Accounts and orders
We use your email address to manage your account and send service emails. Supabase handles authentication; we do not store your password in plain text.
We keep order items, prices, fulfilment status and the contact or delivery details you provide. Stripe processes card payments. We do not receive your full card number or security code.
Wholesale enquiries
We store the name, business, email, products, quantity and notes you submit so our team can reply and manage your enquiry. Enquiry records are available only to approved shop administrators.
An enquiry is not an order or a marketing subscription. We send an operational notification to our support inbox and keep follow-up status and notes. Contact our privacy address to request access, correction or deletion.
Stock alerts and marketing
A stock alert requires email confirmation and sends one availability email for the selected product. It does not reserve stock or subscribe you to marketing. You can unsubscribe using the link in the email.
Marketing email is a separate choice and is off by default. Guest newsletter signups require confirmation before becoming active; the welcome email includes an unsubscribe link. Account holders can also control marketing under Your account. We keep the subscription address and consent status to deliver or stop these emails, and you can ask us to erase the record.
Product reviews
A signed-in customer can review a product after a real paid order for it has been fulfilled. We publish the rating, review title and text, the display name the customer chose, and the review date. We do not publish their email, address or order number.
Reviews are checked for spam, personal details, abuse and relevance. Positive and negative genuine feedback are welcome. Contact our privacy address if your review needs correction or removal.
Optional analytics
Optional analytics are off until you choose Allow analytics. Declining does not stop you shopping or using your account. Use Cookie preferences in the footer to change your choice. We also respect Global Privacy Control and Do Not Track.
When enabled and accepted, Google Analytics 4 measures public page and product views, shopping actions and completed purchase events. It uses cookies and processes device/browser information and approximate location. We disable advertising personalisation and Google signals.
We do not include your name, email, phone number, delivery address, password, search text, account identifier, private order identifier or sign-in links in analytics event payloads. Public page URLs and referrers are stripped of private queries and fragments. Purchase events use a separate pseudonymous transaction reference.
Google explains its processing at https://policies.google.com/technologies/partner-sites. Browser settings, blockers and consent choices mean analytics do not count every visitor.
Optional account activity
With analytics allowed, we may record pseudonymous product activity in our Supabase database to understand demand. A random browser identifier is used for this purpose.
Saving that activity to your signed-in account is a separate personalisation option and is off by default. Turning personalisation off stops account activity recording and deletes the activity linked to your account. Marketing consent remains separate.
Your account can download up to 500 recent activity records. Contact us for a broader access or deletion request. Activity is retained for up to 14 months and removed by scheduled maintenance. Order records may be retained longer for tax, accounting and consumer-law obligations.
Essential browser storage
The shop uses browser storage for authentication sessions, your bag, saved products, checkout continuity and privacy choices. These are separate from optional analytics. Hosting and security providers may process technical request data to operate and protect the service.
Service providers
Our providers include Supabase for accounts and store data, Stripe for payments, Resend and Synergy Wholesale for email, Vercel for hosting, and Google Analytics for optional measurement. They may process information outside Australia under their own terms. We do not install advertising pixels or sell personal information.
Access, correction and complaints
Email privacy@optimizenutrition.com.au to request access to, correction of, or deletion of your information, or to make a privacy complaint. You can also view your own orders under Your account.
You may contact the Office of the Australian Information Commissioner at oaic.gov.au if you are not satisfied with our response.