Privacy Policy

HINU CO PTY LTD (ABN 21 650 599 689), trading as HINU (HINU, we, us or our), operates hinu.co and our related online services (the Site). This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit the Site, purchase from us, contact us or otherwise interact with HINU.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. By using the Site, you acknowledge the practices described in this Privacy Policy. Where consent is required by law, we will ask for it separately.

1. Personal information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as your name, email address, phone number, billing address and delivery address.
• Order and transaction information, such as products purchased, order history, discounts, returns, delivery information and payment status. Full payment card details are generally processed by our payment providers rather than stored by HINU.
• Account information, such as login details, saved preferences and loyalty or subscription information where those features are offered.
• Customer service and communications information, including enquiries, complaints, survey responses, reviews and records of our communications with you.
• Marketing information, such as your email or SMS preferences, interactions with campaigns, and information used to measure or personalise advertising.
• Device and usage information, such as IP address, browser and device type, time zone, cookie identifiers, pages and products viewed, referring pages, searches and how you interact with the Site.
• Information you choose to provide about your hair, scalp, routine or product experience. This may sometimes include sensitive or health-related information. Please provide only what is reasonably necessary; we collect sensitive information only with consent or where otherwise permitted by law.
• Any other information you provide to us or that we are authorised or required by law to collect.

2. How we collect personal information

We may collect personal information:

• directly from you when you place an order, create an account, subscribe, contact us, enter a promotion, leave a review or communicate with us;
• automatically through cookies, pixels, tags, server logs and similar technologies when you use the Site;
• from service providers that support payments, fulfilment, customer service, analytics, advertising, reviews, fraud prevention and marketing; and
• from publicly available sources or other people where it is lawful and reasonable to do so.

If you do not provide information we reasonably require, we may be unable to process an order, deliver products, respond to an enquiry or provide a requested feature.

3. Why we collect, hold, use and disclose information

We may handle personal information to:

• provide and operate the Site, customer accounts and other requested services;
• process payments, orders, subscriptions, deliveries, returns and refunds;
• communicate about orders, accounts, product safety, support requests and service updates;
• detect and prevent fraud, misuse, security incidents and other unlawful activity;
• improve our products, Site, customer experience, marketing and business operations;
• send marketing where permitted, including email, SMS, personalised offers and cart reminders;
• measure campaign performance and show relevant advertising, subject to applicable consent and opt-out rights;
• manage reviews, promotions, surveys and user-submitted content;
• comply with legal, regulatory, tax, accounting and dispute-resolution obligations; and
• establish, exercise or defend legal claims and protect our rights, customers and the public.

4. Consent and direct marketing

We process information needed to complete a purchase or provide a requested service because it is necessary to perform our contract with you or because applicable law otherwise permits it. For optional activities such as certain marketing and non-essential tracking, we seek consent where required.

You can unsubscribe from marketing emails using the link in the message. You can opt out of marketing SMS by replying STOP (or using another method stated in the message). You may also contact support@hinu.co. Opting out of marketing does not prevent us from sending necessary service messages about an order, account, product recall or legal matter.

5. Shopify, payments and service providers

Our online store is hosted by Shopify. Shopify processes information to provide the commerce platform, checkout, fraud prevention, analytics and related services. You can read the Shopify Consumer Privacy Policy at https://privacy.shopify.com and Shopify's general privacy materials at https://www.shopify.com/legal/privacy.

Payment information is processed by Shopify and/or the payment method you select, which may include services such as Shop Pay, PayPal, Apple Pay or Google Pay. Those providers handle information under their own privacy policies and security standards. HINU does not generally receive or retain your full card number.

We may also disclose personal information to providers that support fulfilment and delivery, customer service, reviews, email and SMS, analytics, advertising, website functionality, information technology, security, accounting, insurance and professional advice. We disclose only information reasonably necessary for those providers to perform their services, subject to their own legal obligations and our contractual arrangements where applicable.

We may disclose information if required or authorised by law, in response to valid legal process, to investigate a suspected breach of these Terms, to protect rights or safety, or in connection with a proposed or completed merger, acquisition, financing, reorganisation or sale of assets.

6. Overseas disclosures

Some service providers process or store personal information outside Australia. Based on the services commonly used for the Site, overseas recipients are likely to be located in Canada, the United States, the United Kingdom and countries in the European Economic Area, and may also be located in other countries where a relevant provider or its subcontractors operate. Where required, we take reasonable steps to ensure overseas disclosures are handled consistently with applicable Australian privacy law. Contact us if you would like current information about likely overseas locations relevant to your information.

7. Cookies and similar technologies

We and our partners, including Shopify, use cookies, pixels, tags and similar technologies. These technologies may be:

• Strictly necessary: required for core functions such as security, checkout, cart contents, account access and fraud prevention.
• Functional: remember choices such as location, currency and preferences.
• Analytics: help us understand traffic, performance and how visitors use the Site.
• Advertising: help measure campaigns, personalise advertising and limit repeated ads.

Where required, non-essential technologies are used only after consent. You can change available choices through the cookie banner or Cookie Preferences link on the Site and through your browser settings. Blocking some technologies may affect Site functionality. A fixed cookie list can become outdated as Shopify settings and apps change; current controls and notices on the Site should be treated as the operational source of truth.

There is no universally accepted response to browser Do Not Track signals. Where required and technically supported, we honour recognised opt-out preference signals, such as Global Privacy Control, through our privacy settings.

8. SMS

If you opt in to receive SMS from HINU, we may send service messages and, where you separately agree, promotional messages such as product launches, offers and cart reminders. Consent to marketing SMS is voluntary and is not a condition of purchase. Message frequency varies and message or data charges may apply. You can opt out at any time by replying STOP. For help, reply HELP or contact support@hinu.co.

9. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These measures may include access controls, encryption in transit, payment-industry safeguards, monitoring and service-provider due diligence. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain transaction and tax records, resolve disputes, enforce agreements, manage fraud and security, and meet legal obligations. Retention periods vary by record type. When information is no longer required, we take reasonable steps to delete or de-identify it, unless the law permits or requires continued retention.

11. Access, correction and complaints

You may request access to personal information we hold about you or ask us to correct inaccurate, out-of-date, incomplete, irrelevant or misleading information. Contact us using the details below. We may need to verify your identity. We will respond within a reasonable period and, if we refuse a request, we will explain why where the law requires.

If you believe we have breached your privacy, please send a written complaint describing the issue. We will acknowledge and investigate it and aim to provide a response within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at https://www.oaic.gov.au.

12. Additional rights in some regions

If you are in the European Economic Area or United Kingdom, and the relevant law applies, our legal bases may include performance of a contract, compliance with law, legitimate interests and consent. You may have rights to access, correct, erase, restrict or object to processing, request portability, withdraw consent and complain to a local supervisory authority. These rights are subject to legal limits.

Residents of certain United States jurisdictions may have rights to know, access, correct or delete personal information and to opt out of processing for targeted advertising, sale or sharing, where those laws apply. We will not unlawfully discriminate against you for exercising a privacy right. Use the Site's privacy choices or data-sharing opt-out page where available, or contact us.

13. Children

The Site is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate steps.

14. Third-party links

The Site may link to websites or services we do not control. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, services or legal obligations. We will publish the updated version on the Site and revise the date above. If a change is material, we will provide additional notice where required by law.

16. Contact

For privacy questions, access or correction requests, complaints, or requests for a copy of this policy in another reasonably available form, contact:

• HINU CO PTY LTD (ABN 21 650 599 689)
• Email: support@hinu.co
• Post: PO Box 216, Braybrook VIC 3019, Australia