We may collect the following types of personal information: Personal Identification Information: • Full name • Email address • Phone number • Postal address and delivery address • Date of birth (if provided) Transaction Information: • Purchase history • Payment details (processed securely through third-party payment providers) • Order preferences and history Technical Information: • IP address • Browser type and version • Device information • Cookies and similar tracking technologies • Website usage data and analytics Communication Information: • Customer service inquiries • Feedback and reviews • Newsletter subscription preferences

We collect personal information through: • Direct interactions: When you create an account, place an order, subscribe to our newsletter, or contact us • Automated technologies: Through cookies, server logs, and similar technologies when you browse our website • Third parties: From payment processors, delivery partners, and marketing platforms We will only collect personal information by lawful and fair means. Where practicable, we will collect information directly from you.

We use your personal information for the following purposes: Order Processing and Fulfillment: • Processing and fulfilling your orders • Arranging delivery of products • Processing payments and refunds • Providing order updates and tracking information Customer Service: • Responding to your inquiries and requests • Handling complaints and returns • Providing after-sales support Marketing and Communications: • Sending promotional materials and newsletters (with your consent) • Notifying you about new products, special offers, and events • Conducting customer surveys and market research Website Improvement: • Analyzing website usage and performance • Improving our products and services • Personalizing your shopping experience Legal Compliance: • Complying with legal obligations • Protecting our rights and preventing fraud

We may share your personal information with: Service Providers: • Payment processors (e.g., Stripe, PayPal) • Shipping and logistics companies • IT service providers and hosting services • Marketing and analytics platforms Legal Requirements: • Government authorities when required by law • Law enforcement agencies in response to legal requests • Courts or tribunals as required Business Transfers: • In connection with a merger, acquisition, or sale of assets We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not sell your personal information to third parties.

We implement appropriate technical and organizational measures to protect your personal information, including: • SSL/TLS encryption for data transmission • Secure payment processing through PCI-DSS compliant providers • Regular security assessments and updates • Access controls and authentication measures • Staff training on data protection While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breach as required by law.

We use cookies and similar technologies to: • Remember your preferences and settings • Analyze website traffic and usage patterns • Provide personalized content and advertisements • Improve website functionality and user experience Types of cookies we use: • Essential cookies: Required for website functionality • Analytics cookies: Help us understand how visitors use our site • Marketing cookies: Used to deliver relevant advertisements You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

Under the Australian Privacy Principles, you have the right to: Access: Request access to the personal information we hold about you Correction: Request correction of inaccurate, incomplete, or outdated information Opt-out: Unsubscribe from marketing communications at any time Complaint: Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act To exercise these rights, please contact us using the details provided below. We will respond to your request within a reasonable timeframe.

We retain your personal information for as long as necessary to: • Fulfill the purposes for which it was collected • Comply with legal and regulatory requirements • Resolve disputes and enforce agreements When personal information is no longer needed, we will securely destroy or de-identify it.

Your personal information may be transferred to and processed in countries outside Australia where our service providers are located. We will take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the Australian Privacy Principles.

Our website is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Material changes will be notified via email or prominent notice on our website.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: Privacy Officer Coastal Bloom Trading Pty Ltd Email: [email protected] Phone: +61 468 204 856 Address: Unit 1412 57-59 Queen St, Auburn NSW 2144, Australia You may also contact the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au Phone: 1300 363 992