DERMAPLEX PRIVACY POLICY

Last updated: 5 September 2026

Dermaplex Pty Ltd (“DermapleX”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit dermaplex.com.au, purchase our products, communicate with us, subscribe to marketing, create an account or otherwise interact with DermapleX.

Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who We Are

This Website is operated by:

Dermaplex Pty Ltd
Sydney, New South Wales, Australia
Website: dermaplex.com.au
Email: info@dermaplex.com.au
ACN: 701 679 003

2. Personal Information We Collect

Depending on how you interact with DermapleX, we may collect information including:

• your name;
• email address;
• telephone number;
• billing and delivery addresses;
• order and purchase information;
• account information;
• communications with our customer service team;
• product reviews, feedback or survey responses;
• marketing preferences;
• information you voluntarily provide to us;
• device, browser and technical information;
• IP address;
• Website activity and interactions;
• referral information; and
• cookie and similar technology information.

We only collect information reasonably necessary for our business activities or otherwise where permitted by law.

3. Payment Information

Payments made through our Website may be processed by Shopify and other third-party payment providers made available at checkout.

Depending on your chosen payment method, this may include providers supporting credit/debit cards, Shop Pay, PayPal or other payment services.

Payment providers may collect and process information such as your payment card or account details.

DermapleX does not necessarily receive or store your complete payment card details. Payment information may instead be processed securely by our payment service providers in accordance with their own privacy and security practices.

4. How We Collect Personal Information

We may collect personal information:

• directly from you when you place an order;
• when you create an account;
• when you contact us;
• when you subscribe to email or SMS marketing;
• when you participate in a promotion;
• when you submit a review or feedback;
• automatically when you use our Website;
• through cookies and similar technologies;
• from service providers assisting us in operating our business; and
• from other sources where permitted by law.

5. Why We Collect and Use Personal Information

We may collect, hold and use personal information to:

• process and fulfil orders;
• receive and process payments;
• arrange shipping and delivery;
• provide order confirmations and tracking information;
• manage customer accounts;
• provide customer support;
• respond to enquiries, complaints and requests;
• process returns and refunds;
• detect and prevent fraud or misuse;
• operate and improve our Website;
• understand how customers interact with our Website;
• improve our products and services;
• personalise aspects of the shopping experience;
• administer promotions and discount offers;
• maintain business and transaction records;
• comply with our legal and regulatory obligations;
• protect DermapleX, our customers and other persons; and
• send marketing communications where permitted by law.

6. Shopify

Our online store is hosted using Shopify.

Shopify provides the e-commerce platform that enables us to sell products and services to you.

As part of providing these services, Shopify may process information about customers and Website visitors on our behalf or for purposes described in Shopify's own privacy documentation.

You can review Shopify's Privacy Policy for more information.

7. Cookies and Similar Technologies

Our Website may use cookies, pixels, local storage and similar technologies.

These technologies may be used to:

• keep the Website functioning;
• remember preferences;
• maintain shopping-cart functionality;
• understand Website traffic and usage;
• measure Website performance;
• prevent fraud;
• provide relevant advertising; and
• measure the effectiveness of advertising and marketing campaigns.

Some cookies are necessary for the Website to operate. Others may be provided by analytics, advertising or other third-party services.

You may be able to control cookies through your browser or other privacy settings. Disabling certain cookies may affect Website functionality.

8. Analytics and Advertising

We may use analytics and advertising services to understand Website performance and customer interactions and to measure or improve our advertising.

Depending on the services we activate, these may include platforms such as Google, Meta or other advertising and analytics providers.

These providers may use cookies, pixels or similar technologies to collect information about interactions with our Website.

Where required by applicable law, we will obtain consent or provide appropriate choices regarding these technologies.

9. Marketing Communications

Where permitted by law, DermapleX may send you marketing communications regarding products, promotions, launches, offers and other DermapleX news.

We may send marketing communications where you have consented or where another lawful basis permits us to do so.

You may unsubscribe from electronic marketing communications at any time using the unsubscribe facility included in the communication or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional communications necessary for an order, account or customer-service request.

10. Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary to operate DermapleX, including:

• Shopify and e-commerce service providers;
• payment processors;
• shipping, courier and logistics providers;
• fulfilment providers;
• IT and Website service providers;
• cloud storage and hosting providers;
• customer service platforms;
• email and SMS communication providers;
• analytics providers;
• advertising and marketing platforms;
• accountants, lawyers, insurers and professional advisers;
• fraud prevention and security providers; and
• government, regulatory or law-enforcement bodies where required or authorised by law.

We do not sell personal information to third parties for money.

11. Overseas Disclosure and Processing

Some of the service providers used by DermapleX may operate, store data or process information outside Australia.

As a result, personal information may be disclosed to or processed by recipients located overseas.

The countries involved may vary depending on the technology, payment, hosting, analytics, marketing and other providers we use.

Where the Australian Privacy Principles apply, we will take reasonable steps in relation to overseas disclosures as required by applicable Australian privacy law.

12. Storage and Security

DermapleX takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Security measures may include appropriate technical, organisational and administrative safeguards.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

If we become aware of an eligible data breach, we will take appropriate action in accordance with applicable Australian data-breach notification requirements.

13. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• fulfil orders;
• maintain business and accounting records;
• handle disputes and customer enquiries;
• prevent fraud;
• enforce agreements; and
• comply with taxation, corporate and other legal obligations.

When personal information is no longer required and we are not legally required to retain it, we will take reasonable steps to destroy or de-identify it where required by applicable law.

14. Accessing and Correcting Your Information

Where applicable under Australian privacy law, you may request access to personal information we hold about you.

You may also request correction of information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact us using the details at the bottom of this Policy.

We may need to verify your identity before processing a request.

There may be circumstances in which we are permitted by law to refuse access. Where required, we will explain the reason for doing so.

15. Deleting Personal Information

You may contact us to request deletion of personal information.

Whether information can be deleted will depend on applicable law and whether we have a legitimate need or legal obligation to retain particular information.

For example, we may need to retain certain transaction and accounting records even after a deletion request.

16. Children's Privacy

Our Website and products are not directed toward young children.

We do not knowingly seek to collect personal information from children without appropriate authorisation where this is required.

If you believe a child has provided personal information to us inappropriately, please contact us.

17. Reviews, Images and User Content

If you voluntarily submit a product review, testimonial, photograph, video or other content, we may collect the information contained in that submission.

We will handle personal information contained in such submissions in accordance with this Privacy Policy.

We will not use identifiable customer photographs or testimonials for promotional purposes beyond the permissions provided by the customer or otherwise permitted by law.

18. Social Media

If you interact with DermapleX through social-media platforms, those platforms may independently collect and process information about you.

Your use of those platforms is subject to their respective privacy policies.

Information you intentionally make publicly available through social media may also be visible to DermapleX and other users.

19. Third-Party Websites

Our Website may contain links to third-party websites or services.

DermapleX is not responsible for the privacy practices of independent third parties.

We encourage you to review the privacy policy of a third-party service before providing personal information to it.

20. Business Transfers

If DermapleX or Dermaplex Pty Ltd undergoes a merger, acquisition, restructuring, financing, sale of business or assets, or similar corporate transaction, personal information may be transferred as part of that transaction where permitted by law.

Any handling of personal information remains subject to applicable legal requirements.

21. Privacy Complaints

If you have a question or complaint about how DermapleX has handled your personal information, please contact us first using the details below.

Please provide sufficient information for us to investigate your concern.

We will endeavour to investigate and respond within a reasonable period.

If you are not satisfied with our response and Australian privacy law provides you with the right to do so, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

Information about privacy rights and complaints is available from the Office of the Australian Information Commissioner.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including where our business practices, Website, technology or legal obligations change.

The latest version will be published on our Website and the “Last updated” date will be amended accordingly.

We encourage customers to review this Policy periodically.

23. Australian Privacy Rights

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to DermapleX, nothing in this Policy is intended to restrict rights available under those laws.

The Australian Privacy Principles establish standards relating to matters including collection, use and disclosure, data quality and security, and individuals' rights to access and correct their personal information.