Privacy Policy

Sri Sri Tattva Australia Pty Ltd ("Sri Sri Tattva Australia", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, hold, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth), the Spam Act 2003 (Cth), and any other applicable Australian privacy legislation.

By using our website www.srisritattva.com.au, purchasing our products, or otherwise engaging with us, you acknowledge that you have read and understood this Privacy Policy.

Please note that individuals now have a right to bring a legal claim for serious invasions of privacy under Australian law. We take this seriously and are committed to handling your personal information with the highest standard of care.

If you have any questions about this Privacy Policy or how we handle your personal information, contact us at:

• Sri Sri Tattva Australia Pty Ltd
• Email: info@srisritattva.com.au
• Website: www.srisritattva.com.au
• ABN: 88 688 605 558

This Privacy Policy applies to all individuals who interact with us, including customers, website visitors, newsletter subscribers, and people who contact us with enquiries.

Anonymity: Where it is lawful and practicable, you may interact with us anonymously or using a pseudonym — for example, by browsing our website without creating an account or submitting a general enquiry without providing your full name. However, we require certain personal information to process orders, create accounts, or provide personalised product recommendations, and will advise you at the time of collection if this is the case.

Children: Our website is not directed at children under the age of 15. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us at info@srisritattva.com.au and we will take prompt steps to delete that information. We are monitoring the development of the Children's Online Privacy Code being developed by the Office of the Australian Information Commissioner (OAIC) and will update our practices accordingly when the Code is registered.

We may collect the following categories of personal information:

• Identity and Contact Information
  Full name, email address, phone number, delivery and billing address, and date of birth where relevant.
• Transaction and Account Information
  Products purchased, order history, purchase amounts, username, and encrypted password. We do not store full payment card details — see Section 7.
• Health and Wellness Information (Sensitive Information)
  Information you voluntarily provide through our Ayurvedic product recommendation tools or wellness quizzes, such as your dosha or skin type (Vata, Pitta, Kapha), dietary preferences, or health-related sensitivities. This information constitutes sensitive information under the Privacy Act and is subject to a higher standard of protection. We will only collect, use, and disclose this information with your express consent and for the purposes for which it was provided.
• Technical and Usage Information
  IP address, device information, browser type and version, pages visited, time spent on our website, and referring website.
• Communications
  Any information you provide when contacting us by email, phone, or through our website contact form, including reviews, feedback, or other content you submit.

We only collect personal information that is reasonably necessary for one or more of our functions or activities. We will not collect more information than we need.

Unsolicited Information: If we receive personal information about you that we did not solicit and could not have collected under the Australian Privacy Principles, we will destroy or de-identify that information as soon as practicable, provided it is lawful and reasonable to do so.

We collect personal information in the following ways:

• Directly from you — when you create an account, place an order, complete a wellness quiz, subscribe to our mailing list, contact us, submit a review, or otherwise interact with us.
• Automatically — through cookies and similar tracking technologies when you visit our website (see Section 10).
• From third-party service providers — such as payment processors, freight providers, and analytics services, only to the extent necessary to fulfil your order or improve our services.
• From publicly available sources — only where permitted under the Australian Privacy Principles.

We will always collect personal information by lawful and fair means, and will not collect information in an unreasonably intrusive way.

We collect and use your personal information for the following primary purposes:

• Processing and fulfilling your orders, including delivery and returns management
• Managing your account and providing customer support
• Sending order confirmations, shipping updates, and transactional communications
• Sending marketing and promotional communications (only with your consent or where otherwise permitted by law — see Section 8)
• Personalising your experience and providing Ayurvedic product recommendations
• Improving our website, products, and services
• Complying with our legal obligations, including under Australian Consumer Law, biosecurity and import/export regulations, and tax law
• Detecting, investigating, and preventing fraud and unauthorised activity
• Responding to enquiries, complaints, and feedback

Automated Decision-Making: We use automated tools (such as our Ayurvedic skin-type quiz) to generate personalised product recommendations. These recommendations are informational only and do not constitute medical advice. Decisions that significantly affect you are always reviewed with the opportunity for human involvement. In compliance with upcoming requirements under the Privacy and Other Legislation Amendment Act 2024, we will update this Policy with further details about our automated decision-making practices by December 2026.

We will not use your personal information for any purpose that is incompatible with the purpose for which it was collected unless you consent or we are otherwise required or permitted by law.

We may disclose your personal information to the following third parties:

We do not sell, rent, or trade your personal information to unrelated third parties for their own marketing purposes.

Government Identifiers: We will not use or disclose your government-issued identifiers (such as your Tax File Number or Medicare number) as our own identifier for you, and will not disclose such identifiers to third parties unless required by law.

We may send you marketing communications about our products, upcoming promotions, and Ayurvedic wellness content where you have expressly opted in to receive such communications, or where we are otherwise permitted to do so under the Spam Act 2003 (Cth).

You can opt out at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send
• Contacting us directly at info@srisritattva.com.au

We will action your opt-out request promptly and within 5 business days. Unsubscribing from marketing will not affect transactional communications related to your orders or account.

We do not make unsolicited telemarketing calls. If you are registered on the Do Not Call Register under the Do Not Call Register Act 2006 (Cth) and receive an unsolicited call from us in error, please notify us immediately at info@srisritattva.com.au.

Some of our service providers and related parties are located outside Australia. We may disclose your personal information to overseas recipients in the following countries:

• India — Sriveda Sattva Pvt Ltd (our parent supplier), for order fulfilment, inventory, and product quality management
• United States — Technology and platform providers including our e-commerce platform (Shopify), email marketing, analytics, and payment processing services

Before disclosing personal information to overseas recipients, we take reasonable steps to ensure that such recipients handle your information in a manner consistent with the Australian Privacy Principles. Where an overseas recipient is bound by a law or binding scheme that provides equivalent or greater protection to the APPs (as listed in the Privacy Regulations), we rely on that as satisfying our obligations under APP 8. Where no equivalent scheme applies, we take contractual and practical steps to ensure compliant handling of your information.

Please be aware that overseas countries may not have privacy laws that provide the same level of protection as Australian law. By using our website and providing your personal information, you consent to your information being disclosed to overseas recipients in the countries identified above.

Our website uses cookies and similar tracking technologies to enhance your experience, analyse traffic, and support personalised content.

Types of cookies we use:

• Essential cookies — Required for core website functionality, including your shopping cart and login session
• Performance and analytics cookies — Help us understand how visitors use our website (for example, Google Analytics)
• Functional cookies — Remember your preferences to personalise your experience
• Marketing cookies — Support relevant advertising and measure the effectiveness of our campaigns

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. For more information, visit www.allaboutcookies.org.

We take our obligations under APP 11 seriously and have implemented both organisational and technical measures to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted via our website
• Role-based access controls limiting staff access to personal information
• Secure third-party payment processing (we do not store card numbers)
• Regular review of our security procedures and systems
• Staff awareness of privacy obligations

While we take all reasonable precautions, no method of internet transmission or electronic storage is entirely secure. We cannot guarantee absolute security but will notify you and the OAIC promptly in the event of a data breach affecting your information — see Section 12.

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law (for example, financial records for tax purposes). When personal information is no longer required, we will take reasonable steps to destroy or permanently de-identify it.

We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). In the event of a data breach that is likely to result in serious harm to any affected individual, we will:

• Conduct a prompt assessment of the breach
• Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
• Notify all affected individuals directly with information about the breach and the steps they should take to protect themselves

If you have reason to believe your personal information held by us has been compromised, please contact us immediately at info@srisritattva.com.au.

Access: You have the right to request access to the personal information we hold about you. We will respond within 30 days. We will not charge a fee for making an access request, though a reasonable cost-recovery fee may apply for complex or extensive requests.

Correction: If any personal information we hold about you is inaccurate, out-of-date, incomplete, or misleading, you may request that we correct it. We will take reasonable steps to correct the information and, where we have disclosed it to third parties, to notify those parties of the correction where appropriate.

Deletion: You may request deletion of your personal information. We will comply unless we are required by law to retain it (for example, transaction records for tax or regulatory purposes).

How to make a request: Contact us at info@srisritattva.com.au. We may need to verify your identity before processing your request.

If we decline: We will provide written reasons for any refusal and information about how you may escalate your complaint.

If you believe we have not handled your personal information in accordance with this Privacy Policy or the Privacy Act 1988 (Cth), please contact us in the first instance:

• Email: info@srisritattva.com.au
• Subject line: Privacy Complaint

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, or if you have not received a response within 30 days, you may escalate your complaint to the:

• Office of the Australian Information Commissioner (OAIC)
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• GPO Box 5218, Sydney NSW 2001

Please note that the OAIC generally requires you to contact us first before lodging a complaint with them.