Privacy Policy

1. About This Policy

CUSKIN Australia Pty Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to all personal information collected through our website at cuskin.com.au and any related services.

2. Information We Collect

We may collect the following types of personal information:

• Identity information: name, email address, phone number
• Shipping information: delivery address (street address, city, state, postcode)
• Payment information: payment card details (processed securely by Stripe — we do not store your full card number)
• Account information: email, encrypted password, order history, saved addresses
• Device and usage data: IP address, browser type, operating system, pages visited, referring URL, and interaction data
• Communication data: records of correspondence if you contact us via email or other channels

3. How We Collect Information

We collect personal information:

• Directly from you: when you create an account, place an order, subscribe to our newsletter, contact us, or fill out any form on the Site
• Automatically: through cookies, web beacons, and similar technologies when you browse the Site (see Section 8)
• From third parties: payment processors (Stripe) may provide transaction confirmation data; analytics providers may provide aggregated usage data

4. Why We Collect Information

We collect and use your personal information for the following purposes:

• Processing and fulfilling your orders
• Managing your account and providing customer support
• Sending transactional emails (order confirmation, shipping updates, password resets)
• Sending marketing communications (only with your consent — you can opt out at any time)
• Improving our website, products, and services
• Analysing website usage and trends through aggregated analytics
• Preventing fraud and unauthorised transactions
• Complying with our legal obligations under Australian law

5. How We Use & Disclose Information

We may share your personal information with the following third-party service providers who assist us in operating the Site and fulfilling orders:

• Stripe — payment processing (PCI-DSS compliant)
• Australia Post — order shipping and delivery
• Resend — transactional email delivery
• Vercel — website hosting and infrastructure

We will not sell, rent, or trade your personal information to third parties for their marketing purposes. We may also disclose your information where required by law, regulation, or court order, or to protect our rights and safety.

6. Direct Marketing

We will only send you marketing emails if you have opted in to receive them. Every marketing email includes an unsubscribe link, allowing you to opt out at any time. You can also contact us directly to update your marketing preferences. We will process your opt-out request within 5 business days. Transactional emails (such as order confirmations and shipping notifications) are not affected by your marketing preferences and will continue to be sent for active orders.

7. Cross-Border Disclosure

Some of our third-party service providers are located outside Australia. In particular, data may be processed in the United States by Stripe (payment processing) and Vercel (website hosting). Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that they handle your information in accordance with the Australian Privacy Principles or are subject to a substantially similar privacy framework.

8. Cookies & Tracking

Our Site uses cookies and similar technologies to enhance your experience. We use the following types of cookies:

• Essential cookies: required for the Site to function (e.g., session management, cart persistence, authentication)
• Functional cookies: remember your preferences (e.g., dark mode setting)
• Analytics cookies: help us understand how visitors use the Site so we can improve it (e.g., page views, navigation patterns)

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Site.

9. Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted to and from the Site
• PCI-DSS compliant payment processing through Stripe
• Encrypted password storage using industry-standard hashing
• Access controls limiting who can view personal information

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Access to Your Information

Under Australian Privacy Principle 12, you have the right to request access to the personal information we hold about you. To make an access request, please contact our Privacy Officer using the details in Section 15. We will respond to your request within 30 days. In some circumstances, we may refuse access as permitted by law (for example, if providing access would unreasonably impact the privacy of others) — in such cases, we will provide you with written reasons for our decision.

11. Correction

Under Australian Privacy Principle 13, you have the right to request correction of any personal information we hold about you that is inaccurate, out of date, incomplete, irrelevant, or misleading. You can update most of your information directly through your account settings. For other corrections, please contact our Privacy Officer. We will respond within 30 days.

12. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order records and related financial data are retained for a minimum of 7 years in accordance with Australian taxation and business record-keeping obligations. When personal information is no longer required, we will take reasonable steps to securely destroy or de-identify it.

13. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us by contacting our Privacy Officer (see Section 15). We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

15. Contact

If you have any questions about this Privacy Policy, wish to make an access or correction request, or want to lodge a privacy complaint, please contact our Privacy Officer:

See also our Terms & Conditions and Returns & Refunds Policy.