Privacy Policy

Privacy Policy

Introduction

Smoky Grotto respects your individual privacy parameters and is entirely committed to safeguarding your personal data. This Privacy Policy outlines how our digital platform collects, utilizes, and safely shares your personal telemetry when you browse or finalize a transaction on our store. We ensure that our comprehensive data metrics remain clear, transparent, and fully aligned with your legal consumer rights.

Information We Collect

We log specific operational datasets to secure, provide, and continually optimize our fulfillment infrastructure:

• Device Parameters: When you navigate our storefront, our system automatically catalogs details regarding your connection hardware, including your IP address, browser classification, local time zone configurations, and analytical tracking concerning the specific catalog pages or products you examine.
• Transactional Information: When you complete a purchase, we gather the specific billing records required to execute fulfillment, including your full name, authorized billing address, logistics shipping destination, payment telemetry signatures (explicitly excluding full credit card numbers), email address, and active telephone number.

How We Use Your Information

We deploy the recorded informational metrics strictly for the following operational workflows:

• Order Fulfillment: To process secure transactions, manage logistics routing via vetted carrier partners, and provide verified invoices or digital order confirmations.
• Customer Care Communication: To respond directly to support tickets, send administrative shipping updates, and deliver transactional alerts regarding your parcel status.
• Security & Fraud Monitoring: To evaluate incoming orders for potential risk metrics or fraudulent indicators, ensuring the security and operational integrity of our digital infrastructure.

Sharing Your Personal Information & Zero-Sale Policy

We share your data parameters with vetted third-party operational entities solely to assist us in performing our core fulfillment operations as described above. For instance, we transfer your shipping address to trusted logistics and parcel carriers (such as Australia Post, Sendle, or Toll) to handle final delivery:

• Zero-Sale Policy: We enforce a strict commercial boundary: we do not sell, rent, trade, or leak your personal information to external third parties for marketing, profiling, or standalone commercial objectives.
• Statutory Disclosures: We may release necessary informational records to maintain full compliance with applicable laws, respond to a valid subpoena, warrant, or other legal demands for information verified by legal authorities, or to protect our essential proprietary rights.

Payment Security & PCI-DSS

• PCI-DSS Compliance: Our payment gateway is fully validated under the Payment Card Industry Data Security Standard (PCI-DSS). We do not capture, process, or store your complete credit instrument numbers on our local databases.
• SSL Encryption: All critical billing data transmitted during our digital checkout is encrypted via Industry Standard SSL technology.
• Transaction Records: We hold only your standard billing coordinates, basic profile metrics, and the final four digits of your payment card to verify transactions, match bank records, and process eligible refunds.

Cookies & Operational Telemetry

• Cookies: We deploy functional data cookies to record standard browsing behavior. These technical cookies assist us in tracking active items in your digital cart and evaluating web traffic volumes. You maintain the option to deactivate cookies via your local browser preferences, though this may restrict specific storefront features.
• Advertising Metrics: We do not utilize your private personal information to perform targeted or behavioral advertising tracks.

Your Rights & Legal Compliance

Our internal operations maintain compliance with the Privacy Act 1988 and the underlying Australian Privacy Principles (APPs). As a resident of Australia, you possess the following explicit data rights:

• Access and Correction: You maintain the right to access the personal information we hold and request that any outdated or inaccurate details be amended or updated.
• Right to Erase: You have the right to request the deletion of your personal records, subject strictly to our mandatory legal requirements to preserve transaction histories for taxation and corporate auditing purposes.
• Complaints: If you believe we have deviated from our privacy responsibilities under the Privacy Act 1988, you can submit a grievance directly to our team via email, or contact the Office of the Australian Information Commissioner (OAIC).

Data Retention & General Protections

• Data Retention: When an order is processed through our gateway, we retain standard Order Information within our corporate archive for historical records unless and until you officially request an extraction of this dataset.
• Protections for Minors: We prioritize general privacy security and do not intentionally capture, maintain, or request personal data from children or minors. If our administrative support identifies that personal records have been inadvertently gathered from a child without verified parental oversight, we will purge that dataset from our active records immediately.