Privacy Policy

1. Who we are

Hush Soap operates https://hushsoap.com. We are a small Australian handmade soap business based in East Perth, Western Australia. We take your privacy seriously and are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If you have any questions about this policy, please contact us at hello@hushsoap.com.

2. What information we collect

We collect personal information only when you:

• ·Place an order — name, email address, delivery address, phone number
• ·Contact us — your name, email address and the content of your message
• ·Join a waitlist — your email address and the product you are interested in
• ·Browse our website — anonymised analytics data (see section 5)

We do not collect payment card details. All payment processing is handled securely by Stripe. We never see or store your full card number.

3. How we use your information

We use your personal information only for the purpose it was collected:

• ·To process and fulfil your order, including sending confirmation and shipping notifications
• ·To contact you about your order if we need to
• ·To notify you when a waitlisted product becomes available (if you signed up)
• ·To respond to enquiries you send us
• ·To comply with our legal obligations under Australian law

We do not sell your personal information. We do not share it with third parties for marketing purposes. We will never send you unsolicited marketing emails without your explicit consent.

4. How we store your information

Your order information is stored securely in our database (Supabase, hosted on AWS infrastructure in Australia or the US). We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

We retain order records for a minimum of seven years as required by Australian tax law. Waitlist records are deleted once a notification has been sent or within 12 months, whichever comes first.

5. Cookies and analytics

Our website may use cookies and analytics tools (such as Vercel Analytics) to understand how visitors use our site. This data is anonymised and aggregated — it does not identify you personally.

We do not use advertising cookies or tracking pixels. We do not participate in retargeting advertising programs.

6. Third-party services

We use the following trusted third-party services to operate our business:

• ·Stripe — Payment processing. Stripe handles all card data securely. Their privacy policy is available at stripe.com/privacy.
• ·Resend — Transactional email delivery (order confirmations, shipping notices). Your email address is passed to Resend solely for this purpose.
• ·Supabase — Secure database storage for order records and waitlist data.
• ·Vercel — Website hosting and delivery. Vercel may log anonymised request data for performance and security purposes.

None of these services are permitted to use your data for their own marketing purposes.

7. Your rights

Under the Australian Privacy Act, you have the right to:

• ·Access the personal information we hold about you
• ·Request correction of inaccurate or incomplete information
• ·Request deletion of your information (subject to our legal obligations)
• ·Complain about a breach of the Australian Privacy Principles

To exercise any of these rights, please contact us at hello@hushsoap.com. We will respond within 30 days.

8. Complaints

If you believe we have not handled your personal information appropriately, please contact us first at hello@hushsoap.com. We will do our best to resolve your concern promptly.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.