Privacy Policy

Note: This document explains our privacy practices in plain language. It is not legal advice. Australian privacy law can change; you may also wish to read guidance published by the Office of the Australian Information Commissioner (OAIC).

How this Policy maps to the APPs

This Privacy Policy is written to support compliance with the Australian Privacy Principles (APPs) in Schedule 1 to the Privacy Act 1988 (Cth). The sections that follow translate each APP into practical rules for this website. If there is any inconsistency between a summary here and the text of the Act, the Act prevails.

1. Who we are

Organisation / trading name: Shoraxileishrane.world
Postal address: 14/102 Wises Rd, Buderim QLD 4556, Australia
Email: partnership@shoraxileishrane.world
Phone: +61 7 5409 7000

We are the organisation that decides why and how personal information is handled when you use this website, our enquiry forms, and related email correspondence.

2. Australian Privacy Principles (APP) checklist for this site

We handle personal information in a way that is designed to align with the Privacy Act 1988 (Cth) and all thirteen APPs where they apply to our activities:

• APP 1 — open and transparent management: this Policy, Cookie Policy, and on-page notices (including AI transparency) explain what we do.
• APP 2 — anonymity and pseudonymity: where lawful and practicable, you may browse without accounts; some technical logs may still be created by infrastructure.
• APP 3 — collection of solicited personal information: we only ask for fields reasonably needed for your enquiry; we limit sensitive information (see Section 3).
• APP 4 — dealing with unsolicited personal information: if we receive information we did not solicit and do not need, we destroy or de-identify it when it is lawful and reasonable to do so.
• APP 5 — notification of collection: collection points (forms, cookies) are described in this Policy and the Cookie Policy.
• APP 6 — use or disclosure: personal information is used for the primary purposes in Section 5 or as otherwise permitted by the Act.
• APP 7 — direct marketing: we comply with direct marketing rules in the Act and with the Spam Act 2003 (see Section 6).
• APP 8 — cross-border disclosure: see Section 7.
• APP 9 — adoption, use, or disclosure of government related identifiers: we do not use your Medicare number or other government identifier as our own internal ID; do not submit full identifiers in web forms.
• APP 10 — quality of personal information: see Section 8.
• APP 11 — security of personal information: see Section 9.
• APP 12 — access: see Section 10.
• APP 13 — correction: see Section 10.

Depending on turnover and other factors, some organisations may fall within the “small business operator” carve-out under the Privacy Act. Regardless, we publish this Policy so you know what to expect. If you are in the European Economic Area or United Kingdom, the GDPR or UK GDPR may also apply to certain processing; contact us if you need information about those rights.

3. What is “personal information” here

Under the Privacy Act, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in material form or not. Examples on this site include:

• Identity and contact details: name, email address, postal address or phone number if you choose to provide them.
• Enquiry content: text you include in forms or emails.
• Technical identifiers: IP address, browser type, device type, referring URL, date/time—often generated in web server or security logs by hosting infrastructure.
• Online identifiers from optional cookies: where analytics or marketing technologies create or read identifiers, we treat those as personal information when they can reasonably identify you (see our Cookie Policy).

We do not ask you to submit sensitive information (for example health information) through this website. Please do not include it in free-text fields unless you choose to; if you do, we will handle it in line with APP 3 where the Act applies.

4. How we collect personal information

We collect information:

• Directly from you when you submit forms, send email, or call us.
• Automatically through hosting, security, or (if you consent) analytics tools.

We do not buy marketing lists containing personal information for use on this site.

5. Why we collect, hold, use, and disclose it (primary purposes)

We collect and use personal information for purposes that are reasonably necessary for our functions, including to:

• respond to enquiries and manage correspondence;
• operate, secure, and improve the website;
• meet legal and regulatory obligations (including record-keeping where required);
• assess and manage privacy complaints and data incidents;
• where you have agreed, send low-frequency informational or promotional email consistent with the Spam Act 2003 (Cth) (identify sender, include unsubscribe or consent withdrawal mechanism, and honour opt-outs promptly).

We will not use or disclose personal information for a secondary purpose unless an exception under the Privacy Act applies (for example you consent, or the use is required or authorised by law).

We do not use enquiry data to infer health conditions, to target regulated therapeutic goods, or to build advertising profiles for healthcare categories. The site is an editorial lifestyle resource, not a clinic or pharmacy.

6. Direct marketing and commercial electronic messages

If we send commercial electronic messages to Australian email addresses or Australian-linked services, we will comply with the Spam Act 2003, including clear identification of the sender, a functional unsubscribe or preference facility where the Act requires it, and prompt action on withdrawal of consent. Hero and contact forms that only route you to our contact page are not themselves bulk marketing systems; any future newsletter will be described separately at the point of subscription.

7. Overseas disclosure (APP 8)

Some technology suppliers may process or store data outside Australia (for example email, DNS, or content delivery). Where we disclose personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure the overseas recipient does not breach the APPs, unless an exception in APP 8.2 applies. You may ask us which countries are involved for your enquiry and what safeguards we rely on.

8. Quality of personal information (APP 10)

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, and complete. Please let us know if your contact details change.

9. Security and data breaches (APP 11 and NDB scheme)

We take reasonable steps to protect personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. Measures may include access controls on mailboxes, minimisation of data fields, patching hosting software where our provider allows, and using encryption in transit (such as HTTPS/TLS) where supported.

If we become aware of a data breach that is likely to result in serious harm to individuals and the incident meets the statutory threshold, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act, including assessment, notification to affected individuals and the OAIC where required, and remedial steps. You may read the OAIC’s guidance on data breach preparation and response on the OAIC website.

10. Access and correction (APPs 12 and 13)

You may request access to personal information we hold about you, and request correction if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond within a reasonable period (typically within 30 days for Australian requests, depending on complexity). If we refuse access or correction, we will explain the reasons that apply under the Privacy Act and how you may complain.

11. Complaints

If you believe we have interfered with your privacy, please contact us first using the details above so we can try to resolve the matter. We will acknowledge receipt and aim to respond within a reasonable time. If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC’s website sets out how to make a privacy complaint under the Privacy Act.

12. Retention and destruction

We retain personal information only for as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law (for example litigation holds, tax, or regulatory records). As a guide, routine enquiry records may be kept for up to twelve months unless a longer period applies. When information is no longer required, we take reasonable steps to destroy or de-identify it, subject to technical limitations of hosted backups.

13. Cookies and similar technologies

Details of categories, legal bases where relevant, and browser controls are set out in our Cookie Policy, which should be read together with this document. If you enable optional marketing cookies, they may be used to support aggregated measurement of advertising on this domain (for example conversion or attribution statistics from ad networks); we still do not use form submissions to build health-related advertising profiles.

14. Children and young people

Content on this site is aimed at adults. We do not knowingly collect personal information from children without appropriate authority. If you believe we have received information from a child in error, contact us and we will take steps to delete it where appropriate.

15. Automated systems, algorithms, and artificial intelligence (transparency)

Australian regulators, including the OAIC, expect organisations to be clear about automated processing that affects individuals. In line with contemporary expectations for algorithmic transparency (including guidance relevant to 2025–2026 digital services), we disclose the following:

• No public AI “consultation” chat on this domain. We do not operate a generative-AI chatbot on this website for health, legal, or product advice. If we introduce an interactive assistant in future, we will describe it here and in the cookie banner where applicable, explain what data it logs, and how to opt out or delete logs subject to law.
• Generative-AI imagery and staging. If we publish photographs, room mock-ups, product panelling, or hero art that are materially created, inpainted, or re-rendered using generative artificial intelligence tools, we label them in proximity to the image (for example “AI-assisted image” or “Includes AI-generated elements”) and record the label in our internal style guide so the same standard applies site-wide.
• Text and layout. Editorial articles may be drafted or edited with automated writing assistance. We still review content for accuracy and tone before publication. We do not claim that any automated tool has verified medical or therapeutic facts.
• Personal information. If a future AI feature processes personal information you provide (for example a support chat), that processing will be covered by this Policy, limited to the stated purpose, and subject to access, correction, and complaint rights under the APPs.
• No solely automated decisions with legal effect. We do not make decisions with legal or similarly significant effect about you based solely on automated processing without human review.

If you believe an image or feature should carry an AI label but does not, please contact us with the page URL so we can correct it promptly.

16. Changes to this Policy

We may update this Policy to reflect operational, legal, or regulatory changes. The “Effective date” at the top of the page will be revised when we publish a material update. Continued use of the site after changes are posted indicates your acceptance of the updated Policy, subject to your rights under the Privacy Act.

Privacy questions Cookie Policy