Privacy policy

Privacy Policy

Dust Mite Allergy Solutions | Alderbay Pty Ltd | ABN: 22 699 374 617 dustmiteallergysolutions.com.au | Last updated: October 2026

Governed by the Privacy Act 1988 (Cth) and the laws of the Commonwealth of Australia. For general contractual disputes, the laws of Queensland, Australia apply.

About Us & This Policy
What Personal Information We Collect
Sensitive Information
How We Collect Personal Information
Why We Collect Personal Information & How We Use It
Sharing Personal Information
Third-Party Service Providers
Shopify Audiences
Drop-Shipping & Supplier Data Handling
International Data Transfers
Behavioural Advertising & Tracking
Cookies & Tracking Technologies
Dust Mite Allergy Solutions App
Data Retention
Data Security
Data Breach Response
Your Privacy Rights — Australian Residents
Your Privacy Rights — International Visitors
Marketing Communications
Children's Privacy
Business Sale or Transfer
Third-Party Links
Automated Decision-Making
Do Not Track
Changes to This Policy
Complaints
Contact Us

1. About Us & This Policy

This Privacy Policy is issued by Alderbay Pty Ltd (ACN 699 374 617) trading as Dust Mite Allergy Solutions (ABN: 22 699 374 617) ("we", "us", "our"), operator of the website dustmiteallergysolutions.com.au and the Dust Mite Allergy Solutions mobile application. We are an Australian-owned e-commerce business based in Queensland, Australia.

This Policy applies to personal information we collect through the Website, the App, by email, telephone, social media, or any other means in connection with our business.

This Policy should be read together with our Terms of Service, Disclaimer and Refund Policy.

2. What Personal Information We Collect

We may collect the following categories of personal information:

Identity data: Full name, username or similar identifier.
Contact data: Email address, phone number, billing address and shipping address.
Transaction data: Products purchased, order values, order history and payment method type.
Financial data: Payment details processed securely by payment providers. We do not store full card numbers.
Technical data: IP address, browser type, device type, time zone, operating system, pages viewed and referral source.
Usage data: Pages visited, products viewed, search queries, cart additions, clicks and interactions.
Marketing data: Email subscription status, marketing preferences and communication history.
Communication data: Content of emails, enquiries and support communications sent to us.
Review data: Customer name, email address, order reference, review content and star rating.
Health-related information: Any health-related information voluntarily provided by you in customer service enquiries.
App usage data: Screens viewed, products accessed, app version, device type, interaction timestamps (see Section 13 for detail).

3. Sensitive Information

Our products relate to home allergen management. Customers sometimes voluntarily share health-related information when seeking product advice. We treat this information as sensitive information under the Privacy Act.

Where health-related or other sensitive information is voluntarily provided to us:

We collect it only for the purpose for which it was provided.
We do not use it for marketing without your express consent.
We do not share it with third parties for advertising, profiling or marketing purposes.
We apply additional care in its storage and handling.
We retain it only for as long as necessary or as required by law.

We do not actively solicit health information. Product recommendations are general in nature and do not constitute medical advice. Please refer to our Disclaimer.

4. How We Collect Personal Information

We collect personal information:

Directly from you when you place an order, create an account, subscribe to emails, contact us or submit a review.
Automatically when you visit the Website or use the App, through cookies, pixels, log files, analytics providers and similar technologies.
From third parties, including payment processors, advertising platforms, analytics providers and Shopify's platform infrastructure.
From publicly available sources, such as social media platforms where you interact with our business accounts.

5. Why We Collect Personal Information & How We Use It

We collect and use your personal information for:

Order processing and fulfilment.
Payment processing.
Customer service, returns, refunds and support.
Customer account management.
Marketing communications where you have opted in or where permitted by law.
Personalised advertising in accordance with your cookie preferences.
Website and App analytics and improvement.
Fraud prevention and security.
Legal, tax and accounting compliance.
Internal business operations and record-keeping.

6. Sharing Personal Information

We may share your personal information with third parties where reasonably necessary to provide our services, fulfil your orders, comply with legal obligations or operate our business. We do not sell your personal information to third parties for their own marketing or commercial purposes.

These third parties may include:

E-commerce platform and infrastructure providers.
Payment processors and financial service providers.
Shipping, logistics and fulfilment providers.
Accounting and financial management software providers.
Customer review platform providers.
Email marketing and communication platforms.
Advertising and analytics partners.
Product suppliers and manufacturers for order fulfilment — see Section 9 for important detail about supplier data practices.
Professional advisers, including accountants, insurers and legal representatives.
Regulators, law enforcement agencies and government bodies where required by law.

7. Third-Party Service Providers

We may use third-party providers including Shopify, Xero, Zoho, Tapita, Symprosys, Judge.me, Hextom, Google, Meta/Facebook, payment processors, shipping providers, email marketing platforms, professional advisers and relevant suppliers or manufacturers.

These providers only receive the personal information reasonably necessary for the service they provide.

For App-specific third-party services, see Section 13.4.

8. Shopify Audiences

We may use Shopify Audiences, a feature provided by Shopify that helps us identify and reach potential new customers. Shopify Audiences may use aggregated and de-identified purchase behaviour data to build advertising audience models.

To opt out of your purchase data being included in Shopify Audiences, contact us at info@dustmiteallergysolutions.com.au with the subject line "Shopify Audiences Opt-Out".

9. Drop-Shipping, Supplier Fulfilment & Third-Party Data Handling

Important: We operate as a multi-supplier drop-ship retailer. Some orders are fulfilled directly by third-party suppliers who receive your personal information to dispatch your order. Supplier data practices are governed by their own policies and are not fully within our control. Please read this section carefully.

9.1 How Drop-Shipping Works

We work with multiple third-party suppliers and fulfilment partners located in Australia and overseas. When you place an order that is fulfilled via drop-shipping, we pass the minimum personal information necessary to the relevant supplier to enable them to dispatch your order directly to you. This is necessary for order fulfilment and is standard practice in e-commerce.

9.2 What Information Is Shared with Suppliers

We disclose only the information reasonably necessary to fulfil your order. This typically includes:

Full name
Delivery address
Phone number
Email address
Order details (product, quantity, special instructions)

9.3 Supplier Data Practices — Limitations on Our Control

We cannot guarantee that every supplier's data handling practices will mirror our own. Each supplier operates under their own privacy policy and internal procedures. By placing an order, you acknowledge and accept this.

Specifically, you should be aware that:

We do not have binding data processing agreements in place with suppliers and cannot enforce this as a legal obligation against every supplier.
Some suppliers may retain your personal information in their own systems for periods determined by their own retention policies, which may differ from ours.
If you request deletion of your personal information, we will delete it from our own systems. However, we cannot guarantee deletion from a supplier's independent systems. You may need to contact the supplier directly.
Some suppliers may use your data for their own internal purposes such as analytics, fraud prevention, quality assurance or legal compliance, consistent with their own privacy policies.
Suppliers are not authorised by us to use your personal information for direct marketing, advertising to you, or selling your data to third parties. If you believe a supplier has done so, please notify us immediately.

9.4 Overseas Suppliers

Some of our suppliers are located outside Australia, including in countries such as China, Hong Kong, Vietnam, and other regions. Your personal information may be transferred to and processed in these countries as part of order fulfilment. These countries may not have privacy laws equivalent to Australian law.

We take reasonable steps to select reputable suppliers and to limit the data we share to what is necessary for fulfilment. However, once data is transferred to an overseas supplier, it is subject to the laws of that country and the supplier's own policies.

By placing an order, you consent to this transfer where it is necessary for fulfilment of your order.

9.5 Where to Find Supplier Privacy Policies

If you would like to understand how a specific supplier handles your data, you can request the relevant supplier's details by contacting us at info@dustmiteallergysolutions.com.au. We will make reasonable efforts to direct you to the relevant supplier's privacy policy.

10. International Data Transfers

Some of our service providers and suppliers may be located outside Australia, including in the United States, Canada, New Zealand, India, Vietnam, China, Hong Kong, and Switzerland. Your personal information may be transferred to, stored in or processed in these countries as part of our business operations or order fulfilment.

We take reasonable steps to ensure overseas recipients handle personal information consistently with applicable privacy laws. However, these countries may not have privacy protections equivalent to those in Australia, and your information may be subject to foreign laws once transferred.

11. Behavioural Advertising & Tracking

We may use personal information to deliver targeted advertising on third-party platforms, in accordance with your cookie preferences.

Advertising partners may include Google, Meta/Facebook, Microsoft/Bing Ads and Shopify Audiences.

We may also share hashed (encrypted) contact details, such as your email address or phone number, with advertising partners including Google (for example, through Google Customer Match), to show relevant ads, measure ad performance, or avoid showing ads to existing customers. To opt out, contact us at info@dustmiteallergysolutions.com.au.

Opting out of targeted advertising does not mean you will not see advertisements. It means the advertisements you see will not be personalised based on your browsing behaviour.

12. Cookies & Tracking Technologies

We use cookies and similar technologies to help the Website function, remember your preferences, analyse site performance and deliver relevant advertising.

Cookie consent: Non-essential cookies, including analytics and advertising cookies, are only activated in accordance with your cookie preferences. Essential cookies are required for the Website to function.

You can manage cookies through your browser settings or our cookie preference tools where available.

13. Dust Mite Allergy Solutions App

13.1 Scope

This section applies to personal information and technical data collected through the Dust Mite Allergy Solutions mobile application (available on iOS and Android) ("the App"). This section should be read in conjunction with the rest of this Privacy Policy.

13.2 App Data Collection

The App collects and processes the following categories of information:

Usage Analytics

Screens viewed within the App
Products viewed or tapped to access shopping
App version and device type (iOS or Android operating system)
Timestamp of interactions

Crash and Error Reporting

Device information (operating system version, device model, device memory)
App version number
Error details and stack traces
Timestamp of the error event

Local Device Storage

Your checklist progress (which tasks you have marked as completed)
Your preference settings (e.g., reminder times, app display preferences)
These are stored locally on your device only and are not transmitted to our servers

Non-Collection of Personal Data

We do not collect your name, email address, phone number or other personal identifying information through normal App usage
We do not require you to create an account or log in to use the App
We do not collect location data

13.3 Purpose of App Data Collection

We collect App data for the following purposes:

Analytics and Usage Understanding: To understand how users interact with the App, which features are used most, and how to prioritise improvements
Technical Support: To diagnose and resolve technical issues, crashes and performance problems
App Improvement: To enhance the App's functionality, user experience and reliability
Fraud Prevention: To detect and prevent fraudulent or malicious activity

We do not use App analytics data for targeted marketing, advertising, or profiling purposes beyond the scope described above.

13.4 Third-Party Service Providers — App

We use the following third-party services to operate and improve the App:

Sentry (Crash Reporting and Error Tracking)

Service: Automated error and crash reporting
Data shared: Device information, app errors, app version, error timestamps
Purpose: Diagnose and fix technical issues and app crashes
Privacy Policy: sentry.io/privacy
Data processing location: May be processed in the United States or Europe depending on Sentry's infrastructure

PostHog (Product Analytics)

Service: User analytics and feature interaction tracking
Data shared: Screen views, product taps, interaction events, app version, device type
Purpose: Understand feature usage and user engagement
Privacy Policy: posthog.com/privacy
Data processing location: May be processed internationally depending on PostHog's infrastructure

Shopify (Product Catalog and E-Commerce)

Service: Product information, inventory and purchasing
Data shared: When you tap "Shop" in the App, you are directed to the Shopify-powered website where Shopify's privacy policy applies
Purpose: Display live product availability, pricing and enable purchases
Privacy Policy: shopify.com/legal/privacy

Open-Meteo (Weather and Humidity Data)

Service: Australian city humidity and temperature information
Data shared: Your selected city name only
Purpose: Display real-time local humidity levels to assist with dust mite control planning
Privacy Policy: open-meteo.com
Data processing location: Switzerland
Note: Open-Meteo provides public weather data; no account creation or API key is required

13.5 Local Device Storage

Information stored locally on your device (checklist progress and preferences) is:

Stored only on your device
Not sent to our servers or any third parties
Deleted when you uninstall the App or clear the App's data in your device settings
Not backed up to cloud services unless you enable device-level cloud backup (controlled by your device settings, not by us)

13.6 International Data Transfers — App

Technical data and crash reports may be transferred to, stored in or processed outside Australia by Sentry and PostHog. These countries may not have privacy protections equivalent to those in Australia. By using the App, you consent to this transfer where necessary for the service to operate.

See Section 10 of this Policy for general information about international data transfers.

13.7 App Data Retention

Analytics data (screen views, interactions): Generally retained for up to 90 days by PostHog
Crash reports (error data): Generally retained for up to 90 days by Sentry
Local device storage (your progress and preferences): Retained on your device until you delete it
Open-Meteo data (weather queries): Not retained; real-time data only

See Section 14 of this Policy for general retention timelines.

13.8 Your Rights — App Data

You have the right to:

Request what we've collected: Contact us to ask what analytics or crash data we hold about your App usage (minimal, as no personal identifiers are collected)
Opt out of analytics: While opt-out functionality is not currently available in-App, you can contact us to request exclusion of your device from PostHog analytics going forward
Delete your local data: Uninstall the App or use your device's app settings to clear the App's data, which will delete all locally stored checklist progress and preferences
Request information about third-party data handling: Contact us for information about how Sentry, PostHog or Open-Meteo handle your data

To exercise any of these rights, contact us at info@dustmiteallergysolutions.com.au with the subject line "App Privacy Request".

13.9 What the App Does Not Do

We do not require you to log in or create an account
We do not collect personal information (name, email, phone) during normal App usage
We do not collect location data
We do not use App data for direct marketing or advertising to you
We do not sell or share App analytics data with advertisers for profiling
We do not use your data to make automated decisions that legally affect you
We do not share App data with Shopify for purposes other than processing your purchases

14. Data Retention

We retain personal information for as long as reasonably necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law.

Order and transaction data is generally retained for 7 years for tax and accounting purposes.
Customer service communications are generally retained for up to 3 years.
Marketing subscription data is retained until you unsubscribe or withdraw consent.
Health-related sensitive information is retained only as long as necessary for the relevant customer service matter, or as required by law.
App analytics data is generally retained for up to 90 days.
App crash reports are generally retained for up to 90 days.

Note on supplier retention: Where your order has been fulfilled by a third-party supplier, that supplier may retain your personal information in their own systems under their own retention policy. We cannot control or guarantee deletion from a supplier's systems. See Section 9 for details.

15. Data Security

We take reasonable technical and organisational steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

These steps include secure e-commerce hosting via Shopify, SSL/TLS encryption, restricted access to personal information and the use of reputable third-party providers.

No method of data transmission or electronic storage is completely secure. Any transmission is at your own risk.

16. Data Breach Response

If we become aware of a suspected personal data breach, we will take prompt steps to assess, contain and respond to it in accordance with our obligations under the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme.

If required, we will notify the Office of the Australian Information Commissioner and affected individuals.

17. Your Privacy Rights — Australian Residents

Under Australian privacy law, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate, outdated, incomplete or misleading information.
Request deletion of personal information where legally available — noting the limitations in Section 9 regarding supplier-held data.
Opt out of direct marketing.
Opt out of targeted advertising where applicable.
Make a privacy complaint.

To exercise these rights, contact us at info@dustmiteallergysolutions.com.au. We may need to verify your identity before processing your request.

18. Your Privacy Rights — International Visitors

Our Website and App are directed at Australian residents. If you are located outside Australia, additional rights may apply depending on your location.

For example, residents of the European Economic Area may have rights under the GDPR, and California residents may have rights under the CCPA. To exercise any applicable rights, contact us at info@dustmiteallergysolutions.com.au.

19. Marketing Communications

We may send marketing communications where you have opted in or where otherwise permitted by law. Every marketing email includes an unsubscribe link.

You may opt out at any time by clicking "unsubscribe" in an email or contacting us at info@dustmiteallergysolutions.com.au.

You will still receive transactional emails, such as order confirmations and shipping notifications, as these are necessary for order fulfilment.

20. Children's Privacy

Our Website and App are not directed at children under 18. We do not knowingly collect personal information from children under 18.

If you believe we have collected personal information from a child under 18, please contact us immediately at info@dustmiteallergysolutions.com.au.

21. Business Sale or Transfer

If we sell, transfer, merge or restructure all or part of our business, personal information may be transferred to the acquiring or successor entity as part of that transaction.

We will take reasonable steps to ensure the acquiring entity handles your personal information consistently with this Privacy Policy.

22. Third-Party Links

Our Website and App may contain links to third-party websites. We are not responsible for the privacy practices, content or security of any third-party website. We encourage you to review the privacy policy of any website you visit.

23. Automated Decision-Making

We do not engage in automated decision-making that produces legal effects or similarly significantly affects you. Shopify may use limited automated tools to detect and prevent fraudulent transactions.

24. Do Not Track

Some browsers transmit "Do Not Track" signals. Our Website does not currently alter its data collection or tracking practices in response to these signals due to the absence of a consistent industry standard.

25. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, business operations, applicable law or technology. The "Last updated" date at the top of this page will be revised when material changes occur.

Continued use of our Website or App after any update constitutes your acceptance of the revised Policy.

26. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first:

Dust Mite Allergy Solutions Email: info@dustmiteallergysolutions.com.au

We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

27. Contact Us

For any questions, requests or concerns about this Privacy Policy or our handling of your personal information, please contact us:

Dust Mite Allergy Solutions ABN: 22 699 374 617 (Alderbay Pty Ltd, ACN 699 374 617) Email: info@dustmiteallergysolutions.com.au Website: www.dustmiteallergysolutions.com.au