Privacy Policy
Last updated 22 August 2026.
1. Who we are
ANYORAL ("we", "us", "our") operates the online store at anyoral.com. We are the data controller responsible for the personal information described in this policy.
ANYORAL
12-14 Canterbury Road West, Lara, Victoria 3212, Australia
Privacy enquiries: support@anyoral.com · 489980256
We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where we offer goods to customers in the United Kingdom or the European Economic Area, we also act in accordance with the UK GDPR and EU GDPR as applicable.
2. Information we collect
2.1 Information you give us
- Order information — name, billing address, delivery address, email address, telephone number, and the contents and value of your order.
- Account information — if you create an account, your login credentials, saved addresses and order history.
- Correspondence — the content of emails and messages you send us, including any photographs you provide to support a return or warranty claim.
- Marketing preferences — your email address and consent status if you subscribe to our newsletter.
2.2 Information collected automatically
- Device and usage data — IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, products viewed and time spent on the site.
- Cookie data — identifiers used to keep your cart, remember preferences, measure traffic and support advertising. See section 8.
2.3 Payment information
Card payments are processed by our payment providers. Full card numbers, expiry dates and security codes are entered directly into their systems and are never transmitted to or stored by us. We receive only a payment confirmation, the card type and the last four digits.
2.4 Information we do not collect
We do not seek sensitive information as defined by the Privacy Act — including health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation or criminal record — and ask that you do not send it to us.
3. Why we use your information, and our lawful basis
| Purpose | Lawful basis (UK/EU) |
|---|---|
| Processing, fulfilling and delivering your order | Performance of a contract |
| Handling returns, refunds and warranty claims | Performance of a contract; legal obligation |
| Responding to customer service enquiries | Legitimate interests |
| Preventing and investigating fraud and misuse | Legitimate interests; legal obligation |
| Keeping tax, accounting and transaction records | Legal obligation |
| Sending marketing email | Consent |
| Analytics and improving the store | Consent (where cookies are used); legitimate interests |
4. Who we share it with
We do not sell your personal information. We share it only with providers who need it to deliver a service to us, and only for that purpose:
- Shopify — our ecommerce platform, which hosts the store and processes orders on our behalf.
- Payment providers — to authorise and settle payments and to carry out fraud screening.
- Shipping carriers and fulfilment partners — to pick, pack and deliver your order and to handle returns.
- Email and analytics providers — to send transactional and, where you have consented, marketing email, and to understand site usage.
We may also disclose information where required by law, in response to a valid request from a regulator or law enforcement body, or to establish or defend a legal claim. If our business is sold or restructured, customer information may transfer to the acquirer, who would remain bound by this policy.
5. International transfers
We are based in Australia and ship to Australia, the United Kingdom and the United States. Your personal information may therefore be stored or processed outside your own country, including in Australia, the United States and the European Union.
Where personal data is transferred out of the United Kingdom or the EEA, we rely on appropriate safeguards, including the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, together with supplementary measures where required. You may request further detail on these safeguards using the contact details in section 1.
6. How long we keep it
- Order and transaction records — 7 years from the end of the financial year in which the transaction occurred, to meet Australian tax and record-keeping obligations.
- Customer accounts — until you ask us to close the account.
- Marketing data — until you unsubscribe, after which we retain a suppression record so that we do not contact you again.
- Customer service correspondence — up to 3 years from the last contact.
- Analytics and cookie data — as set out in section 8.
7. Security
The store runs over TLS encryption, and payment data is handled by PCI DSS compliant providers. We limit access to personal information to those who need it to do their work. No system is perfectly secure, and we cannot guarantee absolute security, but if a data breach occurs that is likely to result in serious harm we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and the relevant supervisory authority where UK or EU data is involved.
8. Cookies and tracking
We use cookies and similar technologies in four categories:
- Strictly necessary — cart contents, checkout, security and load balancing. These cannot be disabled without breaking the store.
- Preferences — remembering choices such as region or recently viewed items.
- Analytics — understanding how the site is used so we can improve it.
- Advertising — measuring campaign performance and, where applicable, showing relevant advertising.
You can control non-essential cookies through the banner shown on your first visit and through your browser settings. Blocking strictly necessary cookies will prevent checkout from working.
9. Marketing
We send marketing email only to people who have opted in. Every message contains an unsubscribe link, and we act on unsubscribe requests promptly. Transactional messages — order confirmations, dispatch notices and refund notifications — are not marketing and are sent regardless of your marketing preferences, as they are necessary to perform the contract.
10. Your rights
Subject to the law that applies to you, you may ask us to provide access to the personal information we hold about you; correct information that is inaccurate or out of date; delete information we no longer need; restrict or object to certain processing; provide your data in a portable format; or withdraw consent you have previously given.
To exercise any of these rights, email support@anyoral.com. We will respond within 30 days and may ask you to verify your identity first. We do not charge for reasonable requests.
Australia
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
United Kingdom
You have rights under the UK GDPR and may lodge a complaint with the Information Commissioner's Office at ico.org.uk.
United States
Depending on your state of residence, you may have rights to know what personal information is collected, to delete or correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under United States state privacy laws, and we do not use it for cross-context behavioural advertising without consent. We will not discriminate against you for exercising any privacy right.
11. Children
This store is intended for adults. It is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy to reflect changes in our practices or the law. The current version is always published on this page with the date it was last updated. Where a change materially affects how we use your information, we will take reasonable steps to notify you.