Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Mr Winston Australia (operating mrwinstonco.au) collects, uses, stores, discloses and protects personal information. We are committed to handling your information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using this website, placing an order, or submitting any information through our forms, you agree to the practices set out in this Policy.

1. Information We Collect

We collect personal information that is reasonably necessary for the operation of our online retail business. The categories of information collected include:

  • Identity and contact details — name, email address, postal address, phone number
  • Order and transaction records — items purchased, order history, dispatch and delivery records
  • Payment information — processed exclusively through our secure third-party payment partner; we do not store full credit card numbers or CVV details on our servers
  • Account credentials — if you create an account, we store your login email and a hashed (encrypted) version of your password
  • Communications — emails, customer service correspondence, and any feedback or queries you submit
  • Technical and usage data — IP address, browser type, device type, pages visited, referral source, time spent on site, collected automatically via cookies and analytics tools

2. How We Collect This Information

Information is collected directly from you when you place an order, register an account, subscribe to our newsletter, complete a contact form, or otherwise interact with the website. Technical data is collected automatically through cookies, server logs, and analytics platforms.

3. Why We Collect It (Purposes of Use)

Your information is used to:

  • Process and dispatch your order, including third-party fulfilment and courier handoffs
  • Provide customer service, handle returns, exchanges, and warranty queries
  • Send order confirmations, shipping notifications, and tracking updates
  • Send marketing communications (newsletters, new arrivals, promotions) — only where you have opted in, and you can unsubscribe at any time via the link in every email
  • Operate, secure, monitor and improve the website
  • Comply with legal, tax, accounting and regulatory obligations under Australian law
  • Detect and prevent fraud, payment chargebacks, and unauthorised account access

4. Disclosure to Third Parties

We do not sell, rent, or trade personal information. Limited disclosure occurs only where necessary for service delivery or legal compliance. Recipients include:

  • Payment processors — to authorise and settle transactions
  • Shipping and fulfilment partners — to deliver your order to the address provided
  • Email and marketing platforms — to manage transactional and (opt-in) marketing communications
  • Analytics providers — to understand site usage and improve the experience
  • Law enforcement, regulatory bodies and courts — where disclosure is required by Australian law, court order, or to protect our legal rights

Where any third-party provider is located outside Australia, we take reasonable steps to ensure they handle your information consistently with the Australian Privacy Principles.

5. Cookies and Tracking

The website uses cookies and similar technologies to remember your shopping cart, keep you logged in, measure analytics, and (where you opt in) personalise marketing. You can control or disable cookies through your browser settings — note that disabling them may affect site functionality, particularly checkout.

6. Data Storage and Security

Personal information is stored on secure servers protected by industry-standard measures including SSL encryption, firewalls, access controls, and regular security reviews. While no online system is fully impenetrable, we apply commercially reasonable safeguards proportionate to the sensitivity of the data held.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order records are retained for tax and accounting compliance purposes (typically 7 years under Australian tax law). Account data is retained while your account remains active and for a reasonable archival period after deactivation.

7. Your Rights Under Australian Privacy Law

You have the right to:

  • Access the personal information we hold about you
  • Correct information you believe is inaccurate, incomplete or out of date
  • Withdraw consent for marketing communications at any time (unsubscribe link in every email)
  • Request deletion of your information, subject to legal retention obligations (tax records cannot be deleted before the statutory retention period expires)
  • Lodge a complaint if you believe we have mishandled your information

To exercise any of these rights, email info@mrwinstonco.au with the request and your order number or registered email address. We respond to verified requests within 30 days.

8. Marketing Communications and Spam Compliance

Marketing emails are sent only where you have opted in (account creation, newsletter signup, or checkout opt-in). Every marketing email contains a one-click unsubscribe link, in compliance with the Spam Act 2003 (Cth). Transactional emails (order confirmations, shipping notifications, customer service replies) are sent regardless of marketing preference, as they are not marketing communications.

9. Children’s Privacy

The website and store are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact info@mrwinstonco.au and we will remove it.

10. Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices, technology, legal requirements or business operations. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be notified via the website or email where appropriate.

11. Lodging a Complaint

If you have a privacy concern, please contact us first at info@mrwinstonco.au so we can attempt to resolve it directly. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Contact

Privacy questions, access requests, deletion requests, or general inquiries: info@mrwinstonco.au.