Privacy Policy

Updated October 2026

Your privacy matters to us. This policy explains what personal information we collect, why, how we keep it safe, and how you can access it or make a complaint. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. Who we are

This website, www.acaciaaromatherapy.com.au, is run by Cara Team Pty Ltd (ABN 60 611 177 872), trading as Acacia Aromatherapy (“we”, “us”, “our”).

2. What we collect

We only collect what we need. This may include:

Contact details: your name, email address, phone number, and billing and delivery addresses
Order details: what you buy, gift choices, gift messages, delivery notes and order history
Account details: your login email and password (stored in encrypted form), if you create an account
Payment details: we do not see or store your full card number. Payments are handled by our payment providers.
Messages: emails and enquiries you send us
Website use: information such as your browser type, device, pages viewed and how you found our website, collected through cookies and similar tools, such as Google Analytics and Meta (Facebook and Instagram)

3. How we collect it

We collect information when you place an order, create an account, sign up for our emails, contact us, or use our website. You can browse our website without telling us who you are. To place an order, we need your contact and delivery details.

4. Why we use it

We use your information to:

process, pack and deliver your order, and send order and delivery updates
take payment and prevent fraud
answer your questions and handle returns
manage your account
send you news and offers, if you have agreed (you can unsubscribe at any time)
keep our records, including for tax and accounting
improve our website, products and service

We do not sell your personal information.

5. Who we share it with

We share only what each provider needs to do its job, such as:

payment providers: Stripe, Afterpay and PayPal
delivery companies: Australia Post and DHL Express
our email newsletter service: Brevo
our website hosting, IT and business software providers (for example email, accounting and file storage)
software and AI tools we use for internal admin, such as bookkeeping and sorting emails
our professional advisers, such as our accountant
government or law enforcement, if the law requires it

6. Overseas providers

Some of these providers store or process information outside Australia, for example in the United States, Europe and Asia. We take reasonable steps to choose providers that protect personal information to a standard similar to Australian law.

7. Marketing emails

We only send news and offers if you have agreed, for example by subscribing or ticking a box. Every email has an unsubscribe link. You can also email us to stop.

8. Cookies

Our website uses cookies to keep your cart and login working, to understand how visitors use our site (Google Analytics), and to show you relevant ads on other websites and social media (Google and Meta, which runs Facebook and Instagram). You can opt out of personalised ads in your Google and Meta account settings. You can block or delete cookies in your browser settings. Some parts of the website, such as the cart, may not work without them.

9. Keeping your information safe

We take reasonable steps to protect your information from misuse, loss and unauthorised access. These include secure (encrypted) website connections, payment providers that meet card security standards, password protection and limited staff access. We keep information only as long as we need it, including for tax and legal records, and then delete it or remove the personal details.

If a data breach is likely to cause serious harm, we will tell the people affected and, where required, the Office of the Australian Information Commissioner.

10. Access and correction

You can ask to see the personal information we hold about you, or ask us to correct it. Please email us. We will reply within 30 days. We may need to confirm your identity first. There is no fee.