1. Who We Are

My Pizza Oven (operating at mypizzaoven.net.au) is a trading division of BuyFactory Direct Pty Ltd, ACN 656 628 938, ABN 30 656 628 938, Suite 307, Norwest Central, 12 Century Circuit, Norwest NSW 2153, Australia.

This Privacy Policy explains how we handle personal information collected through our website and in the course of our business, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We may collect the following categories of personal information:

Identity & Contact Information

• Full name
• Email address
• Phone number
• Billing and shipping address

Transaction Information

• Order details and purchase history
• Payment method (we do not store full card numbers — payment is processed securely by Stripe)
• Delivery tracking information

Technical & Behavioural Information

• IP address and approximate location
• Browser type, device, and operating system
• Pages visited, time on site, and click behaviour
• Referring URL and search terms used to find us
• Cookie identifiers (see Section 6)

Communications

• Emails, enquiries, and support messages you send us
• Product reviews you submit

3. How We Collect Information

We collect personal information:

• Directly from you — when you place an order, contact us, or subscribe to marketing communications
• Automatically — through cookies, pixel tags, and analytics tools when you visit our website
• From third parties — including our payment processor (Stripe), delivery partners, and advertising platforms (Google, Meta)

4. Why We Collect Your Information

We collect and use personal information to:

• Process and fulfil your orders, including dispatch, tracking, and delivery
• Communicate with you about your order or enquiry
• Process refunds and handle returns under our 30-day policy
• Send marketing communications where you have consented or where permitted by law
• Improve our website, products, and customer experience
• Display relevant advertising on Google, Meta (Facebook/Instagram), and other platforms
• Meet our legal obligations, including tax, accounting, and consumer law requirements
• Detect and prevent fraud and unauthorised access

We will not use your personal information for purposes incompatible with the above without your consent.

5. Disclosure of Personal Information

We may share your personal information with the following categories of third parties:

• Stripe — for secure payment processing
• Shipping carriers (e.g. Australia Post, Couriers Please, StarTrack, Aramex) — for order delivery and tracking
• Google LLC — for Google Analytics, Google Ads, and Google Shopping
• Meta Platforms Inc. — for Facebook and Instagram advertising and conversion tracking
• Email service providers — for transactional and marketing emails
• Legal and regulatory authorities — where required by law or court order

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate, improve the site, and serve relevant advertising. Types of cookies we use include:

• Essential cookies — required for the website to function (e.g. session management)
• Analytics cookies — Google Analytics, to understand how visitors use our site
• Advertising cookies — Google Ads conversion tracking and Meta Pixel, to measure ad performance and show relevant ads
• Personalisation cookies — to remember your preferences between visits

You can control or disable cookies through your browser settings. Disabling certain cookies may affect site functionality. You may also opt out of Google Analytics via tools.google.com/dlpage/gaoptout and of Meta ad personalisation via your Facebook Ad Preferences.

7. Google and Meta Advertising

We use Google Ads (including Google Shopping) and Meta Ads (Facebook and Instagram) to advertise our products. These platforms may:

• Use cookies and pixel tags placed on our website to track conversions and optimise ad delivery
• Create custom audiences from hashed customer data (e.g. encrypted email addresses) that we share in line with their data processing agreements
• Show you relevant ads on their platforms and partner networks based on your browsing behaviour

Google's data practices are governed by the Google Privacy Policy. Meta's practices are governed by the Meta Privacy Policy. You can manage your ad preferences at adssettings.google.com and in your Meta account settings.

8. International Data Transfers

Some of the third parties we share data with (including Google and Meta) operate internationally, including in the United States. Where personal information is transferred outside Australia, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles and equivalent overseas standards, including through contractual data protection obligations.

9. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. These include:

• SSL/TLS encryption across all pages of the website
• Secure payment processing via Stripe (PCI DSS Level 1 compliant)
• Access controls limiting who within our organisation can access customer data
• Regular review of our data security practices

No data transmission over the internet is completely secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security.

10. Your Rights and Access

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or out-of-date information
• Request deletion of your personal information (subject to our legal obligations to retain certain records)
• Opt out of marketing communications at any time using the unsubscribe link in any email or by contacting us
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at theteam@customersupport.care. We will respond within 15 days.

11. Retention of Data

We retain personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order records are retained for 7 years for tax and accounting purposes under Australian law. Marketing-related data may be deleted upon request. Anonymised analytics data may be retained indefinitely.

12. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information without parental consent, please contact us immediately and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we may also notify registered customers by email. We encourage you to review this policy periodically. Continued use of our website after changes have been posted constitutes your acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, access requests, correction requests, or complaints:

• Email: theteam@customersupport.care
• Phone: International +66 098 391 3877 (Mon–Fri, 9 am–5 pm AEST)
• Post: Privacy Officer, BuyFactory Direct Pty Ltd, Suite 307, Norwest Central, 12 Century Circuit, Norwest NSW 2153, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phone on 1300 363 992.