Privacy Policy

When you order

• Name, email address, phone number
• Shipping and billing address
• Order history and subscription details
• Payment confirmation — we receive confirmation that a payment succeeded and the last four digits of the card. We never see or store your full card number.

When you contact us or apply to be a stockist

• Name, email, business name and the details you choose to include in your message

When you subscribe to emails

• Email address, and whether you opened or clicked our emails

When you use our site

• IP address, browser and device type, pages viewed, referring site, and how you moved through the site
• Cookies and similar technologies (see section 6)

When you leave a review

• Your name as you give it, your rating and your review content, and whether the order was verified

We do not collect sensitive information as defined in the Privacy Act — we do not ask about your health, and you should not send us health information. If you do include it in a message to us, we use it only to answer that message and delete it when the matter is closed.

• To process, ship and track your order
• To manage subscriptions and take recurring payments
• To answer your questions and handle returns
• To send marketing emails, where you have consented
• To publish reviews on our product pages
• To measure and improve our site and advertising
• To detect and prevent fraud
• To meet our legal and tax obligations

We do not collect personal information we do not need, and we do not sell your personal information.

We share personal information with service providers who help us run the business. Each of them only receives what they need.

• Shopify — Our store platform, checkout, subscriptions and customer accounts · Canada, United States and other regions
• Klaviyo — Email marketing and subscriber management · United States
• Judge.me — Product reviews · United States and other regions
• Meta (Facebook, Instagram) — The Meta Pixel measures our advertising and builds audiences · United States
• Payment providers — Process your payment · Australia and overseas
• Couriers — Deliver your order · Australia and New Zealand

We may also disclose information where the law requires it, to enforce our terms, or as part of a sale or restructure of the business — in which case we would tell you.

Any other app we install that handles personal information will be added to this list.

Several of our providers store data outside Australia, mainly in the United States, and in Shopify's case also in Canada and the European Union.

Before disclosing your information to an overseas recipient, we take reasonable steps to make sure they handle it consistently with the APPs, including through their contract terms. By ordering from us, you acknowledge that your information will be handled overseas as described here, and that overseas recipients may not be subject to Australian privacy law.

We send marketing emails only where you have given consent, or where you are an existing customer and would reasonably expect to hear from us about similar products.

Every marketing email includes an unsubscribe link, and we act on unsubscribes within 5 business days, as required by the Spam Act 2003 (Cth). Unsubscribing from marketing does not stop transactional emails about an order you have placed — those are not marketing.

We use cookies and similar technologies to keep your cart working, remember your preferences, measure how the site is used, and measure our advertising through the Meta Pixel.

You can block or delete cookies in your browser settings. Some parts of the site — the cart in particular — will not work properly without them. You can also limit ad tracking in your Meta account settings and in your device settings.

We use encrypted connections (HTTPS), access controls, and providers who maintain their own security standards. Payment data is handled by PCI-DSS compliant providers and never touches our own systems.

No system is completely secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

• Order and tax records: at least 5 years, as required by Australian tax law
• Marketing subscribers: until you unsubscribe, and for a short period afterwards to make sure we do not email you again
• Enquiries: up to 2 years after the matter is closed
• Site analytics: generally up to 26 months

We destroy or de-identify personal information once we no longer need it and are not required to keep it.

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong or out of date; or
• delete your information, where we are not required to keep it.

Email info@usebreathy.com. We will verify your identity, and we respond within 30 days. There is no charge. If we refuse a request, we will tell you why in writing and how to complain.

Our site and products are sold to people 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.

We may update this policy as our business or the law changes. The current version is always on this page, with the date of the last update at the top. Where a change is significant, we will tell you by email or a notice on the site.