PRIVACY POLICY

Last updated: 15 October 2025

We are committed to protecting your privacy. This Privacy
Policy explains how we collect, use, disclose, and protect your personal
information in accordance with the Privacy Act 1988 (Cth) and the Australian
Privacy Principles (APPs).

1. INFORMATION YOU PROVIDE TO US

We only collect personal information that is reasonably
necessary for our business functions and activities, such as providing our
products and services to you.

1.1. Order Information

When you place an order, we collect your name, email
address, phone number, and shipping address. We refer to this as "Order
Information."

1.2. Payment Information

To ensure your transactions are secure, all online payments
are processed through our trusted third-party payment providers — Shopify
Payments (including Shop Pay) and PayPal.

We do not collect, store, or have access to your full
credit-card details on our company servers. All payment information is
handled in accordance with the Payment Card Industry Data Security Standard
(PCI-DSS) and other applicable data-protection requirements.

  • PayPal Checkout:

    When you choose to pay with PayPal, the entire transaction — including your
    payment authorisation and card or bank details — is processed directly by
    PayPal. We receive only the information required to confirm and fulfil your
    order (such as your name, email address, and shipping details).
  • Shopify Payments / Shop Pay:

    Transactions processed through Shopify Payments or Shop Pay use
    industry-standard encryption and secure tokenisation. Shopify may temporarily
    retain your card data only for the time necessary to complete your purchase and
    to meet legal or regulatory obligations. Your payment details are not
    accessible to us.

If you choose to save your card information for future
purchases, this data is securely stored by Shopify under their own
PCI-compliant infrastructure — never on our systems — and can be removed at any
time through your account settings or by contacting us.

1.3. Device Information

When you browse our website, we automatically collect
certain information about your device using "cookies" and similar
technologies—such as your web browser, IP address, time zone, and some of the
pages you visit. This helps us analyse website traffic and improve performance.

We refer to this as "Device Information."

Please note that while we collect Device Information like
your IP address during your browse (which is considered personal information
under Australian law), we do not use this data to personally identify
individual, casual browsers.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following limited
purposes:

2.1. Order Information is used to:

  • Process
    and fulfil your orders (including shipping and order confirmation)
  • Communicate
    with you regarding your purchase or inquiries
  • Screen
    for potential fraud or risk

2.2. Payment Information is used solely and exclusively
to:

  • Process
    your payment for the order through our secure third-party payment
    processor

2.3. Device Information is used to:

  • Detect
    potential fraud and security risks (particularly by checking your IP
    address)
  • Improve
    and optimise our website experience and marketing performance

We will only send you promotional or marketing information
if you have explicitly consented to receive it (e.g., by ticking an opt-in
box). You can opt out of receiving these communications at any time by using
the 'Unsubscribe' link in any email.

3. INFORMATION SHARING

We value your trust and will never sell your personal
information. We only share your information when necessary under the following
circumstances:

To Fulfill Services: To operate our online store
and process your orders safely and efficiently, we rely on trusted third-party
service providers. These partners may only process your information according
to our instructions to provide their services. For example:

  • Online
    Store: Our store is powered by Shopify
  • Payment
    Processing: By partnering with PCI-DSS compliant gateways, we ensure that
    your payment information is managed with the highest standards of security

To Comply with the Law: We may disclose
information when required or authorized by law, or in response to lawful legal
processes such as a subpoena or court order.

To Protect Rights: We may also disclose
information to prevent a serious and imminent threat to an individual's life or
health, or to protect the public interest (e.g., where reasonably necessary for
law enforcement or protecting public revenue).

Additionally, we analyze non-personally identifiable website
traffic data to continually optimize our services and website performance.

4. UNDERSTAND YOUR RIGHTS

Access and Correction and Your Privacy Rights

You have the right to request access to, or correction of, your personal
information in accordance with the Australian Privacy Principles.

Unsubscribe:

If you are subscribed to our mailing list, you may unsubscribe at any time
using the "Unsubscribe" link at the bottom of our emails.

Cookies:

You can manage or disable cookies through your browser settings.

Please note that disabling cookies may limit certain
features or affect your shopping experience.

5. COOKIES AND TRACKING TECHNOLOGIES

Cookies help us improve your browsing experience, remember
your preferences, and understand how visitors use our website.

We may also use third-party analytics tools (such as Google
Analytics) to collect aggregated data for performance and marketing
optimisation.

6. DATA SECURITY

Your security is our top priority.

We use industry-standard encryption (such as SSL/TLS) to
protect your information during transmission and storage. We ensure that all
sensitive customer data is protected by multiple layers of encryption and
security measures to prevent unauthorised access, disclosure, or misuse.

7. DATA RETENTION

We retain your personal information only for as long as
necessary to fulfil the purposes outlined in this policy, comply with legal
obligations, resolve disputes, or enforce agreements.

Once no longer required, your personal information will be
securely deleted or anonymised.

8. INTERNATIONAL DATA TRANSFERS

Our business and certain service providers (including
Shopify) may be located outside Australia, such as in Canada or the United
States.

As a result, your personal information may be transferred to
and stored in these countries.

We ensure that all such transfers are protected through
Standard Contractual Clauses (SCCs) and other approved safeguards to maintain
your privacy and data security.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to
reflect operational, legal, or regulatory changes. Any updated version will
always be posted on this page with the revised date indicated at the top. We
encourage you to review it periodically to stay informed about how we handle
your personal information. By continuing to use our website after any updates,
you consent to the collection, use, and disclosure of your personal information
by [Your Company Name] in accordance with the most recent version of this
policy.

10. COMPLAINTS

If you believe your privacy has been breached, please
contact us using the details below.

We take all complaints seriously and will respond within a
reasonable timeframe.

We will respond to your complaint within 30 days. If you are
not satisfied with our response, you may contact the Office of the Australian
Information Commissioner (OAIC).Website: https://www.oaic.gov.au

11. CONTACT US

If you have any questions about this Privacy Policy, wish to
access your information, or make a complaint, please contact us at:

Email: help@infinilife.com.au

Postal Address: Suite 16, 139 Cardigan St,
Carlton Vic 3053 Australia

Company Name: Infinilife Global Trade Pty Ltd