy, security, content, or practices of third-party websites or services.

We recommend reviewing the privacy policy of each third-party service before providing personal information.

20. Automated Processing and Fraud Screening

Shopify, payment providers, or fraud prevention services may use automated systems to assess transactions for fraud, security risks, or unauthorised activity.

These systems may consider information such as:

• Payment details
• Device information
• Internet Protocol address
• Order history
• Delivery address
• Transaction patterns
• Previous fraud indicators

Orders identified as potentially fraudulent may be delayed, reviewed, cancelled, or require additional verification.

21. Business Transfers

If our business is sold, merged, restructured, financed, or transferred, personal information may be disclosed to:

• Potential purchasers
• Investors
• Lenders
• Professional advisers
• Successor organisations

Any disclosure will be limited to what is reasonably necessary and handled in accordance with applicable legal obligations.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business practices
• Changes to our website
• New products or services
• Changes to service providers
• Changes to technology
• Changes to legal or regulatory requirements

The updated policy will be published on this page with a revised “Last Updated” date.

Where changes are significant, we may provide additional notice through the website or another appropriate communication method.

23. Contact Us

For questions, access requests, correction requests, complaints, or other privacy-related enquiries, please contact:

Company: fytoya.shop
Website: fytoya.shop
Email: info@fytoya.shop