Privacy Policy

Introduction

Laxe AU (ABN XX XXX XXX XXX) (“we”, “us”, or “our”) is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information about you when you use https://laxe.com.au and when you interact with us in-store or by other means.

By using our website or providing us with your personal information, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use our services or contact us to discuss your concerns.

What Personal Information We Collect

The personal information we collect depends on how you interact with us. We only collect information that is reasonably necessary for our functions and activities (APP 3).

• Account data — when you register an account, we collect your name, email address, phone number, and password (stored in hashed form; we never store plain-text passwords).
• Transaction data — when you place an order, we collect your shipping address, order history, and payment method type (e.g. credit card or PayPal). We do not store your full card number — payment details are handled securely by our payment processor.
• Device & usage data — when you visit https://laxe.com.au, we may automatically collect your IP address, browser type, pages visited, and session duration through cookies and analytics tools.
• Communications — when you contact us via contact forms, email, or phone, we collect the content of your messages and any personal details you provide.

We do not collect sensitive information (such as health information or racial or ethnic origin) unless you voluntarily provide it and we have your express consent, or another exception under APP 3 applies.

How We Collect It

We collect personal information in the following ways:

• Directly from you — when you create an account, complete checkout, subscribe to our newsletter, submit a contact form, or communicate with our customer support team.
• Automatically — through cookies, analytics tags, and similar technologies when you browse https://laxe.com.au. See our Cookie Policy for details.
• From third parties — where applicable, such as social login providers if you choose to sign in using a third-party account. We only receive information you authorise the provider to share with us.

Why We Use It (APP 5 & 6)

We use your personal information only for the purposes for which it was collected, or for related secondary purposes you would reasonably expect (APP 5 & 6). These purposes include:

• Processing and fulfilling your orders, including delivery and returns
• Providing customer support and responding to your enquiries
• Improving our website, product range, and customer experience through analytics
• Sending direct marketing communications — only where you have given consent, with an opt-out available in every email (APP 7)
• Detecting and preventing fraud, abuse, and unauthorised access to our systems
• Complying with legal and regulatory obligations, including tax and record-keeping requirements

Who We Share It With (APP 6 & 8)

We do not sell your personal information to third parties. We may disclose your information to the following categories of recipients, solely for the purposes described in this policy:

Some of our service providers are located outside Australia, primarily in the United States. Under APP 8, before we disclose personal information overseas, we take reasonable steps to ensure the overseas recipient handles your information in a manner consistent with the APPs — including through contractual obligations and by selecting providers with robust privacy practices.

Direct Marketing (APP 7 + Spam Act 2003)

We may send you promotional emails or SMS messages about our products, offers, and bathroom inspiration content — but only if you have opted in to receive marketing communications. We comply with the Spam Act 2003, which requires:

• Your consent before sending commercial electronic messages
• Clear identification of Laxe AU as the sender in every message
• A functional unsubscribe link or reply mechanism in every email

You can opt out of marketing at any time by clicking the unsubscribe link in any email, replying “STOP” to an SMS, or emailing us at info@laxe.com.au. We will process your opt-out request promptly.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Cookies & Tracking

We use cookies and similar tracking technologies to operate https://laxe.com.au, remember your preferences, analyse site traffic, and deliver relevant advertising. Some cookies are essential for the site to function; others require your consent.

For a full explanation of the cookies we use, how to manage them, and your choices, please read our Cookie Policy.

Data Security (APP 11)

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure (APP 11). Our security measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Passwords stored using industry-standard one-way hashing — never in plain text
• Role-based access controls limiting who within our organisation can access personal data
• Payment card data handled exclusively by PCI-DSS compliant payment processors (Stripe, PayPal) — we do not store card numbers on our servers

While we implement robust safeguards, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continuously review and improve our practices.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Order records — retained for 7 years to comply with Australian tax and accounting obligations
• Account data — deleted within 30 days of receiving a verified account closure request, unless we are required to retain it by law
• Analytics data — anonymised or deleted after 26 months
• Marketing preferences — retained until you opt out, after which we maintain a suppression record to honour your choice

Your Rights (APP 12 & 13)

Under the Privacy Act 1988, you have the following rights in relation to your personal information:

• Access (APP 12) — request a copy of the personal information we hold about you
• Correction (APP 13) — request that we correct inaccurate, out-of-date, incomplete, or misleading information
• Deletion — request deletion of your personal information where we have no legal obligation to retain it
• Opt out of marketing — unsubscribe from direct marketing communications at any time

To exercise any of these rights, contact us at info@laxe.com.au. We will respond within 30 days. We may need to verify your identity before processing your request. We will not charge a fee unless your request is manifestly unfounded or excessive.

Notifiable Data Breaches

We comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988. If we experience a data breach that is likely to result in serious harm to affected individuals, we will:

• Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
• Notify affected individuals directly, providing details of the breach and recommended steps they can take to protect themselves
• Take immediate steps to contain the breach and prevent further unauthorised access

Automated Decision-Making (2024 Amendment)

Under the Privacy and Other Legislation Amendment Act 2024, businesses must be transparent about the use of automated decision-making that significantly affects individuals. Laxe AU may use algorithms to personalise product recommendations, search results, or promotional offers based on your browsing history and purchase behaviour.

These recommendations are designed to improve your shopping experience and do not produce legal or similarly significant effects. If you would like more information about how our recommendation algorithms work, or wish to opt out of personalised recommendations, please contact us at info@laxe.com.au.

Children's Privacy

https://laxe.com.au is not directed at children under the age of 15. We do not knowingly collect personal information from children under 15. If you believe we have inadvertently collected information from a child, please contact us at info@laxe.com.au and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or a prominent notice on https://laxe.com.au.

Your continued use of our website after any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about how we handle your personal information, please contact us:

• Email: info@laxe.com.au
• Address: Australia

We aim to resolve all privacy complaints within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992