Privacy and Data Security Policy

Ecofiltro Australia
Last updated: 11 November 2026

1. Introduction

Ecofiltro Australia (referred to as “Ecofiltro Australia”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information of customers and visitors to our online store.

This Privacy and Data Security Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, purchase our products, contact us, subscribe to our communications or otherwise interact with us.

This policy applies to our online store operated through Shopify, our customer communications and any related services through which we collect personal information.

We handle personal information in accordance with applicable privacy and data protection laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable.

By using our website, you acknowledge that you have had the opportunity to read this policy. Where consent is legally required for a particular activity, we will seek that consent separately. Visiting our website does not, by itself, constitute consent to every form of data collection or marketing.

2. Personal information we collect

The types of personal information we collect depend on how you interact with our website and services.

2.1 Information you provide directly

We may collect personal information that you provide to us, including:

  • Name;

  • Billing and delivery addresses;

  • Email address and telephone number;

  • Order details, purchase history and transaction records;

  • Information you provide when contacting customer support or making a complaint;

  • Information you provide in connection with a return, refund, product fault or warranty claim;

  • Responses to surveys, reviews, competitions or promotional activities; and

  • Marketing preferences and consent records.

You are not generally required to provide personal information merely to browse our website. However, certain information may be necessary to process an order, deliver products, respond to an enquiry or provide a requested service.

2.2 Payment information

Payments made through our online store are processed through Shopify Payments or other payment providers made available at checkout.

We may receive payment-related information, such as payment status, transaction references and limited payment details necessary to administer an order. Full payment card details are generally processed by the relevant payment provider rather than stored directly by us.

Payment processing is subject to the terms and privacy policies of the applicable payment provider.

2.3 Information collected automatically

When you visit our website, we and our service providers may collect technical and usage information, including:

  • IP address and approximate location derived from it;

  • Browser type, device type and operating system;

  • Pages visited, products viewed and links clicked;

  • Referring websites and browsing activity;

  • Date, time and duration of visits;

  • Cookie identifiers and similar tracking technologies; and

  • Information relating to website performance, security and suspected fraudulent activity.

This information may be collected through Shopify, cookies, analytics services, advertising technologies and other tools enabled on our store.

2.4 Information from third parties

We may receive information from third parties involved in providing our services, including Shopify, payment providers, delivery and fulfilment providers, analytics services, advertising platforms and customer communication tools.

Where permitted by law, we may also receive information used to prevent fraud, verify transactions, administer deliveries or resolve customer service issues.

3. How we use personal information

We collect and use personal information for legitimate business purposes, including to:

  • Process, confirm, fulfil and deliver orders;

  • Accept payments and administer refunds;

  • Communicate with you about purchases, delivery updates and customer service enquiries;

  • Manage returns, warranty claims, product faults and complaints;

  • Maintain customer accounts, where available;

  • Provide product information and respond to requests;

  • Send marketing communications where permitted by law;

  • Personalise website content and improve the shopping experience;

  • Analyse website traffic, sales and customer interactions;

  • Administer promotions, surveys and customer reviews;

  • Detect and prevent fraud, security incidents and unauthorised transactions;

  • Maintain business, financial, tax and accounting records;

  • Comply with legal obligations and respond to lawful requests; and

  • Establish, exercise or defend legal claims.

We will not use personal information for a materially different purpose unless permitted or required by law, or where any necessary consent has been obtained.

4. Marketing communications

If you subscribe to our mailing list, participate in a promotion or otherwise consent to receive marketing communications, we may send you information about Ecofiltro products, new releases, promotions, sustainability initiatives and other relevant updates.

We will send commercial electronic messages in accordance with applicable laws, including the Spam Act 2003 (Cth).

You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us directly.

Unsubscribing from marketing communications will not prevent us from sending non-marketing messages necessary to administer your order, respond to your enquiry or meet our legal obligations.

Where required, we will obtain consent before sending marketing communications. We will not treat a purchase or a website visit alone as automatic consent to receive all future marketing.

5. Cookies and similar technologies

Our website may use cookies, pixels, tags and similar technologies to operate the store and understand how visitors use it.

These technologies may be used to:

  • Enable shopping cart and checkout functions;

  • Remember certain preferences;

  • Maintain website security and prevent fraud;

  • Measure website traffic and performance;

  • Understand how customers interact with products and pages;

  • Measure the effectiveness of marketing campaigns; and

  • Support advertising and personalised content, where enabled.

Some cookies are necessary for the website to function. Other cookies and tracking technologies may depend on your privacy preferences, consent or applicable legal requirements.

You can manage cookies through your browser settings and, where available, through the privacy or cookie controls displayed on our website. Disabling certain cookies may affect website functionality.

Our Shopify store may use Shopify's customer privacy tools to display cookie notices or provide privacy choices, depending on the store settings and the locations of our visitors.

For more information about Shopify's handling of personal information, please refer to Shopify's privacy information at https://www.shopify.com/legal/privacy.

6. How we disclose personal information

We may disclose personal information to third parties where reasonably necessary for the purposes described in this policy.

These third parties may include:

6.1 Shopify

Our online store is hosted on Shopify. Shopify provides ecommerce infrastructure and related services, which may involve processing personal information to operate the store, facilitate transactions, support checkout, maintain security and provide associated functionality.

Shopify's handling of personal information is also governed by its own policies and contractual terms.

6.2 Payment providers

Payment providers may process payment details, authenticate transactions, assess fraud risks and facilitate payments and refunds.

6.3 Delivery, warehousing and fulfilment providers

We may disclose relevant customer information, such as names, delivery addresses, contact details and order information, to courier companies, freight providers, warehouses and fulfilment partners to deliver orders and manage logistics.

6.4 Business and technology service providers

We may use third-party providers for services such as:

  • Website analytics and performance monitoring;

  • Email and customer communication;

  • Marketing and advertising;

  • Customer relationship management;

  • IT hosting, storage and security;

  • Accounting and payment reconciliation; and

  • Legal, professional and compliance services.

These providers may access personal information only as necessary for their relevant services, subject to applicable law and contractual arrangements.

6.5 Legal, regulatory and business disclosures

We may disclose personal information where required or authorised by law, to government authorities or regulators, to protect our legal rights, to investigate suspected unlawful activity or in connection with a proposed business sale, restructuring or transfer.

We do not disclose personal information to third parties for their independent purposes unless permitted by law or otherwise authorised by you.

7. Overseas disclosure and data storage

Some of our service providers, including Shopify and other technology providers, may store, access or process personal information outside Australia.

Depending on the services and configurations used, information may be processed in countries where those providers or their affiliates operate.

Where the Australian Privacy Act and Australian Privacy Principles apply, we will take the steps required by applicable law in relation to overseas disclosures, including any applicable obligations concerning the handling of personal information by overseas recipients.

The privacy and data protection laws of other countries may differ from Australian law.

If you have concerns about a particular service provider or the location in which information is processed, you may contact us using the details in Section 14.

8. Data security

We take reasonable steps appropriate to the nature of the information we hold to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

Depending on the systems and services used, these measures may include:

  • Using Shopify's hosted ecommerce and checkout infrastructure;

  • Restricting access to customer information to authorised persons who need it for business purposes;

  • Using strong passwords and multi-factor authentication where available;

  • Maintaining appropriate account permissions and access controls;

  • Using reputable payment providers;

  • Keeping software, devices and accounts appropriately secured;

  • Reviewing third-party applications and integrations used by our store;

  • Taking reasonable steps to protect information transmitted through our website;

  • Maintaining appropriate backups and business records where necessary; and

  • Taking steps to identify, investigate and respond to suspected security incidents.

We seek to minimise the personal information we collect and retain it only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal, tax, accounting and recordkeeping obligations.

No method of electronic transmission, storage or processing is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

Customers should also take reasonable precautions when using our website, including keeping their devices secure and not sharing account credentials.

9. Data breaches and security incidents

If we become aware of a suspected or actual data breach, we will assess and respond to it in a manner appropriate to the circumstances.

Our response may include:

  • Investigating the incident and containing the breach;

  • Taking steps to prevent further unauthorised access or disclosure;

  • Assessing the nature and extent of the information affected;

  • Engaging relevant service providers or technical specialists;

  • Taking remedial action to reduce the risk of harm; and

  • Notifying affected individuals and relevant authorities where required by applicable law.

Where we are subject to the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), we will comply with applicable assessment and notification obligations for eligible data breaches.

10. Access, correction and privacy requests

Subject to applicable law, you may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

You may also contact us to:

  • Update your contact details;

  • Correct an order or account detail where possible;

  • Withdraw consent for activities that rely on consent;

  • Unsubscribe from marketing communications; or

  • Ask questions about how we handle your personal information.

We may need to verify your identity before processing a request to protect your information from unauthorised access or disclosure.

In some circumstances, we may be permitted or required by law to refuse or limit a request. If that occurs, we will explain our decision where required or appropriate.

Where the Australian Privacy Principles apply, we will handle access and correction requests in accordance with the applicable requirements.

11. Retention and deletion

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

  • Fulfil orders and provide customer support;

  • Maintain transaction, tax and accounting records;

  • Administer warranties, complaints and disputes;

  • Meet legal and regulatory obligations;

  • Prevent fraud and maintain security; and

  • Establish, exercise or defend legal claims.

When personal information is no longer needed, we will take reasonable steps to delete it or de-identify it, subject to applicable legal requirements and legitimate recordkeeping needs.

Deleting information from one system may not immediately remove it from backups, archived records or systems operated by third-party service providers.

12. Third-party websites and applications

Our website may contain links to third-party websites, social media platforms, payment services or other applications.

If you follow a third-party link or use an external service, your information may be collected and handled under that third party's privacy policy and terms.

We do not control the privacy or security practices of third-party websites and are not responsible for their independent handling of personal information.

We encourage you to review the privacy policies of relevant third parties before providing them with personal information.

13. Children's privacy

Our online store is intended for use by adults and is not specifically directed at children.

We do not knowingly collect personal information directly from children in circumstances where doing so would be unlawful. If you believe a child has provided personal information to us inappropriately, please contact us so we can assess the matter and take appropriate action.

14. Contact us and privacy complaints

If you have a question, request or complaint about this policy or our handling of personal information, please contact us.

Ecofiltro Australia
Phone: 0436 474995 
Email: info@ecofiltro.com.au
Website: www.ecofiltro.com.au

Please describe your concern and provide sufficient information for us to identify the relevant interaction or records.

We will review privacy complaints and take reasonable steps to respond within a reasonable time.

If the Privacy Act 1988 (Cth) applies to our handling of your information and you are dissatisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC). Information is available at https://www.oaic.gov.au/.

15. Changes to this policy

We may update this policy from time to time to reflect changes to our business, website, service providers, technologies or legal obligations.

The latest version will be published on our website with its updated date. Where required by law, we will provide additional notice or seek consent for material changes to our handling of personal information.

16. Applicable law

This policy is intended to operate consistently with applicable Australian laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable.

Nothing in this policy excludes, restricts or modifies any rights or obligations that cannot lawfully be excluded, restricted or modified.