Privacy policy
Smoke Market Australia
Privacy Policy
This policy explains what personal information we collect, why we collect it,
how it may be used or disclosed, and how you may request access, correction or assistance.
Before publishing: remove any practice that your business does not actually use and insert your real legal entity, ABN or ACN, address, service providers, overseas locations and privacy
contact details.
contact details.
Our commitment
Responsible information handling
Responsible information handling
throughout the
customer journey.
Smoke Market Australia respects the privacy of customers, website visitors, account holders and
people who contact our customer service team.
To the extent that the Privacy Act 1988 (Cth), the Australian Privacy Principles or another applicable privacy law applies to us, we will handle personal information consistently with those requirements.
This policy applies to information collected through our website, checkout, customer accounts,
verification processes, customer service communications, marketing activities and order fulfilment.
BUSINESS NAME] Replace before publication
if available
How we approach privacy
The practical principles below guide the way this template describes collection, use,
disclosure, security and customer rights.
Collect carefully
Collect information reasonably
required for legitimate business and legal purposes.
Use transparently
Explain the main purposes for
which personal information is handled.
Protect appropriately
Use reasonable administrative,
technical and organisational
safeguards.
Respect choices
Provide channels for access,
correction, complaints and
marketing preferences.
Age and identity checks
Verification data is
Verification data is
used only for
legitimate eligibility
and security purposes.
Because some products are age-restricted, we may need to confirm that a
purchaser or recipient meets applicable age, identity and delivery
requirements.
Depending on the verification method used, information may be processed
directly by us or by a specialist verification provider.
1 We may request date of birth, identity details or verification results.
2 Only the minimum information reasonably needed should be collected or
retained.
retained.
3 Orders may be declined where age, identity, payment or delivery eligibility
cannot be confirmed.
cannot be confirmed.
Categories of personal information
Depending on how you interact with us, we may collect:
- Name, date of birth and contact details
- Billing, delivery and account information
- Order history, products purchased and transaction records
- Payment status and limited payment-related information
- Age, identity or delivery-eligibility verification information
- Customer service messages, reviews and complaint information
- IP address, device, browser and website-usage information
- Marketing preferences and communication history
- Fraud, security and risk signals
Do not state that full card details or identity-document copies are collected
unless your business actually receives and stores that information.
unless your business actually receives and stores that information.
Information from you and other sources
Personal information may be collected when you:
- Visit or browse the website
- Create an account or subscribe to communications
- Place, pay for or receive an order
- Complete an age or identity check
- Contact customer service or submit a complaint
- Participate in a promotion, survey or review
We may also receive information from payment providers, delivery carriers,
fraud-prevention services, age-verification providers, ecommerce platforms,
analytics providers and advertising platforms.
Purposes of processing
We may use personal information to:
- Operate the website and customer accounts
- Process payments, orders, deliveries, returns and refunds
- Confirm age, identity and delivery eligibility
- Provide customer support and resolve disputes
- Detect fraud, misuse, security threats and unlawful activity
- Maintain records and meet legal or regulatory obligations
- Improve products, website performance and customer experience
- Send service messages and permitted marketing communications
Payments and transaction security
Payments may be processed by third-party payment providers. Those
providers may collect card, bank, wallet, billing and fraud-prevention
information under their own privacy policies.
We may receive a payment confirmation, transaction reference, card type,
masked card details or risk information, but should not receive or store
complete card-security codes.
Insert your actual payment providers here: [INSERT PAYMENT PROVIDERS].
Website operation and measurement
We and our service providers may use cookies, pixels, local storage, tags and similar technologies for functions such as:
- Remembering carts, preferences and account sessions
- Protecting the website and preventing fraud
- Measuring traffic, performance and conversions
- Understanding how visitors use the website
- Delivering or measuring advertising where permitted
Insert your actual analytics and advertising providers: [INSERT ANALYTICS / ADVERTISING PROVIDERS].
Who may receive information
We may disclose personal information to providers that assist with:
- Website hosting and ecommerce services
- Payments and fraud prevention
- Age, identity and eligibility verification
- Warehousing, shipping and delivery
- Email, SMS and customer support
- Analytics, advertising and website optimisation
- IT security, professional advice and legal compliance
We may also disclose information where required or authorised by law, or in
connection with a genuine sale, restructuring or transfer of the business.
Service providers outside Australia
Some technology, payment, hosting, support, analytics or verification
providers may process information outside Australia.
Where required, we take reasonable steps in relation to overseas handling
and disclose the likely countries where recipients are located.
Insert the countries relevant to your actual providers: [INSERT OVERSEAS
COUNTRIES OR REGIONS].
Do not leave this section generic if you know where your providers process customer data.
How information is protected
We use reasonable safeguards designed to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.
- Access controls and account permissions
- Secure connections and reputable service providers
- Staff or contractor confidentiality controls
- Fraud, account and transaction monitoring
- Reasonable backup, logging and incident-response practices
No internet transmission or storage system can be guaranteed to be
completely secure.
How long information is kept
Personal information is retained only for as long as reasonably needed for the purposes described in this policy, including order fulfilment, support, fraud
prevention, accounting, tax, legal and dispute-management purposes.
When information is no longer required, we take reasonable steps to destroy it or remove identifying details, unless retention is required or authorised by law.
Insert any specific retention periods that your business actually follows:
[INSERT RETENTION PERIODS].
Your information rights
You may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or
misleading.
We may need to verify your identity before processing a request. Access may
be limited in circumstances permitted by law, and we will provide reasons
where required.
Send requests to smokeglobal.au.support24@gmail.com.
Email, SMS and promotional preferences
We may send promotional electronic messages where we have consent or
another lawful basis to do so.
Commercial messages should identify the sender and provide a functional
unsubscribe method. You may unsubscribe using the link or instructions in the message or by contacting us.
Unsubscribing from marketing does not prevent necessary service messages
about orders, payments, verification, delivery or account security.
Adult-only purchasing
The website is not intended to enable people under 18 to purchase tobacco
or other age-restricted products.
If we reasonably believe an account or order involves a minor, we may
suspend the account, cancel the order, request verification or take other
lawful protective action.
A parent or guardian who believes a minor has submitted personal
information should contact us so the matter can be reviewed.
External services and links
The website may link to third-party websites, payment pages, social
platforms or services that operate under their own privacy policies.
We are not responsible for the privacy practices of an independent third party. Review its privacy information before providing personal information.
How to raise a privacy concern
Send a written description of your concern to our privacy contact. Include
enough information for us to identify the issue and respond.
We will acknowledge and investigate the complaint within a reasonable period. If you remain dissatisfied, you may have the right to contact the Office of the
Australian Information Commissioner or another applicable regulator.
Policy updates
We may update this policy to reflect changes to law, technology, service providers or business practices.
The current version will be published on the website with its effective date. Material changes may also be communicated by another reasonable method where appropriate.
Effective date: [INSERT EFFECTIVE DATE]
Data breach response
Security incidents are
Security incidents are
assessed and managed promptly.
If personal information is lost, accessed or disclosed without authorisation, we will assess the incident
and take reasonable containment and remedial steps.
Where the Notifiable Data Breaches scheme applies and an eligible data breach is likely to result in
serious harm, affected individuals and the Office of the Australian Information Commissioner will be
notified as required.
Privacy Support
smokeglobal.au.support24@gmail.com Access, correction or privacy complaint?
Include your full name, contact details and a clear description of your request. Do not email unrequested identity
documents or payment-card details.