Privacy Policy

1. Scope

This Policy applies to MIK Consulting Services Pty Ltd (ABN: 12 611 317 349), trading as Make Good Choices (referred to as ‘we’, ‘us’, or ‘our’) and covers:

• all personal information we collect through our website makegoodchoices.com.au;
• personal information provided when you make a purchase or create an account;
• personal information collected through customer service interactions; and
• personal information held about our employees, contractors, and third-party service providers.

This Policy does not apply to information that is publicly available, or to the independent privacy practices of third-party websites linked from our Site.

2. What Personal Information We Collect

We collect personal information that is reasonably necessary for our business operations. The types of information we may collect include:

2.1 Information You Provide to Us

• Your name, delivery address, email address, and phone number when placing an order or creating an account.
• Your email address (and your first name, if you choose to give it) when you subscribe to our newsletter.
• Payment information (processed securely through our payment gateway — we do not store full card details).
• Communications you send us, including emails and support enquiries.
• Messages and reviews you submit through our Site, including through our contact form, and any details you include in them.

2.2 Information Collected Automatically

• Technical information about your device and browser (such as IP address, browser type, and operating system).
• Website usage data, including pages visited, time spent on the Site, and referring URLs, collected through cookies and similar technologies.
• Transaction history and order data associated with your account.

2.3 Information From Third Parties

• Order fulfilment and shipping data from our fulfilment partner, Printful, Inc.
• Payment verification data from our payment processing provider.

3. How We Use Your Personal Information

We collect and use your personal information only for purposes directly related to our business activities, including:

• Processing, fulfilling, and delivering your orders.
• Communicating with you about your orders, account, or enquiries.
• Providing customer support and resolving complaints.
• Marketing: Sending you promotional emails or newsletters about our products and offers, where you have consented or where permitted under the Spam Act 2003 (Cth). You can opt out at any time.
• Improving our website and product offerings through analytics.
• Complying with our legal obligations under Australian law.
• Detecting and preventing fraud or other security issues.

We will not use your personal information for a purpose that is unrelated to why it was collected without your consent, unless otherwise required by law.

4. Disclosure of Personal Information

We may share your personal information with third parties in the following circumstances:

4.1 Fulfilment and Service Providers

We share necessary personal information (name, delivery address, and order details) with our print-on-demand fulfilment partner, Printful, Inc., for the sole purpose of producing and delivering your order. We also share information with the service providers that help us run our website and business, strictly to deliver our services. These include Squarespace (which hosts our website and online store and sends our newsletter through Squarespace Email Campaigns), our payment processors, and our website analytics providers.

4.2 Legal Requirements

We may disclose personal information where required or authorised by Australian law, including in response to a court order, subpoena, or request from a regulatory authority such as the Office of the Australian Information Commissioner (OAIC) or a law enforcement agency.

4.3 Business Transfers

If Make Good Choices is sold or merged with another entity, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure the receiving party maintains equivalent privacy protections.

5. International Data Transfers

Some of the businesses we use are based overseas, so your personal information may be processed or stored outside Australia. Our fulfilment partner, Printful, Inc., is based in the United States and may process your information there and in other countries where it produces or ships orders. Our website platform and some of our other service providers (such as our payment, email and analytics providers) may also store or process information in the United States and other countries.

We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles (APPs), including through contractual protections and data processing agreements. However, you should be aware that overseas entities may be subject to foreign laws that do not provide the same level of protection as Australian law.

If you are outside Australia, we handle your information as described in this Policy. Depending on where you live, you may also have rights under your local privacy laws, and we will comply with those laws where they apply to us.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how our Site is used. Cookies are small text files stored on your device.

We use cookies for the following purposes:

• Essential cookies: Required for the Site to function, including maintaining your shopping cart and session.
• Analytics cookies: Help us understand Site usage and improve our content (e.g., Google Analytics).
• Marketing cookies: Used to deliver relevant advertising, where you have consented.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of our Site. For more information, refer to the help section of your browser.

7. Data Security

We take reasonable technical and organisational steps to protect your personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure. These measures include:

• Secure HTTPS encryption across our website.
• Payment card data processed through PCI DSS-compliant payment gateways.
• Access controls limiting who can access personal information within our business.
• Contractual data security obligations imposed on our third-party service providers.

No method of data transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. If you have concerns about a potential breach, please contact us immediately at mik@makegoodchoices.com.au.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Australian law. Our general retention approach is:

• Order and transaction records: Retained for a minimum of 7 years to meet tax and accounting obligations under Australian law.
• Account information: Retained while your account remains active and for a reasonable period thereafter.
• Marketing preferences: Retained until you withdraw consent or unsubscribe.
• Website analytics data: Retained in aggregated or anonymised form for ongoing analysis.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

9. Your Privacy Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to your personal information:

9.1 Access

You have the right to request access to the personal information we hold about you. We will respond to access requests within a reasonable timeframe (generally within 30 days) and will not charge a fee for making the request, although we may charge a reasonable fee for providing access.

9.2 Correction

If you believe any personal information we hold about you is inaccurate, out of date, incomplete, or misleading, you may request that we correct it. We will take reasonable steps to correct the information promptly.

9.3 Withdrawal of Consent

Where we process your personal information based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.4 Deletion

You may request deletion of your personal information where we no longer have a legal or legitimate basis for retaining it. Note that some information may need to be retained to comply with legal obligations (e.g., financial records).

9.5 How to Make a Request

To exercise any of the above rights, please contact us at mik@makegoodchoices.com.au or via our website at makegoodchoices.com.au. We will acknowledge your request within 5 business days and respond in full within 30 days.

10. Notifiable Data Breaches

We follow the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth) as a matter of good practice, whether or not we are legally required to. If we become aware of an eligible data breach that is likely to result in serious harm to any individual whose information is involved, we will:

• Conduct a prompt assessment of the breach (within 30 days of becoming aware).
• Notify affected individuals as soon as practicable.
• Notify the OAIC by submitting a breach notification.

We maintain an internal data breach response procedure to ensure timely and appropriate action. If you believe your personal information held by us may have been compromised, please contact us immediately at mik@makegoodchoices.com.au.

11. Marketing and Spam Act Compliance

Where we send you commercial electronic messages (such as promotional emails), we do so in compliance with the Spam Act 2003 (Cth). This means:

• We will only send commercial messages to you with your consent (express or inferred).
• Every commercial message will clearly identify Make Good Choices as the sender.
• Every commercial message will include a functional unsubscribe mechanism.
• We will action unsubscribe requests promptly (within 5 business days).

To unsubscribe from marketing communications, click the unsubscribe link in any email we send, or contact us directly at mik@makegoodchoices.com.au.

12. Roles and Responsibilities

Responsibility for privacy compliance at Make Good Choices is allocated as follows:

13. Definitions

14. Updates to This Policy

We review and update this Privacy Policy at least annually, or sooner where there are material changes to our business, the law, or our privacy practices. When we update this Policy, we will revise the ‘Last Updated’ date at the top of this document.

Where changes are material, we will notify you by email (if you have an account with us) or by displaying a notice on our Site. Your continued use of our Site after the updated Policy has been posted constitutes your acceptance of the updated Policy.

15. Governing Law

This Policy is governed by the laws of the State of Queensland, Australia. Any disputes relating to this Policy will be subject to the non-exclusive jurisdiction of the courts of Queensland and the applicable federal courts of Australia.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us: