Privacy Policy

This Privacy Policy describes how Sprig & Sprouts Limited (trading as Nutra-Wave), operating as Nutra-Wave (the “Site,” “we,” “us,” or “our”), collects, uses, and discloses your personal information when you visit or use our services, make a purchase from nutra-wave.com, or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” means the user of the Services, whether a customer, website visitor, or another individual whose information we have collected.

This version of our Privacy Policy applies to residents of Australia. If you are located elsewhere, please refer to the version that applies to your region. Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term “personal information,” we are referring to information that identifies, relates to, describes, or can be associated with you.

Information you submit directly to us may include:

• Contact details including your name, address, phone number, and email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account information including your username, password, security questions, and other information used for account security.
• Shopping information including items you view, add to your cart, or save to your account (such as loyalty points, reviews, referrals, or gift cards), and your purchases.
• Customer support information including information you choose to include in communications with us.

Some features may require you to provide certain information. You may elect not to provide it, but doing so may prevent you from using those features.

Information we collect about your usage. We may automatically collect information about your interaction with the Services (“Usage Data”) using cookies, pixels, and similar technologies (“Cookies”). Usage Data may include device information, browser information, network connection information, your IP address, and other information regarding your interaction with the Services.

Information we obtain from third parties. We may obtain information about you from vendors and service providers who collect information on our behalf, such as companies that support our Site (e.g., Shopify) and our payment processors, who collect payment information to process your orders. Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information

• Providing products and services — to process payments, fulfill orders, manage your account, arrange shipping, and facilitate returns and exchanges.
• Marketing and advertising — to send promotional communications and show you relevant advertising, subject to the consent and opt-out rights described below.
• Security and fraud prevention — to detect, investigate, and act on possible fraudulent, illegal, or malicious activity, and to keep the Services secure.
• Communicating with you and improving the Services — to provide customer support and improve our products and Services.

Cookies

We use Cookies to power and improve our Site and Services (including remembering your actions and preferences), to run analytics, and to better understand user interaction. We may also permit third parties to use Cookies to tailor services, products, and advertising. For information about the Cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies.

Most browsers accept Cookies by default, but you can set your browser to remove or reject them. Where required by applicable law, we obtain your consent before placing non-essential Cookies, and you can manage your preferences through the cookie banner or consent tool on our Site. Blocking Cookies may cause some features to work incorrectly.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties, subject to this Privacy Policy. Such circumstances may include:

• With vendors or third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
• With business and marketing partners to provide services and advertise to you, in accordance with their own privacy notices.
• When you direct, request, or consent to disclosure to third parties, such as to ship you products or through social media or login integrations.
• With our affiliates or within our corporate group.
• In connection with a business transaction (such as a merger or bankruptcy), to comply with legal obligations, to enforce terms of service, and to protect or defend our rights and those of others.

Third-Party Websites and Links

Our Site may link to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of links does not imply endorsement.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Information you send to us may not be secure while in transit; we recommend you do not use insecure channels to communicate sensitive information. How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce our contracts and policies.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

Your Privacy Rights (Australia)

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Subject to certain exceptions, you have the following rights:

• Access (APP 12) — request access to the personal information we hold about you.
• Correction (APP 13) — request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Anonymity and pseudonymity (APP 2) — deal with us anonymously or by pseudonym where lawful and practicable.
• Opt out of direct marketing (APP 7) — ask us to stop sending you marketing communications at any time.

To exercise these rights, contact us using the details below. We may need to verify your identity, and we will respond within a reasonable period. If we refuse access or correction, we will give you written reasons and information about how to complain.

Direct Marketing (Spam Act)

We send commercial electronic messages in accordance with the Spam Act 2003 (Cth). We obtain consent where required, identify ourselves as the sender, and include a functioning unsubscribe facility in every marketing message.

Overseas Disclosure (APP 8)

We are likely to disclose your personal information to overseas recipients, including our service providers in Canada, the United States, and other countries where our partners (such as Shopify and our payment and fulfillment providers) operate. Before disclosing personal information overseas, we take reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles.

Notifiable Data Breaches

If we experience a data breach that is likely to result in serious harm to affected individuals, we will assess and respond in accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

Complaints

If you have a complaint about how we handle your personal information, please contact us first using the details below. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Contact

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise your rights, please contact us:

Email: wecare@nutra-wave.com