Privacy policy
Last Updated: 1 July 2026
Ultra Spray ("Ultra Spray", "we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal information we collect when you visit our website or purchase from us, how and why we use it, who we share it with, and the rights you have in relation to it. It is issued in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), and, for our New Zealand customers, the Privacy Act 2020 (NZ) and the Unsolicited Electronic Messages Act 2007 (NZ).
1. Who We Are
Ultra Spray is the entity responsible for your personal information. Our website is hosted on the Shopify platform, and Shopify Inc. processes information on our behalf as our service provider. For any privacy query or to exercise your rights, contact us at support@ultraspray.co or write to the address at the end of this Policy.
2. Personal Information We Collect
Information you provide to us
- Identity and contact information: name, email address, telephone number, billing and delivery address
- Order information: products purchased, order history, delivery instructions
- Payment information: payment method and confirmation, the last four digits of your card and card type. Full card details are collected and processed directly by our payment providers and are never stored on our systems.
- Communications: messages you send through our contact channels, reviews and customer service correspondence
- Account information, if you create an account: login credentials and saved preferences
Information we collect automatically
- Technical information: IP address, browser type and version, device identifiers, operating system, time-zone setting
- Usage information: pages viewed, products browsed, referral source, time spent on site and interactions, collected via cookies and similar technologies (see section 6)
Information we receive from third parties
- Fraud screening results and payment confirmations from Shopify Payments, Stripe and other payment providers
- Delivery status updates from Australia Post, New Zealand Post and other carriers
- Analytics and advertising information from platforms such as Google and Meta
We do not collect sensitive information (such as health, religious or biometric information) and ask that you do not send it to us. Where you provide information about another person (for example, a gift recipient), you confirm that you are authorised to do so.
3. How We Use Your Information
| Purpose | Basis |
|---|---|
| Processing and delivering your order, taking payment, managing returns and refunds | Primary purpose of collection (APP 6) |
| Providing customer support and responding to enquiries | Primary purpose; reasonably expected related purpose |
| Verifying identity, screening for fraud and securing our website and payment systems | Reasonably expected related purpose; legal obligation |
| Keeping accounting, tax and transaction records | Legal obligation (including under Australian tax law) |
| Sending order confirmations, dispatch notices and service messages | Primary purpose of collection |
| Sending marketing emails about our products to existing customers | Inferred consent under the Spam Act 2003 / Unsolicited Electronic Messages Act 2007, with a functional unsubscribe in every message |
| Sending marketing to prospective customers or by SMS | Express consent |
| Analytics, personalisation and advertising | Reasonably expected related purpose; you can opt out as described in section 6 |
| Publishing reviews you submit | Consent |
| Establishing, exercising or defending legal claims, including payment disputes | Reasonably expected related purpose; legal obligation |
You may unsubscribe from marketing at any time using the link in any email or by contacting us. We will action unsubscribe requests within 5 business days.
4. Automated Decision-Making
Our payment providers use automated fraud-screening tools to assess transactions. A transaction may be declined as a result. If you believe an order has been wrongly declined, contact us and a member of our team will review the decision.
5. Who We Share Your Information With
We share personal information only with service providers who need it to perform services for us, under arrangements that require them to protect it:
- E-commerce platform: Shopify Inc. and its affiliates (hosting, checkout and order management)
- Payment processors: Shopify Payments (operated by Stripe), Stripe Payments Australia Pty Ltd, and any other payment method you choose at checkout, such as PayPal, Apple Pay or Google Pay
- Delivery partners: Australia Post, New Zealand Post and other carriers
- Email, marketing and customer support platforms
- Analytics and advertising providers
- Professional advisers: accountants, lawyers, insurers and IT security providers
- Regulators, law enforcement and courts: where required by law or to protect our legal rights, including responding to payment disputes and chargebacks
We do not sell your personal information and do not share it with third parties for their own marketing purposes.
6. Cookies and Online Tracking
We use strictly necessary cookies to operate the website and checkout. We also use analytics, functional and advertising cookies to understand how the site is used and to show relevant advertising. You can manage cookies through your browser settings, opt out of interest-based advertising through the Google and Meta ad settings, and, where a cookie banner is shown, adjust your preferences there. Disabling some cookies may affect how the website works.
7. Overseas Disclosure
Some of our service providers store or process information outside Australia and New Zealand. In particular, Shopify processes information in Canada, the United States and Ireland, and Stripe processes information in the United States and Ireland. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects it in a way that is substantially similar to the Australian Privacy Principles and the New Zealand Information Privacy Principles, including through contractual commitments. By placing an order you acknowledge that your information will be handled by these providers in those locations.
8. How Long We Keep Your Information
| Information | Retention period |
|---|---|
| Order, payment and transaction records | 5 years from the transaction (Australian Taxation Office requirement) |
| Customer account information | For the life of the account, then deleted 2 years after last activity |
| Customer service correspondence | 3 years from resolution |
| Marketing preferences | Until you unsubscribe; suppression record kept indefinitely to honour your opt-out |
| Website analytics information | As set by the analytics provider, typically up to 26 months |
When information is no longer required for any purpose for which it may be used or disclosed, it is securely destroyed or de-identified.
9. Your Rights
You have the right to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading. New Zealand customers have the same rights under the Privacy Act 2020. You may also ask us to delete information we no longer need, object to direct marketing at any time, and withdraw any consent you have given. We do not charge for access or correction requests and will respond within 30 days. We may ask you to verify your identity before acting on a request. If we refuse a request, we will tell you why in writing and how you can complain.
To exercise any right, email support@ultraspray.co.
10. Security and Data Breaches
We apply appropriate technical and organisational measures to protect your information, including TLS encryption across the website, PCI DSS-compliant payment processing through our providers, access controls and staff confidentiality obligations. No online system is entirely secure. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (or, for New Zealand customers, the Office of the Privacy Commissioner) as required by the Notifiable Data Breaches scheme and the Privacy Act 2020.
11. Children
Our website and products are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe we have done so, contact us and we will delete it.
12. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for their content or privacy practices, and this Policy does not apply to them.
13. Complaints
If you have any concern about how we handle your personal information, please contact us first at support@ultraspray.co. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992. New Zealand customers may complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.
14. Changes to This Policy
We may update this Policy from time to time. The current version, with its effective date, is always published on this page, and we will notify you of any material change by email or a notice on the website.
15. Contact Us
Ultra Spray
69 Prestige Parade, Wangara, Western Australia 6065, Australia
Email: support@ultraspray.co