Privacy policy
SHESAID PRIVACY POLICY
Australia • Customer-Facing Privacy Policy
Last updated: 23 September 2026
Your privacy matters
At SheSaid, we respect your privacy and take reasonable steps to protect your personal information.
This Privacy Policy explains how SheSaid collects, uses, stores, protects and discloses personal information when you visit our website, place an order, create an account, contact us, subscribe to marketing, submit a review, or otherwise interact with us.
SheSaid operates its online store using Shopify, which provides technology and services that help us operate our website, process transactions, manage orders and provide our services.
Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to SheSaid, we handle personal information in accordance with those requirements. We also use the Australian Privacy Principles as our baseline for responsible privacy practices.
1. About SheSaid
SheSaid is an Australian-facing e-commerce beauty brand.
This Privacy Policy applies to personal information collected through our website, online store, customer service channels, order and payment processes, marketing activities, reviews and other related services.
Our website and store are powered by Shopify. Shopify may collect and process personal information as part of providing the technology and services that support our store.
2. Personal Information We Collect
Depending on how you interact with SheSaid, we may collect and hold the following types of personal information:
Identity and contact information
This may include your:
- Name
- Email address
- Phone number
- Billing address
- Delivery or shipping address
- Other contact details you provide to us
Order and transaction information
This may include:
- Products you purchase
- Products you return or exchange
- Order history
- Order numbers
- Delivery and tracking information
- Transaction details
- Customer account information
- Information about products you view, add to your cart or otherwise interact with through our website
Payment and billing information
We may collect information required to process payments and transactions.
Payment card details may be handled directly by Shopify, payment processors or other relevant payment providers rather than being stored by SheSaid.
Customer service information
When you contact us, we may collect information contained in:
- Emails and messages
- Customer enquiries
- Return and refund requests
- Photographs
- Attachments
- Reviews or feedback
- Other information you voluntarily provide to us
Website and device information
When you visit or use our website, we or our service providers may collect information such as:
- IP address
- Browser type
- Device information
- Network information
- Approximate location
- Website activity
- Cookies and similar technologies
- Information about how and when you interact with our website
Marketing preferences
We may collect information about whether you have subscribed to email or SMS marketing and your communication preferences.
Reviews, photographs and other content
If you voluntarily submit a review, photograph, testimonial, comment or other content, we may collect and use that information in accordance with the purpose for which it was submitted and any permissions provided to you at the time.
Sensitive or health-related information
Some interactions with a beauty business may involve information that could be sensitive or health-related.
For example, if offered by SheSaid and voluntarily provided by you, this may include:
- Skin photographs
- Skin concerns
- Information about sensitivities or allergies
- Information about a health condition
- Responses to questionnaires or similar information
SheSaid will not ask you to provide sensitive information unless it is reasonably necessary for the service being offered.
If you do not need to provide sensitive information to receive a service, please do not include it in ordinary customer support messages.
3. How We Collect Personal Information
We may collect personal information:
- Directly from you when you place an order or create an account
- When you contact Customer Support
- When you subscribe to email or SMS marketing
- When you submit a review, photograph or other content
- When you complete a form or questionnaire
- When you use or interact with our website
- Automatically through cookies, pixels, analytics and similar technologies
- From Shopify and other service providers that provide technology or services to us
- From delivery, payment, marketing, analytics and other business partners where permitted
Some information may therefore be collected indirectly rather than directly from you.
4. How We Use Personal Information
We may use personal information for purposes including:
Providing and managing our services
We may use your information to:
- Process and fulfil orders
- Process payments
- Arrange delivery
- Provide tracking and order updates
- Manage customer accounts
- Process returns, refunds and exchanges
- Respond to customer enquiries
- Provide customer support
- Manage reviews and feedback
- Improve our products, services and customer experience
Website operation and improvement
We may use information to:
- Operate and maintain our website
- Remember preferences
- Understand how customers use our website
- Improve website functionality and performance
- Improve our products and services
- Provide a more relevant shopping experience
Marketing and advertising
Where permitted by law and where the required consent or other lawful basis applies, we may use personal information to:
- Send promotional emails or SMS messages
- Provide information about products, offers or services
- Measure marketing campaigns
- Understand customer interactions with our website
- Display relevant advertising
Depending on the technologies and advertising services we use, advertising may be based on activities such as products viewed, purchased or added to a shopping cart.
You can unsubscribe from promotional email or SMS communications using the unsubscribe mechanism provided in the relevant communication.
You may still receive necessary transactional or service communications, such as order confirmations, delivery updates or important account messages.
Security and fraud prevention
We may use personal information to:
- Protect our website and services
- Authenticate accounts
- Detect and prevent fraud
- Investigate suspicious or unlawful activity
- Protect customers, our business and our service providers
- Respond to security incidents
Legal and regulatory purposes
We may use personal information where reasonably necessary to:
- Comply with applicable laws
- Meet tax, accounting and record-keeping requirements
- Respond to lawful requests from government authorities, regulators or courts
- Resolve disputes
- Enforce our terms, policies or rights
- Protect our business and customers
5. Cookies, Analytics and Advertising Technologies
SheSaid may use cookies, pixels, analytics technologies and advertising tools to:
- Operate our website
- Remember preferences
- Understand website activity
- Measure marketing campaigns
- Improve our services
- Provide relevant advertising
Some of these technologies may be provided by Shopify or other third-party service providers.
Depending on your browser, device or available settings, you may be able to control or disable certain cookies and similar technologies.
Disabling certain technologies may affect website functionality or your shopping experience.
6. Shopify and Our Service Providers
SheSaid uses Shopify to operate our online store.
Shopify may process personal information in connection with services such as website hosting, shopping functionality, checkout, payment processing, analytics, security and other store functionality.
We may also use other service providers to help us operate our business, including providers involved in:
- Payment processing
- E-commerce and website technology
- Order fulfilment
- Shipping and delivery
- Customer support
- Email and SMS communications
- Analytics
- Cloud storage
- Marketing and advertising
- Fraud prevention and security
These providers may process personal information on our behalf or as otherwise permitted by law.
Shopify also maintains its own privacy practices and policies. Information about Shopify's handling of personal information is available through Shopify's consumer privacy information.
7. When We Share Personal Information
We may disclose personal information where reasonably necessary to operate our business, provide services to you, comply with the law or protect our rights.
Depending on how you use our services, information may be disclosed to:
- Shopify
- Payment processors and financial service providers
- E-commerce and website technology providers
- Delivery, postal and logistics providers
- Customer support providers
- Communications providers
- Analytics providers
- Cloud storage and technology providers
- Marketing and advertising platforms
- Fraud prevention and security providers
- Professional advisers, insurers and auditors
- Government authorities, regulators, courts or law enforcement where required or authorised by law
We may also disclose information where you direct us to do so or otherwise provide consent.
We do not sell personal information as a standalone business activity.
We do not disclose personal information for purposes unrelated to the reason it was collected unless permitted or required by law or otherwise authorised by you.
8. Overseas Disclosure
Some organisations that provide technology, payment, communications, analytics, advertising, fulfilment or other services to SheSaid may be located outside Australia.
As a result, personal information may be stored, accessed or processed outside Australia.
The countries in which overseas recipients are located may vary depending on the services and technologies we use.
Where the Australian Privacy Act and Australian Privacy Principles apply, SheSaid will assess overseas disclosures and take the steps required in the circumstances.
Australian privacy requirements may continue to apply when personal information is disclosed overseas.
Where practicable, we will update this Privacy Policy if there is a material change to the countries or types of overseas recipients involved.
9. Reviews, Photos and User-Submitted Content
If you voluntarily submit a review, photograph, testimonial, comment or other content, SheSaid may use it for the purpose for which it was submitted and for related business purposes where permitted.
If we intend to publish content publicly, we will handle it in accordance with the applicable terms or permissions presented when the content is submitted.
Please avoid including unnecessary personal or sensitive information in publicly visible content.
10. Sensitive or Health Information
Some beauty-related interactions may involve information that could be sensitive or health-related, including skin photographs, skin concerns, allergies, sensitivities or information about a health condition.
SheSaid will only seek sensitive information where it is reasonably necessary for the service being offered.
Where sensitive information is collected, we will handle it in accordance with applicable privacy requirements and the purpose for which it was collected.
If you provide sensitive information voluntarily, please make sure you are comfortable providing it for the relevant purpose.
11. How We Hold and Protect Personal Information
SheSaid takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
Depending on the information and systems involved, security measures may include:
- Access controls
- Secure systems
- Authentication controls
- Staff procedures
- Appropriate technical and organisational security practices
Some personal information is held or processed through third-party service providers, including Shopify and other technology providers.
No method of storing or transmitting information is completely secure, and we cannot guarantee absolute security.
If SheSaid becomes aware of a privacy or security incident, we will assess the incident and take any steps required by applicable law.
12. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
This may include retaining information to:
- Provide our services
- Maintain customer and business records
- Process transactions
- Resolve disputes
- Prevent fraud
- Comply with legal, tax or accounting obligations
- Protect our legitimate business interests
When personal information is no longer required, SheSaid will take reasonable steps to securely delete, destroy or de-identify it, subject to any legal or operational requirement to retain it.
13. Access and Correction
You may contact SheSaid to request access to personal information we hold about you or to ask us to correct information that is inaccurate, incomplete or out of date.
We may need to verify your identity before processing a privacy request.
We will respond within the timeframe required by applicable law.
Where applicable, you may also have other privacy rights depending on your location and the law that applies to your personal information.
14. Privacy Choices
Depending on the circumstances and applicable law, you may have rights or choices relating to your personal information, including:
- Requesting access to personal information we hold about you
- Requesting correction of inaccurate personal information
- Requesting deletion where applicable
- Managing your marketing preferences
- Unsubscribing from promotional email or SMS communications
- Choosing not to provide certain information where it is not necessary
Some requests may be subject to legal exceptions or limitations.
We may need to verify your identity before processing certain requests.
15. Anonymity and Pseudonymity
Where permitted by law and reasonably practicable, you may have the option to deal with SheSaid without identifying yourself or by using a pseudonym.
However, this may not be practicable for certain activities, such as placing an order, processing a payment, arranging delivery, managing an account or handling a return or refund.
16. Privacy Complaints
If you have a concern about how SheSaid has handled your personal information, please contact us first so that we can investigate and try to resolve the issue.
Please provide enough information for us to understand your concern and, where relevant, identify the information or interaction involved.
We will acknowledge and handle your complaint in accordance with applicable privacy requirements.
If you are not satisfied with our response, or if you believe your privacy rights have not been addressed, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).
17. Third-Party Websites and Services
Our website may contain links to third-party websites, applications or services.
Those third parties have their own privacy practices and policies.
SheSaid is not responsible for the privacy or security practices of websites, applications or services that we do not control.
We recommend reviewing the relevant third party's privacy policy before providing personal information to them.
18. Children's Privacy
Our website and services are intended for a general adult consumer audience.
We do not knowingly seek to collect personal information from children where collection is not reasonably necessary.
If you believe a child has provided personal information to SheSaid, please contact us so that we can assess the situation and take appropriate action.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
- Our services
- Technology
- Privacy practices
- Service providers
- Legal or regulatory requirements
The updated version will be published on our website with a revised Last Updated date where appropriate.
We encourage you to review this Privacy Policy periodically.
20. Contact SheSaid
For privacy questions, access or correction requests, privacy complaints, or questions about how we handle personal information, please contact:
SHESAID CUSTOMER SUPPORT
Email: care@shesaid.online
Phone: +61 416 031 033
Address: 380 Cambridge Road, Mornington, TAS 7018, Australia