Privacy Policy

1. Who We Are

This Privacy Policy applies to Harbor Wellness Pty Ltd (ABN 00 000 000 000), operator of The Harbor Journal website at elegantbrflora.world ("we", "us", "our"). We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact: privacy@elegantbrflora.world

2. What Personal Information We Collect

We may collect the following categories of personal information:

• Order information: Full name and phone number submitted via our order form.
• Contact form data: Name, email address and message content.
• Usage data: IP address, browser type, pages visited, time on site - collected automatically via analytics and advertising cookies (where consented).
• Cookie identifiers: Advertising and analytics identifiers set by Google services (see Section 6).

We do not collect sensitive information (as defined in the Privacy Act) such as health records, racial or ethnic origin, or financial account details, unless you voluntarily provide it in a message.

3. How We Use Your Personal Information

We use personal information for the following purposes:

• To process and fulfil orders for Hardero food supplement (name and phone for COD delivery coordination).
• To respond to contact form enquiries and customer service requests.
• To improve our website and editorial content through aggregated analytics.
• To deliver relevant advertising (only with your explicit consent via our cookie banner).
• To comply with legal obligations and resolve disputes.

4. Legal Basis for Processing

Under Australian Privacy Principles, we rely on the following bases for processing your personal information:

• Contract performance: Processing order information to fulfil your purchase of Hardero.
• Legitimate interests: Operating and improving our website; responding to enquiries.
• Consent: Delivering personalised advertising and analytics (consent collected via cookie banner, withdrawable at any time).
• Legal obligation: Compliance with Australian law.

5. How We Share Your Information

We do not sell your personal information. We may share it with:

• Delivery and logistics partners - to fulfil your order (name, phone, delivery address).
• Google LLC - analytics and advertising services (see Section 6). Google may process data in the United States under appropriate safeguards (Google's standard contractual clauses and EU-US Data Privacy Framework equivalents).
• Legal authorities - where required by Australian law or court order.

6. Google Services - Ads, Analytics & Consent Mode

Our website uses Google Ads and Google Analytics services. We implement Google Consent Mode v2, which means that by default, all advertising and analytics data collection is denied until you provide explicit consent via our cookie banner. Specifically:

• ad_storage, ad_user_data, ad_personalization, and analytics_storage are set to DENIED by default.
• Only functionality_storage and security_storage are granted by default.
• Upon your acceptance, these categories are updated to GRANTED and Google Ads remarketing and Analytics measurement become active.

Google's privacy policy is available at policies.google.com/privacy. You may opt out of Google Analytics measurement at any time via tools.google.com/dlpage/gaoptout.

Cookies placed by Google services may include _gcl_au (Google Ads conversion linker), _ga and _gid (Google Analytics).

7. Data Retention

Order information is retained for 7 years in accordance with Australian tax and record-keeping obligations. Analytics data is retained in Google Analytics for up to 26 months. Contact form data is retained for 12 months or until your enquiry is resolved, whichever is shorter. You may request deletion at any time (see Section 9).

8. International Transfers

Some of your data may be transferred to and processed in the United States (Google LLC) under Google's standard contractual clauses and equivalent safeguards. Where data is transferred internationally, we take reasonable steps to ensure it receives a standard of protection comparable to Australian Privacy Principles.

9. Your Rights Under the Australian Privacy Act

Under the Privacy Act 1988 (Cth) and Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your data (subject to legal retention obligations).
• Withdraw consent for analytics and advertising cookies at any time via our cookie banner or by emailing us.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have not handled your personal information in accordance with the Privacy Act. The OAIC can be contacted at oaic.gov.au or by calling 1300 363 992.

To exercise any of these rights, contact us at privacy@elegantbrflora.world. We will respond within 30 days.

10. Cookies

We use cookies to operate our website, analyse traffic and (with consent) deliver relevant advertising. For full details, including how to manage your cookie preferences, see our Cookie Policy.

11. Security

Our website uses HTTPS encryption. We implement reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration or destruction. No data transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Children

This website is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a child has submitted personal information, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "last updated" date. Continued use of the website after changes constitutes acceptance of the updated policy.

14. Contact

Harbor Wellness Pty Ltd
Level 12, 75 George Street, Sydney NSW 2000, Australia
Email: privacy@elegantbrflora.world
Phone: +61 2 9000 0000