Privacy policy

Privacy

This policy explains what we do with your personal information. We follow the Australian Privacy Principles set out in the Privacy Act 1988 (Cth), even though a business of our size is not obliged to.

Who we are

Calmyo is a trading name of BHL GROUP LLC, 1209 Mountain Rd Pl NE, Ste N, Albuquerque, NM 87110, United States. We decide how your information is handled.

What we collect

To fulfil your order: your name, delivery address, email address, phone number if you give one, and what you bought.
When you contact us: your email address and whatever you write to us.
Automatically as you browse: your IP address, device and browser type, the pages you view and how you arrived at our site.

We never see your card details. Payments are handled entirely by our payment providers; your card number never reaches us.

Why we use it

To take, pack, ship and support your order, and to handle returns — we cannot sell to you without this.
To answer your messages.
To keep the site working, secure and free of fraud.
To send you marketing email, but only if you asked for it.

Who we share it with

Shopify, which runs this store and its checkout.
Our payment providers, to take payment.
Our supplier and fulfilment partner, who receives your name and delivery address in order to send your parcel.
Carriers, to deliver it.
Analytics and advertising platforms, where you have accepted those cookies.

We do not sell your personal information.

Information sent overseas

Because we are not based in Australia, your information is handled outside Australia. In practice it is stored and processed in the United States and Canada by us and by Shopify, and your name and delivery address are sent to our supplier in China so your parcel can be dispatched. By ordering, you consent to this disclosure. Privacy laws in those countries are not the same as Australia's.

Marketing email

We only send marketing email to people who have asked for it. Every message identifies us and carries a working unsubscribe link, and we act on unsubscribes within five working days, as the Spam Act 2003 (Cth) requires. Unsubscribing from marketing does not stop order and delivery emails, which we have to send.

Cookies

Our store uses cookies to keep your cart working and your session alive — those are necessary and cannot be turned off. Analytics and advertising cookies are set only if you accept them in the banner, and you can change your mind at any time through your browser or the banner.

How long we keep it

Order records are kept for seven years, which is the period accounting and tax rules require. Support emails are kept for three years. Marketing consents are kept until you withdraw them. Analytics data is kept for the period set by the platform concerned.

Keeping it safe

Our site runs over an encrypted connection and access to order data is limited to the people who need it. No system is perfect; if a breach ever put you at serious risk, we would notify you and the Office of the Australian Information Commissioner as the law requires.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, and withdraw consent to marketing at any time. Email calmyo.contact@gmail.com and we will respond within 30 days.

Complaints

If you think we have mishandled your information, write to us first — we would rather fix it. If you are not satisfied with our answer you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.