Privacy Policy

Last updated: 29/03/2026

At Earth & Flame, we respect your privacy. This policy explains what personal information we collect, how we collect it, how we use and disclose it, and how you can access or correct it or make a complaint. Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

We may collect personal information including:

• Identity and contact details: name, email address, phone number.
• Order and delivery details: billing address, shipping address, and order information.
• Payment information: payments are processed securely by third-party providers such as Shopify Payments, PayPal, and Stripe. We do not store full card details.
• Account and communications: order history, customer support messages, reviews, and other communications with us.
• Usage and analytics data: cookies, device information, IP address, browser type, pages viewed, and interactions with our website through Shopify and other analytics tools.
• Marketing preferences: your consent choices, including whether you have opted in to receive marketing emails or other communications.

2. How we collect it

We collect personal information:

• Directly from you when you place an order, submit a form, contact us, subscribe to marketing, or otherwise interact with us.
• Automatically through our website using cookies, analytics tools, and similar technologies.
• From third-party services and providers that help us operate our store, such as Shopify apps, payment gateways, shipping providers, and fulfilment partners.

3. Why we use your information

We may use your personal information to:

• Process, fulfil, and deliver your orders.
• Provide customer service and respond to enquiries.
• Verify payments, detect or prevent fraud, and manage risk.
• Comply with legal, accounting, and tax obligations.
• Improve our website, products, services, and customer experience.
• Send transactional or service-related communications, such as order confirmations, shipping updates, and support responses.
• Send marketing communications where you have opted in, where otherwise permitted by law, or where you can unsubscribe at any time.

If you do not provide certain personal information, we may not be able to process your order, deliver products, or respond to your enquiry.

4. Sharing and disclosure

We only share personal information with trusted service providers and third parties where reasonably necessary to operate our business, including:

• E-commerce and hosting: Shopify.
• Payment processing and fraud prevention: Shopify Payments, PayPal, Stripe.
• Shipping and fulfilment: Australia Post and relevant postal, courier, or delivery partners.
• Accounting and business records: Xero and related service providers.
• Analytics and marketing platforms: Google Analytics, Google Ads, Meta, and similar providers, where enabled.

These providers may handle personal information under their own privacy policies and terms. We do not sell your personal information.

We may also disclose personal information where required or authorised by law.

5. International transfers

Some of our service providers may store or process personal information outside Australia, including in countries such as Canada, the United States, and other countries in which their systems or service providers operate.

Where we disclose personal information overseas, we take reasonable steps to ensure that overseas recipients handle it in a manner consistent with applicable privacy requirements.

6. Cookies and analytics

We use cookies and similar technologies to operate our website, keep your cart active, remember preferences, understand how visitors use our site, and improve performance and marketing.

You can manage or disable cookies through your browser settings. Please note that some parts of our website may not function properly if cookies are disabled.

7. Data retention

We keep personal information only for as long as reasonably necessary for the purposes outlined in this policy, including to comply with legal, accounting, tax, reporting, and dispute resolution obligations.

We may retain order records and related personal information for up to 7 years, or longer where required or permitted by law.

We may retain marketing preference information until you unsubscribe or request deletion, unless we are required to retain it for legal or record-keeping purposes.

8. Your choices and rights

You may request to:

• Access the personal information we hold about you.
• Correct inaccurate, incomplete, or outdated personal information.
• Opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.
• Request deletion of your personal information where we are not required to retain it for legal, tax, accounting, or other lawful reasons.

To make a request, please contact us at info@earthandflame.com.au.

We may need to verify your identity before providing access to or correcting or deleting personal information.

9. Security

We take reasonable administrative, technical, and physical steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

We also use reputable third-party platforms and service providers to support our business operations. However, no online system or transmission of data can be guaranteed to be completely secure, and we cannot guarantee absolute security.

10. Children

Our website is not directed to children, and we do not knowingly collect personal information from children.

11. Complaints

If you have a concern or complaint about how we handle your personal information, please contact us at info@earthandflame.com.au with the details of your complaint.

We will consider your complaint and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au or by phone on 1300 363 992.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, and the updated version will take effect from the date it is posted.