How We Collect Personal Information

We may collect personal information from a number of sources, including:

Directly from you

We may collect information when you:

• Create an account;

• Place an order;

• Complete checkout;

• Subscribe to marketing communications;

• Contact us;

• Request a return or refund;

• Submit a review;

• Enter a promotion or competition;

• Complete a form; or

• Otherwise provide information to us.

Automatically through our Services

We may automatically collect information about your device and interaction with our website through cookies, pixels, analytics technologies and similar technologies.

From service providers

We may receive personal information from service providers that assist us with:

• Website hosting;

• Payment processing;

• Shipping and fulfilment;

• Customer support;

• Marketing;

• Analytics;

• Fraud prevention;

• Age verification; and

• Other business functions.

From third parties

We may receive information from other businesses or third parties where permitted by law, including payment providers, delivery providers, advertising platforms, business partners and other service providers.

Cookies and Similar Technologies

We may use cookies, pixels, tags, web beacons and similar technologies to operate and improve our website.

These technologies may help us:

• Remember items in your shopping cart;

• Remember account and website preferences;

• Understand how visitors use our website;

• Measure website performance;

• Analyse traffic;

• Improve our products and Services;

• Personalise your experience;

• Detect fraudulent or malicious activity; and

• Deliver or measure advertising where permitted.

You may be able to control or disable cookies through your browser settings.

Disabling certain cookies may affect the functionality of our website.

How We Use Personal Information

Depending on how you interact with us, we may use personal information for the following purposes.

Providing and improving our Services

We may use your personal information to:

• Process and fulfil orders;

• Process payments;

• Arrange shipping and delivery;

• Manage customer accounts;

• Process returns, refunds and exchanges;

• Provide customer support;

• Remember your preferences;

• Provide product recommendations;

• Improve our website;

• Improve our products and Services; and

• Provide a personalised shopping experience.

Marketing and advertising

Where permitted by law and, where required, with your consent, we may use personal information to send marketing communications, including:

• Email marketing;

• SMS marketing;

• Promotional offers;

• Product announcements;

• Special offers;

• Advertising; and

• Other promotional communications.

You can unsubscribe from marketing communications at any time using the unsubscribe or opt-out mechanism provided.

We will handle direct marketing in accordance with applicable Australian law, including the Australian Privacy Principles and applicable spam laws. The OAIC notes that APP 7 regulates the use and disclosure of personal information for direct marketing.

Security and fraud prevention

We may use personal information to:

• Verify transactions;

• Authenticate accounts;

• Detect and prevent fraud;

• Detect suspicious or unlawful activity;

• Protect our website and systems;

• Protect customers and other users;

• Investigate security incidents; and

• Maintain the security of our Services.

Communicating with you

We may use your personal information to:

• Respond to enquiries;

• Provide customer support;

• Send order confirmations;

• Send delivery notifications;

• Respond to returns and refund requests;

• Notify you about changes to our Services; and

• Maintain our business relationship with you.

Legal and regulatory purposes

We may collect, use or disclose personal information where reasonably necessary to:

• Comply with applicable laws;

• Respond to lawful requests from government agencies or law enforcement;

• Respond to court orders or other legal processes;

• Resolve disputes;

• Establish, exercise or defend legal claims;

• Investigate suspected unlawful activity; or

• Enforce our Terms & Conditions and other policies.

How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy and where permitted or required by law.

These third parties may include:

Service providers

We may disclose information to businesses that provide services to us, including:

• Website and ecommerce providers;

• Payment processors;

• Shipping and delivery providers;

• Warehousing and fulfilment providers;

• IT and technology providers;

• Cloud storage providers;

• Analytics providers;

• Customer service providers;

• Marketing and advertising providers;

• Fraud prevention providers; and

• Professional advisers.

Marketing and advertising partners

Where permitted by law, we may provide certain information to marketing and advertising providers so that they can assist us with advertising, analytics and promotional activities.

Where required, you may have the ability to opt out of certain forms of targeted advertising or marketing.

When you request disclosure

We may disclose information when you ask us to or otherwise consent to the disclosure, such as when information is required to arrange delivery or when you choose to use a third-party service through our website.

Related companies

We may disclose personal information to related companies or entities within our corporate group where reasonably necessary for business operations and permitted by law.

Business transactions

If Goat Group 999 Pty Ltd or Smoke Warehouse is involved in a proposed or actual:

• Sale;

• Merger;

• Acquisition;

• Restructuring;

• Financing;

• Reorganisation; or

• Sale of some or all business assets,

personal information may be disclosed to relevant parties where permitted by law.

Legal requirements

We may disclose personal information where required or authorised by law, court order or other lawful process.

Ecommerce Platform and Service Providers

Our website may use third-party ecommerce, hosting, payment, analytics, marketing, shipping and other technology providers.

For example, if our store is operated using Shopify, Shopify may collect and process information relating to your access to and use of our Services.

Your information may therefore be processed by Shopify and other service providers in accordance with their respective privacy policies.

You can review Shopify's privacy information through its official privacy resources:

Shopify Privacy Policy

We may also use other third-party platforms from time to time. Where those providers process personal information on our behalf, we take reasonable steps to select and manage service providers appropriately.

Third-Party Websites and Links

Our Services may contain links to websites, applications or online platforms operated by third parties.

If you follow a link to a website that is not operated or controlled by Smoke Warehouse, you should review that third party's privacy policy and terms.

We are not responsible for the privacy or security practices of third-party websites.

The inclusion of a third-party link does not necessarily mean that we endorse the website, business or service.

Information you provide directly to a third-party website is subject to that third party's privacy practices.

Children's Privacy

Our Services are not intended for children who are not legally permitted to purchase or use the products offered through our website.

We do not knowingly collect personal information from children where collection would be unlawful.

Where a parent or guardian believes that a child has provided personal information to us in circumstances where we should not have collected it, they may contact us using the contact details below.

We may take reasonable steps to verify the request and, where appropriate and legally permitted, delete the relevant information.

Security of Personal Information

We take reasonable steps to protect personal information that we hold from:

• Misuse;

• Interference;

• Loss;

• Unauthorised access;

• Unauthorised modification; and

• Unauthorised disclosure.

Security measures may include technical, administrative and organisational safeguards appropriate to the nature of the information and the risks involved.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

You should avoid sending sensitive information through unsecured communication channels.

The Australian Privacy Principles require APP entities to take reasonable steps to protect personal information from misuse, interference and loss and from unauthorised access, modification or disclosure.

Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• Provide our Services;

• Maintain customer accounts;

• Process transactions;

• Meet accounting and tax obligations;

• Meet legal and regulatory obligations;

• Resolve disputes;

• Prevent fraud;

• Enforce agreements; and

• Protect our legal rights.

When personal information is no longer required and we are not legally required to retain it, we may take reasonable steps to destroy or de-identify it.