Privacy Policy
Soapmaid Australia
Privacy Policy
We are committed to protecting your personal information and handling it with care, in full compliance with Australian privacy law.
Contents
Soapmaid Australia Pty Ltd (78543615141) operates this store and website, including all related information, content, features, tools, products and services (the "Services"), powered by Shopify Inc.
This Privacy Policy explains how we collect, use, hold and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 of that Act. As a Victorian-based business, we also observe the Privacy and Data Protection Act 2014 (Vic) where applicable to our operations.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use and disclosure of your personal information.
By using or accessing any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your information as described herein. If you do not agree, please do not use our Services.
Under the Privacy Act 1988 (Cth), "personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. We may collect the following categories of personal information depending on how you interact with our Services:
| Category | Examples |
|---|---|
| Contact details | Name, billing address, shipping address, phone number, email address |
| Financial information | Payment card details, transaction details, form of payment, payment confirmation (processed securely via Shopify Payments) |
| Account information | Username, password (encrypted), security questions, preferences and settings |
| Transaction information | Items viewed, added to cart or wishlist, purchased, returned, exchanged or cancelled; past transaction history |
| Communications | Information included in emails, messages or support enquiries you send to us |
| Device & technical data | IP address, browser type, device identifiers, network connection details |
| Usage data | How and when you navigate or interact with our website and Services |
We do not collect sensitive information (as defined under APP 3.3, including health, racial or ethnic origin, religious beliefs, or sexual orientation) unless you voluntarily provide it and we have your consent, or collection is required or authorised by law.
Consistent with APP 3 (Collection of Solicited Personal Information), we collect personal information only by lawful and fair means, and only if it is reasonably necessary for one or more of our functions or activities. We collect personal information from the following sources:
Directly from you — when you create an account, browse or use the Services, make a purchase, communicate with us, enter a competition or promotion, or otherwise provide us with your personal information.
Automatically through the Services — from your device when you use our website or services, through cookies and similar tracking technologies (see Section 7).
From our service providers — when we engage them to provide technology or other services, and they collect or process personal information on our behalf.
From our business partners or other third parties — including Shopify and its associated merchants, in accordance with their privacy policies.
Where it is reasonable and practicable to do so, we will collect personal information directly from you. If we collect personal information about you from a third party, we will take reasonable steps to notify you of that collection in accordance with APP 5.
Consistent with APP 6, we use personal information only for the primary purpose for which it was collected, or for a directly related secondary purpose, or where you have consented. We may use your personal information for the following purposes:
Providing and improving the Services — processing payments, fulfilling orders, managing returns and exchanges, maintaining your account, arranging shipping, and creating a personalised shopping experience including product recommendations.
Marketing and advertising — sending you promotional communications by email, SMS or post, and displaying online advertisements, based on your purchases and activity on our Services. You can opt out at any time (see Section 8).
Security and fraud prevention — authenticating your account, detecting and investigating fraudulent, illegal or unsafe activity, and securing our Services. You are responsible for keeping your account credentials confidential.
Customer communications — providing customer support, responding to your enquiries, and maintaining our business relationship.
Legal compliance — complying with applicable Australian law, responding to valid legal process including requests from law enforcement or government agencies, and enforcing our Terms of Service.
Consistent with APP 6, we will only disclose your personal information to third parties for the purpose for which it was collected, a directly related secondary purpose, or where you have consented or disclosure is required by law. We may disclose personal information to:
Service providers — Shopify and other vendors who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping. These providers are contractually required to handle your information securely and in accordance with Australian privacy law.
Marketing and advertising partners — to support personalised advertising based on your online activity. You have the right to opt out of targeted advertising (see Section 11). Our partners handle your information in accordance with their own privacy notices.
At your direction — when you request or consent to disclosure, such as when we ship products to you or when you use social media login integrations.
Affiliates and corporate group — to companies related to Soapmaid Australia Pty Ltd for internal business purposes.
Business transactions — in connection with a merger, acquisition, sale of assets or restructure, subject to confidentiality obligations.
Legal obligations — to comply with applicable Australian law, court orders, subpoenas or valid requests from law enforcement or regulatory authorities, including the Office of the Australian Information Commissioner (OAIC).
We do not sell your personal information to third parties for their own commercial use. Any sharing for advertising purposes is done with your knowledge and with an opportunity to opt out, consistent with APP 6 and the Spam Act 2003 (Cth).
Our Services are hosted by Shopify Inc., which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through our store is transmitted to and shared with Shopify and may be processed by third parties in countries other than Australia.
Shopify may use personal information collected about your interactions with our store — along with data from other merchants and from Shopify — to provide enhanced features. In these circumstances, Shopify is an independent data controller responsible for the processing of your personal information for those purposes.
To learn more about how Shopify uses your personal information and to exercise your rights over Shopify's processing, visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Our Services may also contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing any personal information.
We use cookies, pixel tags and similar technologies to collect usage and device data when you visit our website. These technologies help us operate the Services, remember your preferences, analyse site traffic and deliver relevant advertising.
Essential cookies — required for the website to function, including maintaining your shopping cart and secure checkout. These cannot be disabled.
Analytics cookies — help us understand how visitors interact with our site (e.g. pages visited, time spent). This data is aggregated and de-identified where possible.
Marketing cookies — used to serve you relevant advertising based on your browsing behaviour. You may opt out of these via your browser settings or our cookie preferences.
We do not currently respond to "Do Not Track" browser signals, with the exception of the Global Privacy Control (GPC) signal — where supported and applicable, we will treat a GPC signal as a request to opt out of targeted advertising for that device and browser. Learn more at globalprivacycontrol.org.
We may use your personal information to send you marketing communications about our products, promotions and events. All direct marketing is conducted in accordance with APP 7 of the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).
We will only send electronic marketing communications (email and SMS) where you have provided consent, or where permitted under the Spam Act 2003 as an existing customer relationship.
Every marketing email we send includes a clear and functioning unsubscribe link. We will process all opt-out requests within 5 business days, as required by law.
If you opt out of marketing, we may still send you non-promotional communications necessary for your account or orders (e.g. order confirmations, shipping notifications).
You may also update your communication preferences at any time by contacting us at info@soapmaid.com.
Our Services are not directed to children under the age of 18 years. We do not knowingly collect personal information from minors. In Australia, the age of majority is 18 in all states and territories.
If you are the parent or legal guardian of a child who has provided us with personal information without your consent, please contact us using the details in Section 15 and we will take steps to delete that information promptly.
We do not knowingly collect, share or sell the personal information of individuals under 16 years of age for targeted advertising or commercial purposes.
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and from unauthorised access, modification or disclosure — as required by APP 11. These measures include encryption of payment data in transit, access controls, and secure hosting through Shopify's infrastructure.
Please be aware that no data transmission over the internet or electronic storage system is completely secure. While we take commercially reasonable steps to protect your information, we cannot guarantee absolute security and recommend avoiding unsecured channels when communicating sensitive information.
Data retention: We retain personal information only for as long as reasonably necessary for the purposes set out in this Policy, or as required by law. Factors affecting retention include: whether we need the information to maintain your account, to provide the Services, to comply with our legal obligations (e.g. tax records under the Tax Administration Act 1953 (Cth)), to resolve disputes or enforce contracts. When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it in accordance with APP 11.2.
Data breach notification: If we become aware of a data breach that is likely to result in serious harm to any individual, we will comply with our mandatory notification obligations under the Notifiable Data Breaches (NDB) scheme in Part IIIC of the Privacy Act 1988 (Cth) — notifying affected individuals and the OAIC as required.
Under the Australian Privacy Principles, you have the following rights in relation to your personal information. We will respond to all requests within a reasonable timeframe and at no charge (unless a request is manifestly unfounded or excessive):
Right to Access
Request access to the personal information we hold about you (APP 12).
Right to Correction
Request that we correct inaccurate, out-of-date or incomplete personal information (APP 13).
Right to Opt Out of Marketing
Opt out of direct marketing at any time using the unsubscribe link in our emails or by contacting us (APP 7.3).
Right to Opt Out of Targeted Advertising
Opt out of use of your data for targeted advertising where facilitated through Shopify or our marketing partners.
Right to Anonymity
Where lawful and practicable, interact with us anonymously or using a pseudonym (APP 2).
Right to Complain
Lodge a complaint with us or escalate to the OAIC if you believe we have breached the APPs (see Section 13).
To exercise any of these rights, contact us at info@soapmaid.com. We may need to verify your identity before processing your request. We will not discriminate against you for exercising any of these rights. To exercise rights related to Shopify's data processing, visit the Shopify Privacy Portal.
In the course of providing our Services, your personal information may be transferred to, stored in, or processed in countries other than Australia — including through Shopify's global infrastructure, which may operate servers in the United States, Canada and other jurisdictions.
We comply with APP 8 when transferring personal information overseas. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to your information. By using our Services, you consent to your personal information being transferred overseas in the circumstances described in this Policy.
Where we rely on Shopify to process your data internationally, Shopify has implemented appropriate safeguards including standard contractual clauses and certifications under recognised international data transfer frameworks. For details, see the Shopify Privacy Policy.
If you believe we have not handled your personal information in accordance with the Australian Privacy Principles or this Privacy Policy, we encourage you to contact us in the first instance so we can attempt to resolve the matter.
Please submit your privacy complaint in writing to info@soapmaid.com. We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days, in accordance with best practice guidance from the OAIC.
If you are not satisfied with our response, or we have not responded within 30 days, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
GPO Box 5218, Sydney NSW 2001
Victorian residents may also contact the Office of the Victorian Information Commissioner (OVIC) at ovic.vic.gov.au for matters relating to state government-held information, noting that the Privacy and Data Protection Act 2014 (Vic) primarily applies to Victorian public sector organisations.
We may update this Privacy Policy from time to time to reflect changes to our practices, or for operational, legal or regulatory reasons. We will post the revised Policy on this page and update the "Last updated" date at the top.
For material changes — particularly those that affect how we use or disclose your personal information — we will take additional steps to notify you, such as sending an email to the address associated with your account or displaying a notice on our website, where practicable.
Your continued use of our Services following any changes constitutes acceptance of the updated Policy.
For any questions about this Privacy Policy, to access or correct your personal information, or to exercise any of your rights under the Australian Privacy Principles, please contact us:
Soapmaid Australia Pty Ltd
10–12 Hosken Street, Springvale South VIC 3172, Australia
Email: info@soapmaid.com
Website: www.soapmaid.com
Soapmaid Australia Pty Ltd · 10–12 Hosken Street, Springvale South VIC 3172 · Last updated April 25, 2026