Wild Goddess Botanicals is a small-batch skincare business based in Canberra, Australia. This policy explains what personal information we collect, why we collect it, who we share it with, and what you can do about it.

We've written it in plain English rather than legal language, because you should be able to understand what happens to your information without having to decode it.

Last updated: 11 September 2026

Who we are

Wild Goddess Botanicals
ABN 62 608 680 899
Canberra, ACT, Australia
hello@wildgoddessbotanicals.com.au

We sell within Australia only.

What we collect

When you buy something

• Your name

• Your email address

• Your delivery address

• Your phone number, if you provide one

• What you ordered, and when

When you pay

We never see or store your full card number. Payment details go directly to our payment providers, listed below, who are the ones equipped to handle them securely.

When you join our mailing list

• Your email address

• Whether you opened or clicked our emails

When you browse the site

• Pages you viewed and how long you stayed

• The device and browser you used

• An approximate location, worked out from your IP address — city level, not your street

• How you moved through the site, including scrolling and clicks

That last one deserves a plain explanation. We use a tool called Microsoft Clarity that records anonymised playback of site sessions, so we can see where people get stuck. It masks text you type into forms. We use it to fix confusing pages, not to watch individuals.

What we don't collect

We don't ask for, and don't want, your date of birth, gender, or any health information. We don't sell personal information to anyone, ever.

Why we use it

• To send you the thing you ordered

• To email you about your order

• To answer your questions

• To send marketing emails, if you asked for them

• To understand which pages work and which don't

• To measure whether our advertising is reaching the right people

• To meet our tax and business record-keeping obligations

Who we share it with

We use other companies to run the shop. Each one only gets what it needs to do its job.

• Squarespace — hosts our website and shop, and holds order and account details

• Squarespace Payments — processes card payments

• PayPal, Afterpay and Klarna — process payment, if you choose them

• Klaviyo — sends our marketing and order emails, using your email address, name and order history

• Meta (Facebook and Instagram) — advertising measurement, described in the next section

• Google — website analytics and search listings

• Microsoft — Clarity, our behaviour analytics

• Australia Post and couriers — deliver your order, using your name, address and phone number

• VentraIP — hosts our email

Most of these companies are based in the United States, which means your information may be stored or processed overseas. We've chosen established providers with published privacy practices, but their handling of your information is governed by their own policies and the laws where they operate.

We may also disclose information if the law requires it.

About our Meta advertising

We advertise on Facebook and Instagram, and we want to be straightforward about how that works, because it's the part most people don't realise is happening.

Our website carries the Meta Pixel. It tells Meta when someone views a product, adds to cart, starts checkout, or completes a purchase, so we can tell whether our ads are working and stop paying for ones that aren't.

We also use a Meta feature called advanced matching. When you check out, your email address, phone number, name, and the city, state, postcode and country from your address are converted into an irreversible code before they are sent — either by your own browser or by our website’s server, depending on how the information reaches Meta. Meta uses that code to check whether you already have an account with them. Meta never receives the readable version of these details from us.

We do not send Meta your date of birth or gender.

If you'd rather not be tracked this way, you have real options:

• Adjust your ad settings directly with Meta at facebook.com/adpreferences

• Use your browser's tracking protection, or a private window

• Use a browser extension that blocks trackers

None of these will stop you from shopping with us.

Cookies

Cookies are small files a website stores in your browser. We use them to keep your cart working as you move between pages, remember whether you've dismissed a pop-up, count visitors and understand which pages get read, and measure our advertising.

You can clear or block cookies in your browser settings. Blocking all of them will break the shopping cart, because that's what it relies on.

Marketing emails

We only send marketing emails to people who asked for them.

Every one has an unsubscribe link at the bottom. It works immediately, and we don't require a reason. You'll still get emails about orders you've actually placed — receipts and dispatch notices — because those aren't marketing.

How we keep it safe

Our site runs over an encrypted connection. We don't store card numbers. Access to order information is limited to the owner of the business, which is one person.

No system is perfectly secure, and we won't claim otherwise. If something did go wrong in a way that put you at risk, we'd tell you.

How long we keep it

• Order records — seven years, because Australian tax law requires it

• Mailing list — until you unsubscribe

• Website analytics — generally up to 26 months, depending on the tool

Your choices

You can ask us to show you what personal information we hold about you, correct anything that's wrong, delete your information where we're not legally required to keep it, or stop sending you marketing.

Email hello@wildgoddessbotanicals.com.au and we'll respond within 30 days. There's no charge.

Children

Our products and site are intended for adults. We don't knowingly collect information from anyone under 16.

If you're unhappy

Email us first at hello@wildgoddessbotanicals.com.au. We'd genuinely rather hear about it and fix it.

If we can't resolve it, the Office of the Australian Information Commissioner is the national privacy regulator and can be reached at oaic.gov.au.

Changes to this policy

If we change how we handle your information, we'll update this page and change the date at the top. Material changes will be flagged to anyone on our mailing list.