PRIVACY POLICY

Privacy Policy for GIAAN ACTIVE

Last updated: 30 September 2026

Bonney Enterprises Pty Ltd trading as GIAAN ACTIVE (“GIAAN ACTIVE”, “we”, “our” or “us”) respects your privacy.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you interact with our website, www.giaanactive.com, purchase our products, contact us, subscribe to our communications or otherwise engage with our business.

We handle personal information in accordance with applicable privacy laws. This policy does not replace any consent we are required to obtain for a particular activity.

1. Information We Collect

The personal information we collect depends on how you interact with us. It may include:

Customer information: Your name, email address, delivery and billing addresses, phone number, order history, product preferences, and communications about orders, returns or enquiries.
Payment information: Information needed to process payments, refunds and fraud checks. Payments are processed through payment service providers, which handle payment details in accordance with their own privacy and security arrangements.
Marketing preferences: Your email and SMS subscription preferences, consent records, and interactions with our communications.
Content you provide: Reviews, photographs, videos, survey responses and competition entries. Where your permission is required to use identifiable content for marketing, we will obtain it.
Website usage information: Your IP address, device and browser information, pages viewed, referring websites, and interactions with products, advertisements and shopping carts.
Recruitment and employment information: Contact details, resumes, qualifications, work history and relevant recruitment information. Where necessary and lawful, we may collect payroll, superannuation, tax and right-to-work information during employment onboarding.
Business contact information: Contact and professional details of suppliers, contractors, ambassadors and other people who work with us.

We aim to collect only information reasonably necessary for our activities. Where sensitive information is required, we will obtain consent unless collection without consent is permitted or required by law.

2. How We Collect Personal Information

We generally collect personal information directly from you when you:

Place an order, create an account or request a return or exchange.
Subscribe to email or SMS communications.
Contact us by email, social media or another communication channel.
Submit a review, complete a survey or enter a promotion.
Attend an event or participate in an activity where information is collected.
Apply for a role or enter into a business relationship with us.

We may also collect information automatically through cookies and similar technologies, as explained below.

In some circumstances, we receive information from service providers, such as payment processors, delivery providers, ecommerce platforms and marketing platforms, or from someone authorised to provide information on your behalf.

If you do not provide information needed to fulfil an order or respond to a request, we may be unable to provide the relevant service. Where practicable, you may make a general enquiry without identifying yourself.

3. Why We Collect and Use Personal Information

We collect and use personal information to:

Process payments, fulfil orders and arrange delivery.
Manage accounts, returns, exchanges and customer enquiries.
Send order updates and other service communications.
Send marketing communications where we have the necessary consent or another lawful basis.
Manage promotions, events, surveys and ambassador relationships.
Understand customer preferences and improve our products, website and services.
Measure the effectiveness of our communications and advertising.
Assess job applications and manage employment or contractor relationships.
Detect fraud, protect our systems and maintain business records.
Comply with legal obligations and resolve complaints or disputes.

We will obtain additional consent where required before using personal information for a different purpose.

4. Email and SMS Marketing

Where you subscribe or we otherwise have lawful permission, we may send promotional emails or SMS messages about products, launches, offers and events.

Marketing subscriptions are voluntary. Providing a phone number or email address for an order does not, by itself, mean you have agreed to receive marketing communications.

You can unsubscribe by using the unsubscribe link or following the instructions in a marketing message. We will action marketing unsubscribe requests as soon as practicable and within five working days.

We may retain limited information about your unsubscribe request so we can respect your preferences.

Unsubscribing from marketing does not prevent us from sending non-promotional communications needed to manage an existing order or respond to an enquiry, where permitted by law.

5. Cookies and Online Tracking

We use cookies and similar technologies to operate the website, remember preferences, maintain shopping carts, understand website usage and support relevant advertising.

These technologies may collect information such as IP addresses, device identifiers, pages viewed and interactions with products or advertisements.

Where enabled, these technologies may help us identify an abandoned cart and send a reminder. Marketing reminders will only be sent where we have the necessary consent or other lawful permission.

You can manage cookies through your browser settings and any privacy controls available on our website. Disabling some cookies may affect website functionality.

Where applicable law requires consent for particular cookies or tracking technologies, we will seek that consent before using them.

6. Advertising and Third-Party Disclosures

We may disclose personal information to providers that help us operate our business, including:

Ecommerce, website hosting and IT providers.
Payment processors and fraud-prevention providers.
Delivery and logistics providers.
Email, SMS, customer-support and review platforms.
Analytics and advertising providers.
Professional advisers, such as accountants and lawyers.

Advertising and analytics providers may collect or receive device information, browsing activity and interactions with advertisements to help measure campaigns and show relevant advertising, where permitted by law.

You can manage personalised advertising through the relevant platform’s settings and any available website privacy controls. Turning off personalised advertising does not necessarily stop all advertising or data collection.

We do not sell or rent customer mailing lists. We may share information with advertising providers as described in this policy; some overseas privacy laws may classify certain advertising disclosures as “sharing” or a “sale”, and any applicable rights will be respected.

Some providers process information on our behalf, while others handle information for their own purposes under their privacy policies. We take reasonable steps to select appropriate providers and protect information disclosed to them.

We may also disclose information where required or authorised by law, including to respond to lawful requests, investigate fraud or establish, exercise or defend legal claims.

7. Overseas Storage and Disclosure

Some service providers may store or process personal information outside Australia, or allow overseas personnel to access it.

The countries involved depend on the providers and services we use.

[Before publishing: insert the countries where your providers are likely to receive, store or access personal information, after checking their current arrangements.]

Where applicable, we take reasonable steps to ensure overseas disclosures comply with relevant privacy requirements. If a particular transfer requires consent or another safeguard, we will address that requirement before making the transfer.

8. How We Protect Personal Information

We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss, and unauthorised access, modification or disclosure.

These steps include restricting access to information to people who need it for their work and using appropriate security measures for the systems and records we manage.

No method of electronic transmission or storage is completely secure. Please keep your account credentials confidential and contact us promptly if you suspect unauthorised access to your account.

9. Access, Correction and Other Requests

You may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, outdated, incomplete, irrelevant or misleading.

We may need to verify your identity before responding. We will only request information reasonably necessary for that purpose.

You may also ask us to delete personal information or withdraw consent where processing relies on consent. We will assess these requests in accordance with applicable law. We may need to retain some information to comply with legal requirements, resolve disputes or maintain necessary business records.

Depending on the laws that apply, you may have additional rights, such as data portability or the right to object to or restrict particular processing.

We will respond within a reasonable period and any timeframe required by applicable law. If we cannot fulfil a request, we will explain why, unless legally prevented from doing so, and explain available complaint options.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, handling returns, maintaining required records and resolving disputes.

Retention periods depend on the type of information and applicable legal requirements. Tax, accounting and employment records may need to be kept for several years after the relevant transaction or relationship ends.

When information is no longer needed and we are not required to retain it, we take reasonable steps to securely destroy or de-identify it.

11. Data Breaches

If we become aware of a suspected data breach, we will take reasonable steps to investigate, contain it and reduce potential harm.

Where notification is required by applicable law, we will notify affected individuals and the relevant regulator within the required timeframe and provide appropriate information about protective steps.

12. Individuals Outside Australia

Additional privacy laws may apply to some of our activities involving individuals outside Australia.

Where the European Union General Data Protection Regulation or the UK GDPR applies to our processing, we will rely on an appropriate lawful basis, such as performing a contract, complying with a legal obligation, pursuing legitimate interests where permitted, or obtaining consent.

Depending on the circumstances, individuals may have rights to access, correct or erase information, restrict or object to processing, request data portability, and withdraw consent. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Where applicable, individuals may also complain to their local data protection authority.

13. Privacy Enquiries and Complaints

If you have a question or complaint about how we handle personal information, please email us with details of your concern.

We will acknowledge your complaint and aim to provide a substantive response within 30 days. If we need more time, we will explain the reason and provide an update.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au. Whether the OAIC can investigate will depend on whether your complaint falls within its jurisdiction.

You may also have access to another privacy regulator or complaint process under applicable law.

14. Changes to This Privacy Policy

We may update this policy to reflect changes to our practices, services or legal obligations. The current version will be published on our website with an updated date.

Where required, we will provide additional notice of significant changes or obtain consent before introducing a new use of personal information.

15. Contact Us

For privacy enquiries, complaints or requests, please contact:

Bonney Enterprises Pty Ltd trading as GIAAN ACTIVE
Email: info@giaanactive.com
Website: www.giaanactive.com