LEGAL · LAST UPDATED 16 SEPTEMBER 2026

Privacy Policy

1. Scope

This policy applies when you visit natureoriginal.gifts, create an account, place or receive an order, join a mailing list, submit a form, contact support or otherwise interact with Nature Original. It should be read with our Cookie Policy. Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to a particular activity, we handle information in accordance with those requirements. Other mandatory privacy laws may apply according to the customer, activity and jurisdiction.

2. Information we collect

Information you provide

This may include your name, email address, telephone number where supplied, billing and shipping address, account credentials, order details, selected products and variations, support messages, form submissions, marketing preferences, return or claim evidence, and other information you choose to provide.

Transaction information

We process order value, currency, payment status, refunds, chargebacks, fraud-screening results and limited payment metadata. Full card details are handled by the payment provider and are not intentionally stored by Nature Original.

Technical and usage information

Depending on your choices and the technology in use, we may receive IP address, approximate location, browser and device information, pages viewed, referral source, session activity, cookie or similar identifiers, security events and diagnostic data.

Information from service providers

Payment, security, fraud-prevention, delivery, fulfilment, email, consent and analytics providers may return information needed to complete an order, prevent misuse, resolve a dispute, understand site performance or honour your choices.

3. Why we use information

We use personal information where reasonably necessary to:

• provide the site, cart, account and checkout;
• accept payment and process orders, cancellations, returns and refunds;
• arrange fulfilment, delivery, tracking and customer support;
• select and maintain the appropriate currency and session preferences;
• communicate about orders, service changes and support requests;
• detect, investigate and prevent fraud, misuse, security incidents and improper chargebacks;
• maintain accounting, tax, transaction and compliance records;
• improve reliability, accessibility, content and product presentation;
• manage cookie and marketing choices; and
• send marketing where you have consented or where otherwise permitted, with an unsubscribe option.

4. Legal grounds where required

Where a law requires a legal basis, processing may be necessary to perform a contract or take requested pre-contract steps, comply with law, pursue legitimate interests that are not overridden by your rights, protect vital interests, or act with consent. Legitimate interests may include secure ecommerce operation, fraud prevention, customer service and service improvement. You may withdraw consent prospectively where consent is the basis.

5. Payments

Payment providers process payment credentials under their own privacy terms. Nature Original generally receives confirmation, transaction identifiers, payment method type, billing details, risk signals and payment status rather than the complete card number. Providers may conduct identity, sanctions, fraud and regulatory checks.

6. Fulfilment and delivery

We disclose the information reasonably needed to prepare and deliver an order—such as recipient name, delivery address, contact details, ordered item and tracking information—to fulfilment, logistics and delivery providers. These providers may operate internationally. We do not disclose internal sourcing information on customer-facing pages, but necessary operational data must reach the providers that complete the order.

7. Other service providers

Information may be processed by providers supporting website hosting, WordPress and WooCommerce functionality, security, backups, email delivery, forms, consent management, customer support, analytics where enabled, payment, accounting, professional advice and fraud prevention. Providers receive only information reasonably necessary for their role and are expected to protect it under applicable contracts and law.

8. International processing

Nature Original serves international customers and uses service providers in multiple countries. Personal information may therefore be processed outside your country, including where payment, hosting, fulfilment, communications or delivery providers operate. Privacy protections may differ between countries. Where required, we use an appropriate contractual, consent-based or other lawful transfer mechanism.

9. Cookies and similar technologies

Necessary technologies maintain security, consent choices, cart contents, account login, checkout and currency/session consistency. Optional analytics, performance or marketing technologies operate according to the choices made through the site’s consent controls and applicable law. The standalone Cookie Policy explains the categories and controls in more detail.

10. Marketing communications

We may send marketing where you request it or where otherwise permitted. Transactional and service messages about an order are not marketing. You can unsubscribe using the link in a marketing email or contact us. We may retain a minimal suppression record so that an unsubscribe request continues to be respected.

11. Fraud prevention and disputes

We may use order, device, payment, delivery, communication and claim information to assess fraud and protect customers and the store. Where lawful and necessary, relevant evidence may be provided to payment processors, card issuers, carriers, insurers, fraud-prevention providers or competent authorities. Automated risk indicators may inform a review, but we take reasonable steps to avoid unfair decisions.

12. Disclosure required by law

We may disclose information where required by a valid legal process, court order or regulatory obligation, or where reasonably necessary to establish, exercise or defend legal rights, protect safety, investigate fraud or enforce an agreement. We do not disclose more than is reasonably required for that purpose.

13. Sale or sharing of personal information

Nature Original does not operate a standalone business of selling customer personal information for money. Some optional advertising or measurement disclosures may be treated as a “sale” or “sharing” under particular privacy laws even where no money changes hands. Where such law applies, we provide the required consent or opt-out control and honour applicable requests.

14. Retention

We retain information only for as long as reasonably necessary for the purpose collected, including fulfilment, customer support, accounting, tax, product safety, fraud prevention, disputes, chargebacks and legal compliance. Retention periods vary by record type and legal obligation. When information is no longer required, we take reasonable steps to delete, anonymise or securely isolate it.

15. Security

We use reasonable administrative, technical and organisational safeguards appropriate to the information and risk. These may include access controls, secure connections, security monitoring, restricted administrative access, backups and trusted payment processing. No online system is completely secure. If a qualifying breach occurs, we will investigate and notify affected people or authorities where required.

16. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent or information about disclosure. These rights may be subject to identity verification and lawful exceptions, including transaction, security, tax and dispute records that must be retained. We will not unlawfully discriminate against a person for exercising a privacy right.

17. Access, correction and privacy requests

Send a clear request to [email protected]. State the right you wish to exercise and provide enough information to identify the relevant account or transaction. We may request proportionate identity verification and will respond within the period required by applicable law.

18. Children’s privacy

The store is not directed to children who cannot lawfully enter a purchase contract, and we do not knowingly solicit personal information from young children. If you believe a child has provided information without appropriate authority, contact us so it can be assessed and removed where required.

19. External links

The site may link to external services. Their privacy practices are governed by their own policies. A link does not mean we control their handling of personal information.

20. Changes to this policy

We may update this policy prospectively to reflect legal, operational or technology changes. The current version and effective date will remain published here. Material changes will be communicated where required.

21. Contact

For privacy questions and requests, contact Nature Original | Gift Shop at [email protected].