Privacy Policy

Organic Peach — Privacy Policy

25 Oct 2026

1. About this policy

We're Organic Peach Pty Ltd (ABN 68 694 275 468), the people behind organicpeach.com.au. We make organic cotton waterproof bedding, and we take looking after your information as seriously as we take looking after your mattress.

This policy explains what personal information we collect, why, who we share it with, and how you can access, correct or ask questions about it. It applies to our website, online store, emails, social media pages and any other dealings you have with us.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In this policy, "we", "us" and "our" mean Organic Peach Pty Ltd, and "you" means anyone whose information we handle.

If anything in our Terms of Service conflicts with this policy on how we handle personal information, this policy applies.

2. What personal information we collect

We only collect what we need to run our store and look after you. Depending on how you deal with us, this may include:

Type	Examples
Contact details	Name, email address, phone number, delivery and billing address
Order details	Products bought, order history, returns, exchanges and refunds
Account details	Login email and password (if you create an account), preferences
Payment details	Card type and the last four digits. Full card numbers are handled by our payment providers, and we never see or store them
Communications	Emails, messages, reviews, survey answers and anything you tell us when you contact support
Marketing preferences	Whether you've subscribed to our emails or SMS, and how you interact with them (opens, clicks)
Technical and usage data	IP address, device and browser type, pages viewed, items added to cart, and how you arrived at our site
Social media	Your public profile name and content when you tag, message or engage with us on Instagram, Facebook or TikTok

Sensitive information. We don't ask for health information. Sometimes customers choose to tell us about a health condition, a disability or an NDIS plan (for example, when ordering through the NDIS). We only use this to help with that order, such as preparing a quote or invoice, and we only collect it with your consent.

Children. Our products are often for children, but our website is for adults. We don't knowingly collect personal information from children under 16. Please don't send us your child's photos or details unless we've asked, for example for a review or content collaboration you've agreed to.

Staying anonymous. You can browse our site and ask general questions without telling us who you are. To place an order, we need your name, contact details and a delivery address.

3. How we collect it

Most of what we know comes straight from you, when you:

place an order, create an account or start a return
sign up to our emails or SMS, or enter a competition or giveaway
contact us by email, our contact form or social media
leave a review or answer a survey
order through a stockist, the NDIS or a business account

We also collect some information automatically through cookies, pixels and similar tools when you visit our site or open our emails (see section 6).

Sometimes we receive information from others: our payment, delivery and returns partners (such as delivery status), social media platforms, retail partners when you buy our products through them, or an NDIS plan manager or support coordinator acting for you.

If we receive information we didn't ask for and don't need, we'll destroy or de-identify it where it's lawful and reasonable to do so.

We use your personal information to:

process, pack, deliver and track your order, and handle returns, exchanges, refunds and warranty claims
take payment and protect you and us from fraud
manage your account and answer your questions
send order updates and service messages (these aren't marketing, so you'll get them even if you unsubscribe)
send marketing you've agreed to (see section 5)
show you relevant ads on social media and measure how well they work
understand how people use our site so we can improve it and our products
run competitions, giveaways and creator collaborations
meet our legal, tax and accounting obligations, and resolve disputes

We only use or share your information for these purposes, for a related purpose you'd reasonably expect, with your consent, or where the law requires or allows it.

We never sell your personal information.

Automated decisions. We don't use computer programs or AI to make decisions about you that significantly affect your rights or interests. Our payment providers may use automated fraud checks that can decline a suspicious payment. If that happens and you think it's wrong, contact us and a real person will look into it.

5. Marketing emails and SMS

We'll only send you marketing emails or texts if you've signed up, for example through our newsletter sign-up or a tick box at checkout. We follow the Spam Act 2003 (Cth).

Every marketing message identifies Organic Peach and includes a free, easy way to unsubscribe. We'll action your request within 5 working days. You can also email hello@organicpeach.com.au and we'll take you off the list.

Unsubscribing from marketing won't stop messages about an order you've placed.

6. Cookies, pixels and analytics

Cookies are small files stored on your device. Pixels and similar tools are small bits of code in our site and emails. We use them to:

keep your cart and login working (essential)
remember your preferences
understand how people find and use our site
show you our ads on platforms like Facebook and Instagram, and measure whether they work

The tools we use include Shopify's own analytics, the Meta Pixel (Facebook and Instagram) and Klaviyo for email. These providers may collect information about your visit, such as pages viewed and products added to cart, and link it to your account with them under their own privacy policies.

You can block or delete cookies in your browser settings, though parts of our site (like the cart) may stop working. You can control the ads you see in your Facebook and Instagram ad settings.

About Shopify. Our store runs on Shopify, so information you enter on our site passes through Shopify's systems. Shopify also uses some of this information for its own purposes, such as fraud prevention and features like Shop Pay, and is responsible for that use. You can read how Shopify handles your information, and make requests to Shopify directly, in the Shopify Consumer Privacy Policy and at the Shopify Privacy Portal.

We're a small team, so we rely on trusted service providers to run our business. We share only what each one needs to do its job:

Who	What they do for us
Shopify	Runs our online store and customer accounts
Stripe	Processes card payments
Our warehouse (3PL) and couriers	Pack and deliver your order
Loop Returns	Manages returns and exchanges
Klaviyo	Sends our emails and SMS
Meta (Facebook and Instagram)	Advertising and social media
Accounting and inventory software (such as Xero)	Bookkeeping, invoicing and stock
Our customer support assistant	Answers support emails on our behalf
Email and cloud storage providers	Store our emails and files

We may also share information with:

our professional advisers, such as our accountant or lawyer
retail partners or an NDIS plan manager, where needed to complete your order
government agencies, police or regulators, where the law requires or allows it
a buyer of our business, if Organic Peach is ever sold (they'd be bound by this policy)

Overseas disclosure. As the table shows, some of these providers are based overseas, mainly in the United States, Canada, Ireland, New Zealand and the Philippines. Before sharing, we take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.

Other websites and social media. Our site links to other websites and social platforms, such as Instagram and our returns portal. We're not responsible for how they handle your information, so check their privacy policies. Anything you post publicly, like a comment on our Instagram, can be seen by others.

8. Keeping it safe, and how long we keep it

We store your information electronically with reputable providers that use encryption and other security measures. Our checkout is secure, and card payments are handled by PCI-DSS compliant payment providers. Only people who need your information to do their job can access it, and we use strong passwords and two-factor sign-in where available.

You can help too: keep your account password to yourself, and please don't email us card numbers or other sensitive details. Email isn't a secure way to send them.

No system is completely secure. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC) as the law requires, along with steps you can take to protect yourself.

We keep order and transaction records for 7 years to meet tax and accounting laws. Other information is kept only as long as we need it. When we no longer need it, we delete or de-identify it securely.

9. Accessing, correcting and complaining

Access and correction. You can ask to see the personal information we hold about you, or ask us to fix anything that's wrong, out of date or incomplete. Email hello@organicpeach.com.au. You can also update most details yourself in your account. We'll respond within 30 days and won't charge you. If we can't give you access or make a change, we'll explain why in writing, unless the law prevents us.

Deletion. You can ask us to delete your personal information or close your account. We'll do so unless we need to keep something by law, such as order records for tax.

Checking it's you. Before we act on a request, we may need to confirm your identity. Someone can also make a request on your behalf, like a parent, carer or NDIS nominee, if they show us they're authorised.

Customers outside Australia. We ship worldwide. If you live in a country with its own privacy laws, such as the UK or the European Union, you may have extra rights, such as getting a copy of your data to take elsewhere, objecting to or limiting how we use it, or withdrawing your consent. Contact us to use these rights. Where the law requires, we use recognised safeguards, such as standard contractual clauses, when transferring your information overseas.

Complaints. If you think we've mishandled your information, please email hello@organicpeach.com.au with the details. We'll acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

10. Changes and contact

We may update this policy as our business, our tools or the law changes. The latest version will always be on our website with its "last updated" date. If we make a big change, we'll let you know.

Questions? We'd love to hear from you.

Organic Peach Pty Ltd ABN 68 694 275 468 Email: hello@organicpeach.com.au