​

At Witching Hour Cosmetics, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, hold, and disclose your personal information when you visit our website, place an order, contact us, or otherwise interact with us.

For Australian operations, we handle personal information in accordance with the Privacy Act 1988 (Cth). If you operate in New Zealand, references should be updated to the Privacy Act 2020, not the repealed 1993 Act.

​

Personal Information We Collect

 

We may collect personal information such as:

• your name

• billing and shipping address

• email address

• phone number

• postcode

• payment and transaction details

• order history

• customer service enquiries

• marketing preferences

• any other information you provide to us directly

 

Personal information generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

​

How We Collect Your Information

 

We may collect personal information when you:

• place an order through our website

• contact us by email, social media, or contact form

• sign up to receive marketing emails or promotions

• enter a promotion, giveaway, or survey

• interact with our website through cookies, analytics, or similar technologies

We may also collect information automatically when you use our website, including your IP address, browser type, device information, and browsing activity.

 

Why We Collect Your Information

 

We collect, hold, use, and disclose your personal information for purposes including:

• processing and fulfilling your orders

• providing products and customer support

• communicating with you about your order or enquiry

• sending marketing communications where you have subscribed or consented

• improving our website, products, and customer experience

• maintaining business records, invoices, and transaction history

• fraud prevention, risk management, and security

• complying with legal and regulatory obligations

 

Under the Australian Privacy Principles, a privacy policy should explain the kinds of information collected, how it is collected and held, and the purposes for which it is collected, used, and disclosed.

 

Disclosure of Personal Information

 

We may disclose your personal information to trusted third parties where reasonably necessary to operate our business, including:

• payment processors

• shipping and delivery providers

• website hosting and ecommerce platform providers

• IT and system administration providers

• email marketing providers

• professional advisers and service providers

• regulators, law enforcement, or government agencies where required by law

 

We do not sell your personal information to third parties.

 

Overseas Disclosure

 

Some of our third-party service providers may store or process personal information outside Australia.

Where practicable, your privacy policy should identify the countries where overseas recipients are likely to be located. You should tailor this section to the actual providers you use.

Suggested website wording:

Your personal information may be disclosed to third-party service providers located outside Australia where those providers operate internationally. These may include countries such as [insert relevant countries used by your platform, payment, email, or hosting providers].

If you don’t know the countries yet, don’t just guess — check your actual providers first.

 

Cookies and Website Data

 

Our website may use cookies, pixels, analytics tools, and similar technologies to improve website functionality, analyse traffic, and support marketing activity.

These tools may collect information such as your IP address, device type, browser type, and pages visited on our website.

You can usually adjust your browser settings to refuse cookies, although this may affect how the website functions.

 

How We Hold and Protect Your Information

 

We may hold your personal information in electronic form, including in secure systems, databases, website platforms, and third-party hosted services.

We take reasonable steps to protect personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure. The OAIC says APP entities must take reasonable steps to protect information they hold.

 

Access and Correction

 

You may request access to the personal information we hold about you and request corrections if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading.

To request access or correction, please contact us using the details below.

A proper privacy policy should explain how people can access and correct their information.

 

Complaints

 

If you believe we have breached applicable privacy laws, you may contact us in writing using the details below.

Please include as much detail as possible about your complaint. We will review your complaint and respond within a reasonable timeframe.

Australian guidance says a privacy policy should also explain how a person can complain and how the complaint will be handled.

 

Contact Us

 

If you have any questions about this Privacy Policy, or would like to request access to or correction of your personal information, please contact us at:

​

Email: witchinghourcometics@gmail.com
Business name: Witching Hour Cosmetics
Website: www.witchinghourcosmetics.com