Privacy policy

Privacy Policy

Tudaloo Pty Ltd (ABN 79 672 666 705) ("Tudaloo", "we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy describes how we collect, hold, use, and disclose your personal information, and how you can access or correct that information or make a complaint.

This policy applies to all personal information collected through our website (tudaloo.com.au), our products, and our services.

1. Information We Collect

We may collect the following types of personal information:

  • Identity and contact information — your name, email address, postal address, and phone number
  • Payment information — credit or debit card details, processed securely through our third-party payment provider (we do not store full card numbers on our servers)
  • Order information — products purchased, order dates, shipping addresses, and delivery preferences
  • Account and preference information — details you provide when creating an account, subscribing to our newsletter, or communicating preferences to our team
  • Technical and device information — IP address, browser type, operating system, device type, and general location data
  • Website usage information — pages visited, time on site, referral sources, and interaction data collected through cookies and similar technologies (see Section 7 below)

We generally collect personal information directly from you — for example, when you place an order, create an account, subscribe to our mailing list, or contact our support team. In some cases, we may receive information from third parties such as payment processors, delivery partners, or marketing platforms.

2. How We Use Your Information

We collect and use your personal information for the following purposes:

  • Processing, fulfilling, and delivering your orders
  • Communicating with you about your orders, account, and any support enquiries
  • Sending you marketing communications where you have opted in or where we are otherwise permitted to do so (see Section 6)
  • Personalising your experience and recommending products that may interest you
  • Improving our website, products, and services through research and analysis
  • Detecting and preventing fraud, unauthorised transactions, and other liabilities
  • Complying with our legal obligations, including under the Australian Consumer Law and taxation legislation

We will only use your personal information for the purpose for which it was collected, or a directly related purpose you would reasonably expect, unless we have your consent or are otherwise required or authorised by law.

3. Disclosure of Your Information

We may disclose your personal information to third parties who assist us in operating our business and providing our products and services, including:

  • Payment processors — to process transactions securely
  • Shipping and logistics providers — to deliver your orders
  • IT and platform providers — including our ecommerce platform (Shopify), email marketing tools, and customer support systems
  • Professional advisers — including accountants and legal advisers, where necessary
  • Government and regulatory bodies — where required by law, court order, or regulatory process

We require all third-party service providers to handle your personal information in accordance with applicable privacy laws and only for the purposes for which it was disclosed.

4. Overseas Disclosure

Some of our third-party service providers are located outside Australia, or store data on servers located overseas. This may include providers based in the United States, Canada, and other jurisdictions. In particular, our ecommerce platform (Shopify) may process or store data on servers outside Australia.

Before disclosing personal information overseas, we take reasonable steps to ensure that the overseas recipient handles your information in a manner consistent with the Australian Privacy Principles. By providing us with your personal information, you acknowledge that your information may be transferred to, and stored in, countries outside Australia.

5. Data Security and Retention

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include encrypted payment processing, secure server infrastructure, access controls, and regular review of our data handling practices.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it.

In the event of an eligible data breach, we will comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

6. Marketing Communications and SMS

We may send you marketing communications (including emails and SMS messages) where you have opted in, or where we are otherwise permitted to do so under the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).

All commercial electronic messages we send will identify Tudaloo as the sender and include a functional unsubscribe mechanism.

SMS Messages

If you opt in to receive SMS messages from Tudaloo, we may send you updates about your orders, account, and promotional offers. You can opt out at any time by:

Standard messaging and data rates from your carrier may apply. We will not share your phone number with third parties for their own marketing purposes.

Email Marketing

You can unsubscribe from our email marketing at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by contacting us at support@tudaloo.com.au.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and support our marketing efforts. The types of cookies we use include:

  • Essential cookies — required for the website to function (e.g., shopping cart, login sessions)
  • Analytics cookies — help us understand how visitors interact with our website (e.g., Google Analytics)
  • Marketing cookies — used to deliver relevant advertising and measure campaign effectiveness (e.g., Meta Pixel, Google Ads)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our website. For more information on how Google Analytics collects and processes data, visit Google's Privacy Policy.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access your personal information that we hold (APP 12)
  • Request correction of personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading (APP 13)

To request access to or correction of your personal information, please contact us using the details in Section 10 below. We will respond to your request within a reasonable period (generally within 30 days). We may need to verify your identity before processing your request.

In some circumstances, we may refuse access or correction — for example, where the request is frivolous or vexatious, or where providing access would unreasonably impact the privacy of another individual. If we refuse a request, we will provide you with written reasons and inform you of available complaint mechanisms.

9. Complaints

If you believe we have breached the Australian Privacy Principles, or you are unhappy with how we have handled your personal information, you may lodge a complaint with us:

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. We will keep you informed of the progress and outcome of your complaint.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5218, Sydney NSW 2001

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last updated" date below and post the revised policy on our website. We encourage you to review this policy periodically.

Last updated: [insert date]