Privacy policy

Privacy Policy

What is collected, why it is collected, who receives it and what can be requested. This policy covers every order and every visit to sex-toy.com.au.

The short version Only the information an order actually needs is collected. Personal information is never sold, and unsolicited email is never sent. Data does reach the service providers who process payments, ship parcels and run this website, because an online store cannot operate otherwise. Card details are encrypted in transit and at rest, under PCI-DSS compliance. Access, correction and deletion can all be requested. Every parcel is plainly packaged, and bank statements show Lifestyle Centres Pty Ltd.

Scope of This Policy

Lifestyle Centres Pty Ltd runs this website, trading as sex-toy.com.au.

The policy covers every visitor and every order, wherever they are.

Governing Law

Personal information is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Those set the baseline for everything below.

Two further laws apply to visitors in the European Economic Area and the United Kingdom. These are the General Data Protection Regulation and the UK GDPR. Where they grant stronger rights, the stronger position applies.

Information Collected

Collection is limited to what an order requires, plus the technical data any website receives when a browser connects to it.

Category	Examples	Purpose	Lawful basis (EEA and UK)
Identity and contact	Name, delivery address, billing address, email, phone	Taking, packing and delivering an order	Performance of a contract
Order and transaction	Items purchased, order number, payment confirmation	Fulfilment, support, returns, tax records	Contract, and legal obligation
Payment	Card details, handled by the payment processor	Taking payment and verifying the card	Contract
Technical	IP address, browser type, operating system, device	Site security, fraud prevention, site function	Legitimate interests
Usage	Pages viewed, referring site, session activity	Understanding how the store is used	Consent, via cookies
Marketing preferences	Subscription status, opt-in and opt-out records	Sending requested email, honouring opt-outs	Consent

Sensitive information as defined by the Privacy Act is not collected. No question is asked about health, beliefs or sexuality, and nothing purchased is used to infer any of them.

Consent and Withdrawal

Some information is needed to complete a purchase, verify a card, arrange delivery or process a return. Supplying it is treated as consent to use it for that purpose alone.

Anything beyond that, such as marketing email, is requested separately and may be declined.

Consent can be withdrawn at any time by emailing info@sex-toy.com.au, or through the unsubscribe link in any marketing email. Withdrawal does not affect processing already carried out lawfully.

Unsolicited email is not sent. Personal information is not sold to anyone.

Cookies

Cookies are small files a website stores on a device. Some are required for the site to function; others are not.

Cookie type	Function	Consent required
Strictly necessary	Keeps the cart, session and checkout working	No
Functional	Remembers preferences such as region or display	Yes in the EEA and UK
Analytics	Shows which pages are used and where visitors leave	Yes in the EEA and UK
Marketing	Measures advertising and limits repeat ads	Yes in the EEA and UK

Strictly necessary cookies cannot be disabled without breaking checkout. The remainder can be declined, and visitors in the EEA and the UK are asked before any non-essential cookie is set. Browser settings can also clear or block cookies at any time.

Disclosure to Third Parties

Service providers are used to run this business, and each receives only what its role requires. None is permitted to use the data for its own purposes.

Recipient	Data received	Reason
Payment processors and gateways	Payment and billing data	Taking payment, verifying cards, preventing fraud
Australia Post and carriers	Name, delivery address, contact details	Delivering parcels and providing tracking
Ecommerce and hosting providers	Account, order and technical data	Running the store and keeping it available
Email and support systems	Contact details and order history	Order updates and enquiry handling
Law enforcement or regulators	Only what is legally required	Where disclosure is required by law

Payment processors run their own privacy policies, because they answer for the card data they hold. Read those policies for detail on that side.

Disclosure may also occur where the law requires it, or where a customer has breached the terms of service.

Overseas Disclosure

Some providers sit outside Australia, or hold data in overseas facilities. Information may therefore be processed in another country and become subject to the laws there.

Reasonable steps are taken before any overseas disclosure. The aim is simple: the recipient must handle the data in line with the Australian Privacy Principles.

No adequacy decision covers Australia for data moving from the EEA or the UK. Such transfers rely on appropriate safeguards, such as standard contractual clauses. A GDPR derogation may also apply, including where the transfer is needed to perform a contract.

Retention

Personal information is kept only while a reason to hold it exists, then deleted or de-identified.

Information	Retention period
Order and transaction records	At least 5 years, meeting Australian tax record-keeping obligations
Account details	While the account remains active
Marketing subscription data	Until consent is withdrawn, plus a suppression record preventing re-addition
Support correspondence	As long as needed to resolve the matter and evidence the outcome
Technical and analytics data	A limited period, then aggregated or deleted

Security

Data is protected against loss, misuse and unauthorised access. The same applies to unwanted disclosure, alteration and destruction. Recognised industry practice is followed throughout.

Card details are encrypted in transit using SSL and stored using AES-256 encryption. PCI-DSS requirements are met, with additional accepted industry standards applied on top.

No method of transmission or electronic storage is completely secure. What can be committed to is applying current standards properly and reviewing them.

Data Breaches

Australia operates a Notifiable Data Breaches scheme. Where a breach is likely to cause serious harm, affected individuals must be notified. The Office of the Australian Information Commissioner must be notified as well.

Under the GDPR, a qualifying breach is reported to the supervisory authority within 72 hours of becoming known. Affected individuals are told directly where the risk to them is high.

Rights in Australia

Right	Meaning
Access	Request details of the personal information held
Correction	Request correction of anything inaccurate or out of date
Anonymity or pseudonymity	Deal with this store without identifying oneself, where lawful and practicable
Opt out of direct marketing	Unsubscribe at any time, from any marketing email
Complain	To this store first, then to the Office of the Australian Information Commissioner

To use any of these, email the Privacy Compliance Officer at info@sex-toy.com.au. No fee applies.

Rights in the EEA and the UK

Where the GDPR or UK GDPR applies, the following additional rights are available.

Right	Meaning
Access	Obtain a copy of the personal data held
Rectification	Have inaccurate data corrected
Erasure	Request deletion where no overriding reason to retain exists
Restriction	Limit processing while a matter is resolved
Portability	Receive supplied data in a machine-readable format
Objection	Object to legitimate-interests processing, and to direct marketing at any time
Withdraw consent	Withdraw at any time, without affecting earlier lawful processing
Complain	Lodge a complaint with the relevant supervisory authority

Verified requests receive a response within one month, as the GDPR requires. Complex requests may take longer, and notice will be given if that happens.

Age Requirement

Use of this site confirms the visitor is at least 18, and that purchasing these products is legal where they live.

This store is not directed at children, and information is not knowingly collected from anyone under 18. Where a minor is believed to have supplied personal information, contact will prompt deletion.

External Links

Links on this site may lead elsewhere. Once a visitor leaves, this policy no longer governs what happens to their information.

Other websites answer for their own privacy practices, not this one. Read their policies before handing over anything.

Changes to This Policy

This policy may be updated. Changes take effect once posted here, so occasional review is worthwhile.

Material changes will be flagged on this page. What is collected, how it is used and who receives it should always be visible.

Questions and Complaints

Use the contacts below to request access, correction or deletion. The same details handle complaints and general questions about this policy.

Detail	Information
Privacy Compliance Officer	info@sex-toy.com.au
Entity	Lifestyle Centres Pty Ltd, trading as sex-toy.com.au
Australian regulator	Office of the Australian Information Commissioner, oaic.gov.au
Response target	Within 30 days

If a response proves unsatisfactory, the next step is the Office of the Australian Information Commissioner. Visitors in the EEA or the UK may go to their local supervisory authority instead.

Related Information

Delivery and packaging are covered by the shipping policy. Returns are set out in the returns policy, and conditions of sale sit in the terms of service.