Privacy Policy

1. Introduction

Extraordinarytyl ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website extraordinarytyl.world and use our services.

We comply with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and the European Union General Data Protection Regulation (GDPR) where applicable.

2. Data Controller Information

The data controller responsible for your personal data is:

Extraordinarytyl
67 Kaltjarrinja St, Hermannsburg NT 0872, Australia
Email: connect@extraordinarytyl.world

3. Information We Collect

3.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

Place an order through our website
Contact us via email or contact forms
Subscribe to our newsletter
Participate in surveys or promotions

This information may include:

Full name
Email address
Phone number (optional)
Shipping and billing address
Payment information
Communications and messages you send to us

3.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on pages
Referring website or source
Cookie data (see our Cookie Policy for details)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to fulfill orders and provide services you request
Consent: Where you have given explicit consent for specific processing activities
Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention and website security
Legal Obligation: Processing required to comply with applicable laws and regulations

5. How We Use Your Information

We use the information we collect for the following purposes:

Process and fulfill your orders
Communicate with you about your orders and inquiries
Send promotional communications only with your consent (we comply with the Spam Act 2003 (Cth); you may unsubscribe at any time)
Improve our website and services
Analyze website usage and trends
Prevent fraud and enhance security
Comply with legal obligations

6. Data Sharing and Disclosure

We may share your personal information with:

Service Providers: Third parties who assist us in operating our website, processing payments, and delivering products
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

7. International Data Transfers and Overseas Disclosure (APP 8)

We may disclose your personal information to overseas recipients (for example, payment processors, cloud or analytics providers). Where it is practicable to do so, we will specify the countries in which those recipients are likely to be located. Currently, such recipients may be located in the United States, the European Union, and other countries where our service providers operate.

When we disclose personal information overseas, we take reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles (APPs), or we rely on an exception under the Privacy Act 1988 (e.g. your consent after we have informed you that APP 8.1 will not apply). We remain accountable for the handling of your information by overseas recipients in accordance with the Privacy Act.

For transfers involving the European Economic Area, we also ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission and data processing agreements with our service providers.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Order Information: 7 years for tax and accounting purposes
Customer Communications: 3 years from the last interaction
Marketing Preferences: Until you withdraw consent
Website Analytics: 26 months

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data ("right to be forgotten")
Restriction: Request limitation of processing of your data
Data Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at connect@extraordinarytyl.world. We will respond to your request within 30 days.

10. Data Breaches (Notifiable Data Breaches Scheme)

Under the Privacy Act 1988 (Cth), we are required to notify you and the Office of the Australian Information Commissioner (OAIC) of eligible data breaches. An eligible data breach occurs when there is unauthorised access to, or disclosure of, personal information that we hold, and a reasonable person would conclude that the breach is likely to result in serious harm to you. If we become aware of an eligible data breach, we will conduct an assessment and, where required, notify affected individuals and the OAIC as soon as practicable, in accordance with the Notifiable Data Breaches scheme.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data transmission
Secure data storage with access controls
Regular security assessments and updates
Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child without parental consent, we will delete that information promptly.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

15. Complaints

If you have a complaint about how we have handled your personal information, please contact us using the details below. We will acknowledge your complaint and respond within a reasonable period (generally within 30 days). If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
European Union: Your local Data Protection Authority

Our privacy policy must set out how you may complain about a breach of the APPs and how we will deal with such complaints; we will follow our internal complaint handling procedures and comply with the Privacy Act in doing so.