Privacy Policy

Privacy Policy – BestSmoke

Last updated: September 11th, 2025
BestSmoke (“we”, “us”, or “our”) operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the “Services”). BestSmoke is powered by Woocommerce, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, hold, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, handling, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand our practices regarding your personal information as described herein.

1. Personal Information We Collect

Under the Australian Privacy Act, “personal information” is information or an opinion about an identified individual, or an individual who is reasonably identifiable. We may collect the following categories of personal information depending on how you interact with the Services:

• Contact Details: Including your name, residential/billing address, shipping address, phone number, and email address.
• Financial Information: Including credit card, debit card, or other financial account numbers, transaction details, form of payment, and payment confirmations. (Note: Payments are processed securely via our third-party payment gateways).
• Account Information: Including your username, password, security questions, preferences, and settings.
• Transaction Information: Including the items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, and your purchase history.
• Communications: Any information you include when communicating with us, such as customer support inquiries.
• Device and Usage Information: Information about your device, browser, network connection, IP address, unique identifiers, and details regarding how and when you navigate the Services (collected via cookies and similar technologies).

2. How We Collect Personal Information

We collect personal information through several primary methods:

• Directly from You: When you create an account, make a purchase, subscribe to marketing, or communicate with us.
• Automatically: As you navigate our website, via cookies, log files, and web beacons.
• From Third Parties: From our service providers (like Woocommerce), payment gateways, delivery/shipping partners, and marketing or analytics partners.

3. How We Use Your Personal Information

We collect and use your personal information for purposes permitted by law, including to:

• Provide and Customise the Services: To fulfill orders, process payments, arrange shipping, manage your account, facilitate returns/exchanges, and provide a customised shopping experience.
• Marketing and Advertising: To send you marketing communications via email or SMS, and to show you targeted advertisements. You can opt out of direct marketing at any time.
• Security and Fraud Prevention: To authenticate your account, detect and prevent fraudulent, illegal, or malicious activity, and secure our system. You are responsible for keeping your account credentials safe.
• Customer Support: To respond to queries and maintain our business relationship with you.
• Legal Compliance: To comply with applicable Australian laws, respond to lawful requests from government or law enforcement agencies, and protect our legal rights.

4. How We Disclose Personal Information

We may disclose your personal information to third parties for our standard business operations, including:

• Platform and Infrastructure Providers: Third-party service providers who assist in operating our website and business infrastructure (including WordPress hosting, the Cloudflare Content Delivery Network, and secure cloud storage).
• Operational Partners: Courier, freight, or fulfilment providers necessary to deliver products or services to you following your offline payment.
• Professional Advisers: Third parties who perform essential services on our behalf, such as IT support, data analytics, accountants, or legal counsel.
• Corporate Transactions: In connection with a potential or actual merger, sale of business assets, or corporate restructuring.
• Legal Obligations: Where required or authorised by law, a court order, or an Australian regulatory body.

5. Relationship with WordPress and WooCommerce

Our website and store are built on the WordPress platform using the WooCommerce plugin. Unlike closed e-commerce platforms, WooCommerce is self-hosted, meaning your personal information is stored on our secure servers (or those of our third-party web hosting provider) rather than by WooCommerce itself.

We take reasonable steps to ensure that any WordPress plugin developers or hosting entities we engage maintain high security standards that align with our obligations under the Australian Privacy Principles.

6. Overseas Data Transfers

Because we utilise global infrastructure and service providers—such as our website platform, WordPress, and our Content Delivery Network (CDN), Cloudflare—your personal information (including network data and IP addresses) may be routed through, or stored by, overseas recipients. This primarily includes infrastructure located in the United States, as well as other global server locations.

When we handle or transfer personal information internationally, we take reasonable steps to ensure that these overseas service providers handle your data in a manner consistent with the Australian Privacy Principles, or that they are subject to legally binding privacy protections equivalent to Australian law.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We recommend checking the privacy policies of any third-party websites you visit.

8. Age Restrictions and Children’s Data

Our Services are not directed to individuals under the legal age required to purchase our products in your state or territory. We do not knowingly collect personal information from children. If a parent or guardian becomes aware that a minor has provided us with personal information, please contact us immediately so we can delete it.

9. Security and Retention

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no internet transmission is 100% secure.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, manage your account, resolve disputes, or comply with our legal and tax obligations.

10. Your Rights: Access and Correction

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you.
• Request correction of your personal information if it is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
• To request access or correction, please contact us using the details below. We will respond to your request within a reasonable timeframe (usually within 30 days). We may need to verify your identity before processing your request.

Direct Marketing Opt-Out: You can opt out of receiving promotional emails or SMS at any time by clicking the “unsubscribe” link included in those messages.

11. Complaints and Contact

If you have any questions, concerns, or a complaint about a breach of the Australian Privacy Principles, please contact our Privacy Officer at:

Email: support@bestsmoke.com.au

We take all complaints seriously and will investigate and respond to your complaint in writing within a reasonable period (typically 30 days). If you are not satisfied with our response, you have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.