Privacy Policy

1. Who we are

The Healthcare Mask Shop is an Australian online store based in Hastings, Victoria. The business is owned and operated by Matt Gaylard and operates alongside eFillShip, an Australian eCommerce fulfilment business.

If you have any questions about this Privacy Policy or the way we handle personal information, you can contact us through our Contact Us page.

2. Personal information we may collect

Depending on how you interact with our website, we may collect personal information including:

• your name;
• email address;
• telephone number;
• billing and delivery address;
• company or business name, where provided;
• account login information;
• details of products ordered;
• order, payment and delivery information;
• tracking information;
• messages, enquiries and other information you send to us;
• technical information such as browser type, device information and IP address; and
• website usage information collected through analytics, cookies or similar technologies.

We generally do not need to collect sensitive information such as health information. Please avoid including unnecessary sensitive information in contact forms, order notes or other communications with us.

3. How we collect personal information

We usually collect personal information directly from you when you:

• create or update an account;
• place an order;
• enter delivery or billing information;
• contact us;
• request assistance with an order or product; or
• otherwise provide information through our website.

We may also receive information from service providers involved in processing payments, fulfilling orders, providing delivery services or operating our website.

4. Why we collect and use personal information

We collect and use personal information where reasonably necessary to operate The Healthcare Mask Shop, including to:

• process and fulfil orders;
• arrange shipping and provide tracking information;
• process or confirm payments;
• create and manage customer accounts;
• respond to enquiries and provide customer support;
• communicate with customers about orders;
• maintain business and transaction records;
• improve our website, products and customer experience;
• detect or prevent fraud, misuse or security incidents; and
• meet legal, accounting and regulatory obligations.

5. Payments

Payments may be processed using third-party payment providers such as Stripe and PayPal.

We do not intend to store complete payment card details on The Healthcare Mask Shop website. Payment information is handled by the relevant payment provider in accordance with its own privacy and security practices.

6. Shipping and fulfilment

To fulfil and deliver orders, relevant personal information may be provided to service providers involved in warehousing, shipping and delivery.

This may include information such as your name, delivery address, telephone number, email address, order number and shipment details.

Shipping and tracking services may include Starshipit, Australia Post and other courier or logistics providers used to deliver an order.

7. Email communications

We may use your email address to send information relating to transactions or enquiries, including order confirmations, receipts, fulfilment information and responses to messages you send us.

If we introduce optional marketing communications in the future, those communications will be managed separately and customers will be given an appropriate way to unsubscribe.

8. Website analytics and cookies

Our website may use cookies and analytics services to understand how the website is used, improve performance and identify technical issues.

For example, we may use Google Analytics to collect aggregated information about website visits, pages viewed, device types and general usage patterns.

Some cookies are also necessary for normal website functions such as customer sessions, account access and shopping cart operation.

9. How we store and protect information

Personal information may be stored electronically in systems used to operate our website, customer accounts, order processing, email, fulfilment and business administration.

We take reasonable steps to protect personal information against misuse, interference, loss, unauthorised access, modification or disclosure.

No website or electronic storage system can be guaranteed to be completely secure, so customers should also take reasonable steps to protect their account credentials.

10. Sharing personal information

We do not sell customer personal information.

We may disclose personal information to third parties where reasonably necessary to operate the business, including:

• payment processors;
• couriers and delivery providers;
• shipping and fulfilment platforms;
• website hosting and technology providers;
• email and communication providers;
• professional advisers such as accountants or legal advisers; and
• government agencies or other parties where required or authorised by law.

11. Overseas service providers

Some service providers we use may process or store information outside Australia, including providers of website hosting, analytics, payment, email or technology services.

Because the locations used by these providers may change, it may not always be practical for us to identify every country in which information may be processed or stored.

12. Accessing or correcting your personal information

If you would like to request access to personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete or misleading, please contact us.

Customers with an account may also be able to view or update some account information directly through the website.

13. Retention of information

We retain personal information for as long as reasonably required for the purposes for which it was collected, including fulfilling orders, providing customer support, maintaining business records and complying with legal, taxation or accounting obligations.

Information that is no longer reasonably required may be deleted, de-identified or securely disposed of where appropriate.

14. Privacy complaints

If you believe your personal information has been handled incorrectly or you have a privacy concern, please contact us through our Contact Us page.

Please provide enough information for us to understand the issue. We will review the matter and respond within a reasonable period.

You may also have the right to contact the Office of the Australian Information Commissioner regarding privacy concerns.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, business practices or legal obligations.

The current version will be published on this page together with the date it was last updated.