1. Scope

This Privacy Policy explains how the operator of www.alibarbar.club (“Alibarbar”, “we”, “us” or “our”) handles personal information when you visit the website, place an order, contact support, subscribe to communications or otherwise interact with us.

We aim to handle personal information openly and responsibly. Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to us, we will handle personal information in accordance with those requirements. Other privacy or communications laws may also apply depending on the circumstances.

2. Information we may collect

Payment-card or account details may be collected and processed directly by a payment provider. We may receive limited transaction information such as payment status, method type or a reference number rather than full payment credentials.

Do not send sensitive information unless it is reasonably required and we have requested it through an appropriate channel. Do not send full payment-card details by ordinary email or WhatsApp.

3. How we collect information

We may collect information directly from you when you enter it on the website, create or update an account, place an order, contact us, respond to a request, submit a return claim or subscribe to communications.

We may also receive information automatically through cookies, pixels, logs and similar technologies, and from service providers involved in payment processing, fraud prevention, website hosting, analytics, communications, fulfilment and delivery.

4. Why we use personal information

• To operate, maintain and secure the website.
• To receive, verify, process, fulfil and deliver orders.
• To communicate about payments, dispatch, tracking, returns and support.
• To verify information, age or legal eligibility where reasonably required.
• To prevent fraud, misuse, security incidents and unlawful transactions.
• To improve website usability, content, products and customer service.
• To keep business, tax, accounting, complaint and compliance records.
• To send marketing communications where consent or another lawful basis exists.
• To comply with legal obligations and respond to lawful requests.

5. Cookies and analytics

Our website may use essential cookies for functions such as navigation, security, checkout and session management. We may also use preference, performance or analytics technologies to understand website use and improve services. Advertising or tracking technologies should only be used and described where they are actually implemented.

You can manage cookies through browser or device settings. Blocking some cookies may affect website features. Where a consent tool is provided, you can use it to manage the categories presented.

6. When information may be disclosed

We may disclose relevant information to service providers that help us operate the website and complete customer requests, including hosting and technology providers, payment processors, fraud-prevention services, fulfilment partners, carriers, communications providers, analytics providers, professional advisers and customer-support tools.

We may also disclose information where required or authorised by law, to respond to lawful government or regulatory requests, to investigate fraud or security incidents, to protect legal rights or safety, or in connection with a business transfer subject to appropriate safeguards.

We do not sell personal information for money as an ordinary business practice. If our data practices change, this policy should be updated before the changed practice begins where required.

7. Overseas disclosure and storage

Some technology, payment, analytics, communications or support providers may store or process information outside Australia. The countries involved depend on the providers actually used. Where practicable and required, we take reasonable steps concerning overseas handling and provider safeguards.

Because service providers and their data locations can change, it may not always be practicable to list every country in advance. You may contact us for further information about the providers and overseas handling relevant to your interaction. We will update this policy when more specific disclosure is reasonably required.

8. Security

We take reasonable administrative, technical and organisational measures designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No online transmission or storage system can be guaranteed completely secure.

You are responsible for keeping account credentials and devices secure and for contacting us if you suspect unauthorised activity. Do not send passwords or full payment-card details through ordinary support messages.

9. Retention

We retain personal information for as long as reasonably needed for the purpose collected, customer service, fraud prevention, dispute handling, legal compliance and legitimate recordkeeping. Retention periods vary by information type and legal requirement.

When information is no longer reasonably required, we take reasonable steps to delete or de-identify it where required and practicable, subject to backups, legal obligations and dispute or security needs.

10. Access and correction

You may request access to personal information we hold about you and ask for inaccurate or outdated information to be corrected. Contact us using the details below. We may need to verify your identity before responding and may refuse or limit a request where permitted by law, explaining the reason where required.

11. Marketing communications

We will send commercial electronic messages only where consent or another lawful basis exists. Marketing messages should identify the sender and provide a functional unsubscribe method. You can withdraw from marketing by using the unsubscribe option in the message or contacting us.

Transactional communications about an order, payment, delivery, return, security matter or policy change may still be sent where necessary even if you unsubscribe from marketing.

12. Adults only

This website is intended for adults aged 18 years or older. We do not knowingly seek to collect personal information from minors for the purchase or use of vaping products. If you believe a minor has provided information inappropriately, contact us so we can assess and take appropriate action.

13. Privacy enquiries and complaints

Email alibarbar-serve@outlook.com or message WhatsApp +852 5146 2609. State that your message is a privacy request and explain the information or concern. We may request reasonable identity verification.

We will review privacy complaints and communicate the outcome or next steps. If an applicable privacy law provides a right to raise a complaint with a regulator, that right is not limited by this policy.

14. Changes to this policy

We may update this policy when laws, providers, technologies or business practices change. The current version will be published on this page with a revised update date. Where required, we will provide additional notice or obtain consent before materially different uses of personal information.