Privacy Policy

Overview

GhamaHealth operates this website and online store, including related information, content, features, tools, products and services. The website is powered by Shopify, which helps us provide the online store and related services.

This Privacy Policy explains how GhamaHealth collects, uses, discloses, stores and protects personal information when you visit the website, use our services, make a purchase, create an account, subscribe to email or SMS communications, contact us, or otherwise interact with GhamaHealth.

If there is a conflict between our Terms & Conditions and this Privacy Policy in relation to the collection, use, disclosure or handling of personal information, this Privacy Policy will apply to that privacy-related matter.

Personal information we collect

Personal information means information or an opinion that identifies you, or can reasonably identify you. Depending on how you interact with GhamaHealth, we may collect or process the following types of information:

• Contact details: name, billing address, shipping address, phone number and email address.
• Order and transaction details: products viewed, added to cart, purchased, returned, exchanged or cancelled, as well as payment confirmation and transaction records.
• Account information: account login details, preferences, saved addresses and account settings.
• Communication information: messages, customer support enquiries, email replies, SMS replies and communication preferences.
• Marketing information: email subscription status, SMS consent status, opt-in source, opt-out requests, message delivery status and related engagement information.
• Device and usage information: IP address, browser, device, network connection, pages viewed, interactions with the website and similar technical information.
• Fraud prevention and security information: information used to detect, prevent or investigate suspicious, fraudulent, unsafe or unauthorised activity.

Personal information sources

GhamaHealth may collect personal information from:

• You directly: when you place an order, create an account, contact us, subscribe to marketing, submit forms or otherwise provide information.
• The website automatically: through cookies, pixels, analytics tools, device information, browser data and similar technologies.
• Service providers: including Shopify, payment processors, fulfilment providers, delivery partners, analytics providers, marketing platforms, SMS providers and customer support tools.
• Third parties: where permitted by law, including fraud prevention services, advertising platforms, social platforms, business partners or other providers connected to the services we use.

How we use personal information

GhamaHealth may use personal information for purposes including:

• Providing the website and services: operating the store, processing payments, managing accounts, fulfilling orders, arranging shipping, handling returns and supporting customer requests.
• Customer support: responding to enquiries, managing order issues, verifying details and maintaining customer relationships.
• Marketing and communications: sending selected offers, store updates, wellness content, product updates, abandoned checkout reminders where applicable, and other communications you have consented to receive or that are otherwise permitted by law.
• Personalisation and improvement: understanding website activity, improving page layouts, product information, navigation, marketing relevance and customer experience.
• Security and fraud prevention: protecting accounts, detecting suspicious activity, preventing misuse, maintaining transaction security and responding to potential unlawful or unsafe activity.
• Legal and operational purposes: complying with applicable laws, responding to lawful requests, enforcing policies, maintaining records and protecting the rights of GhamaHealth, customers and others.

Email and SMS marketing

If you subscribe to GhamaHealth email or SMS marketing, we may use your contact details and communication preferences to send selected offers, product updates, wellness content, abandoned checkout reminders where applicable, customer account reminders and store updates.

Consent to receive marketing communications is not a condition of purchase. Message and data rates may apply for SMS messages. Message frequency may vary.

• You may unsubscribe from marketing emails using the unsubscribe link included in the email.
• You may opt out of SMS marketing by replying STOP, where supported by the SMS provider.
• For SMS assistance, reply HELP where supported, or contact GhamaHealth using the details on this website.
• We may retain consent and unsubscribe records to help comply with communication and privacy obligations.

How we disclose personal information

GhamaHealth may disclose personal information to third parties for legitimate business, service, legal or operational purposes, including:

• Shopify and store service providers: to operate the online store, checkout, customer accounts, payments and related services.
• Payment, fulfilment and delivery providers: to process payments, prepare orders, arrange delivery and manage order-related issues.
• Technology and support providers: including hosting, analytics, customer support, security, data storage and website functionality providers.
• Email and SMS marketing providers: to send communications you have consented to receive, manage preferences, process unsubscribe requests and maintain consent records.
• Advertising and analytics partners: to understand website activity, measure campaign performance and provide relevant advertising where permitted by law.
• Legal, regulatory or safety purposes: where required or permitted by law, including responding to lawful requests, protecting rights, preventing fraud or addressing suspected unlawful activity.
• Business transactions: in connection with a sale, merger, restructuring, financing, transfer of assets or similar business event.

Relationship with Shopify

The GhamaHealth online store is powered by Shopify. Shopify may collect and process personal information about your access to and use of the store to provide, support and improve the e-commerce services used by GhamaHealth.

Information submitted through the store may be transmitted to, stored by, or processed by Shopify and related service providers, including in countries outside Australia.

Shopify may also process information from your interactions with GhamaHealth and other Shopify merchants to provide features, security, fraud prevention, analytics and other services. Shopify may be responsible for certain processing activities and for responding to some privacy rights requests related to that processing.

Learn more through the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Australian privacy context

GhamaHealth operates in Australia and handles personal information with reference to applicable Australian privacy requirements, including the Australian Privacy Principles where they apply.

The Australian Privacy Principles set standards for the collection, use, disclosure, storage, access and correction of personal information. GhamaHealth aims to handle personal information in a fair, transparent and responsible way.

Nothing in this Privacy Policy is intended to limit any rights you may have under applicable Australian privacy laws or the Australian Consumer Law.

Third-party websites and links

The website may link to third-party websites, platforms, social pages, payment tools, embedded content or other external services. If you follow those links, you should review their privacy and security practices.

GhamaHealth is not responsible for the privacy, security, accuracy, completeness or reliability of third-party websites or services. Inclusion of a link does not imply endorsement unless expressly stated.

Children’s data

The GhamaHealth website and services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you are a parent or guardian and believe a child has provided personal information to GhamaHealth, please contact us so we can review the matter and delete the information where appropriate.

Security and retention

GhamaHealth takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. However, no security measure is perfect or impenetrable, and information transmitted online may carry risk.

We retain personal information for as long as reasonably needed to provide services, maintain accounts, fulfil orders, manage customer support, comply with legal obligations, resolve disputes, enforce policies, maintain business records, prevent fraud and retain marketing consent or unsubscribe records.

Your rights and choices

Depending on where you live and which laws apply, you may have rights or choices in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.

• Access: request access to personal information we hold about you.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of personal information where applicable.
• Portability: request a copy of personal information in a portable format where applicable.
• Marketing preferences: unsubscribe from promotional emails using the unsubscribe link, or opt out of SMS marketing by replying STOP where supported.
• Targeted advertising choices: where applicable, you may opt out of certain data sharing or targeted advertising activities through our data sharing opt-out page.

To exercise a privacy right or ask a privacy question, contact GhamaHealth using the details below. We may need to verify your identity before responding to a request.

Complaints

If you have a concern or complaint about how GhamaHealth handles your personal information, please contact us using the details below. We will review your complaint and respond within a reasonable timeframe.

When contacting us, please include your name, contact details, a description of the issue, any relevant order or account information, and the outcome you are seeking.

If you are located in Australia and are not satisfied with our response, you may be able to lodge a privacy complaint with the Office of the Australian Information Commissioner. The OAIC generally expects individuals to contact the organisation first before lodging a complaint.

If you are located outside Australia, you may also have the right to contact your local privacy or data protection authority, depending on where you live.

International transfers

GhamaHealth may transfer, store and process personal information outside the country where you live, including through Shopify and other third-party service providers.

If personal information is transferred outside Australia, the EEA or the UK, protections may vary depending on the receiving country and provider. Where required, we aim to use appropriate safeguards or recognised transfer mechanisms.

Changes to this Privacy Policy

GhamaHealth may update this Privacy Policy from time to time to reflect changes to our practices, website features, services, legal requirements or operational needs.

We will post the updated Privacy Policy on this website, update the review date, and provide notice where required by applicable law.

Contact

If you have questions about this Privacy Policy, privacy practices, marketing preferences or privacy rights, please contact GhamaHealth.