Privacy Policy

Privacy Policy

Hush Nights | Legal seller: Byron Daniele (sole trader) | ABN: 36 170 886 621 | NSW 2157, Australia | infoshoporra@gmail.com | shoporra.co

This Privacy Policy explains how Hush Nights (operated by Byron Daniele, sole trader, ABN 36 170 886 621) collects, uses, stores, and discloses your personal information. It is written in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you are located outside Australia — including in the European Union or United Kingdom — we also endeavour to meet equivalent standards under applicable international privacy frameworks, including the General Data Protection Regulation (GDPR).

By visiting shoporra.co or placing an order with Hush Nights, you acknowledge that you have read and understood this policy.

1. What Personal Information We Collect

We collect only the personal information necessary to fulfil your order and improve your experience. This may include:

  • Identity and contact details: your name, email address, phone number, and billing/shipping address.
  • Payment information: processed securely through Shopify Payments or third-party payment providers. We do not store full card details on our own systems.
  • Order and transaction data: products purchased, order history, GST-inclusive pricing confirmed at checkout, and communications relating to our 60-night money-back guarantee.
  • Device and browsing data: IP address, browser type, pages visited, referring URLs, and session duration — collected automatically via cookies and analytics tools.
  • Communications: any messages you send to us via email or support channels.

We do not intentionally collect sensitive information (such as health information) as defined under the Privacy Act. If you voluntarily share health-related context in a support enquiry, that information is used only to respond to you and is not retained beyond that purpose.

2. Why We Collect Your Information

We collect and use your personal information for the following purposes:

  • Processing and fulfilling your order, including dispatching within 24 hours with free Australian shipping.
  • Communicating with you about your order, returns, or our 60-night money-back guarantee.
  • Sending transactional emails (order confirmation, shipping updates) via our email service provider, Resend.
  • Sending marketing communications, where you have opted in — you may unsubscribe at any time.
  • Improving our website, product offering, and customer experience through aggregate analytics.
  • Complying with our legal obligations under Australian Consumer Law, including GST record-keeping requirements.
  • Detecting and preventing fraud or unauthorised transactions.

3. How We Store Your Information

Your data is stored on servers operated by our platform provider, Shopify Inc., which may be located outside Australia (including in the United States and Canada). Shopify maintains industry-standard security certifications including PCI DSS compliance for payment data. We retain order-related personal information for a minimum of five (5) years to comply with Australian tax and consumer law obligations, unless you request earlier deletion and no legal retention requirement prevents it.

4. Who We Share Your Information With

We do not sell your personal information. We share it only with trusted third-party service providers necessary to operate our store:

  • Shopify Inc.: our e-commerce platform, which hosts our store, processes checkout, and stores order data. Shopify's privacy policy is available at shopify.com/legal/privacy.
  • Meta Platforms (Facebook / Instagram): we use Meta Pixel to measure the effectiveness of advertising campaigns. Meta may receive anonymised or hashed event data such as page views and purchase events. You can manage your Meta ad preferences at facebook.com/adpreferences.
  • Google LLC: we use Google Analytics and/or Google Ads conversion tracking to understand traffic sources and ad performance. Data is processed in accordance with Google's privacy policy at policies.google.com/privacy.
  • Resend: our transactional email provider, used to deliver order confirmations and shipping notifications. Resend processes your email address and name for this purpose only.
  • Shipping carriers: your name and delivery address are shared with Australia Post or equivalent carriers solely for the purpose of fulfilling your delivery.

All third-party providers are required to handle your data in accordance with applicable privacy laws and are prohibited from using it for their own independent purposes beyond the services they provide to us.

5. Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — for the following purposes:

  • Essential cookies: required for the store to function, including maintaining your shopping cart and processing checkout.
  • Analytics cookies: used by Google Analytics to collect aggregate, anonymised data about how visitors interact with our site.
  • Advertising cookies: used by Meta Pixel and Google Ads to measure campaign performance and, where permitted, to serve relevant advertisements.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect your ability to complete a purchase. For EU/UK visitors, we seek your consent before placing non-essential cookies, consistent with applicable ePrivacy requirements.

6. Your Rights

Under the Australian Privacy Principles — and, where applicable, the GDPR — you have the following rights regarding your personal information:

  • Access: you may request a copy of the personal information we hold about you.
  • Correction: you may request that inaccurate or out-of-date information be corrected.
  • Deletion: you may request that we delete your personal information, subject to any legal retention obligations (for example, tax records).
  • Opt-out of marketing: you may unsubscribe from marketing emails at any time using the unsubscribe link included in every email, or by contacting us directly.
  • Data portability (GDPR): if you are located in the EU or UK, you may request your data in a commonly used, machine-readable format.
  • Objection and restriction: you may object to or request restriction of certain types of processing where permitted by law.

To exercise any of these rights, please contact us at infoshoporra@gmail.com. We will respond within 30 days.

7. Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. These measures include SSL/TLS encryption on our website, reliance on Shopify's PCI DSS-compliant payment infrastructure, and limiting access to your data to those who need it to fulfil your order. No method of internet transmission is completely secure, and we cannot guarantee absolute security; however, we will notify you in the event of a data breach that is likely to result in serious harm, as required under the Notifiable Data Breaches scheme (Privacy Act 1988, Part IIIC).

8. Complaints

If you believe we have mishandled your personal information, please contact us first at infoshoporra@gmail.com so we can attempt to resolve your concern. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5218, Sydney NSW 2001

EU or UK residents who are not satisfied with our response may also contact their local supervisory authority.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available at shoporra.co. We encourage you to review it periodically. Continued use of our website following any update constitutes acceptance of the revised policy.

10. Contact Us

For any privacy-related questions, access requests, or concerns, please contact:

Last updated: June 2025