MHL COSMETIC PTY LTD (ABN 22 677 237 295) handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, and what you can ask us to do about it.
We only collect what we need to sell and deliver beauty products to you. If you place an order, that is:
If you tell us your skin type, concerns or shade match so we can help you choose, we use that to answer your question and to process the order. We do not treat it as health information, we do not build a profile from it, and we do not use it to target advertising.
We do not store your full card number, expiry or security code on our servers. Card details are validated in your browser and never form part of what our order API accepts. If you pay by bank transfer, the only payment data we hold is the reference on your order and the fact that funds were received.
We use a session cookie to keep you signed in to your account, and a separate cookie for staff signed in to our admin area. Your shopping bag is stored in your browser's local storage, not on our servers, until you place an order.
We do not run third-party advertising or cross-site tracking on this site.
To take payment, arrange delivery, issue your tax invoice, honour returns and consumer guarantees, and respond when you contact us. We use it for nothing else without asking you first.
We share the minimum necessary with the courier carrying your parcel and with our bank to process payment. We do not sell your personal information, and we do not share it for marketing.
Order and invoice records are retained for the period Australian tax and consumer law require. You can ask us to close your account at any time; we will remove your account details while retaining the transaction records we are obliged to keep.
You can ask for a copy of the personal information we hold about you, ask us to correct it, or make a privacy complaint by emailing privacy@mhlcosmetic.com or calling (+61) 426 360 197. We will respond within a reasonable period.
If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner.
This site is served over TLS, passwords are stored hashed, and access to order data is restricted to authorised staff. No system is perfectly secure, but we take reasonable steps to protect what we hold.