Privacy Policy

NutraAura Pharmacy is an Australian online pharmacy offering practitioner-grade wellness products with oversight from AHPRA-registered pharmacists. We take your privacy seriously, particularly because some of the information you share with us relates to your health.

This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to our website, your account, orders you place with us and consultations you book through us.

We collect personal information that you provide to us, including:

• Account details — your name, email address and sign-in credentials when you create an account.
• Order and delivery details — your delivery address, contact phone number and the products you order.
• Health information — information you choose to share with us when a practitioner recommends products for you, when you ask our pharmacy team for a suitability check, or when you complete a product suitability assessment — such as symptoms, current medications or health goals. This is sensitive information under Australian privacy law, and we only collect it with your consent.

You can browse our website without creating an account, but we need the details above to supply products and services to you.

We use your personal information to:

• process and fulfil your orders, including delivery;
• dispense what a qualified practitioner has recommended for you, carry out our pharmacist review of practitioner-only items, and assess whether particular products are appropriate for you;
• send you service messages about your account, orders and consultations (for example order confirmations and delivery updates);
• respond to your enquiries and provide customer support; and
• meet our legal and professional obligations as a pharmacy.

We do not sell your personal information. We disclose it only where needed to provide our services, including to:

• Delivery partners — your name, delivery address and contact details, so your order can reach you;
• Our payment processor, Stripe — to process your payment securely. We do not store your full card details on our own systems; and
• Regulators or authorities — where the law requires us to.

Health information you share for a consultation is handled by our practitioners and is not disclosed to third parties for marketing.

We use your name and email address to send you marketing about our products and offers. We do this under Australian Privacy Principle 7 because you gave us those details directly, it is the kind of contact you would reasonably expect from a pharmacy you have an account with, and every message carries a simple way to opt out. We also email you a reminder if you leave something in your cart or do not finish a checkout. We do this under Australian Privacy Principle 7.2 because you gave us your email address directly when you created your account, a reminder about your own cart is contact you would reasonably expect, and every reminder carries a simple way to opt out.

We keep a record of when and how your email preferences were set — the wording you were shown, the time, and the device details — so we can show that any message we sent was one you had agreed to receive.

You can opt out at any time using the unsubscribe link in any email we send you, which stops marketing and reminders together, or you can turn marketing emails and cart reminders on or off separately with the two switches in your account settings. We will not use your health information for marketing.

We use Google Analytics 4 to understand how visitors use our site so we can improve it. This runs by default using first-party cookies and does not identify you personally to us.

We also record items added to or removed from carts — including by visitors who are not signed in — using a first-party, pseudonymous device identifier rather than your name or email, to understand shopping activity and improve the store. This identifier is not shared for cross-site tracking, and we keep these records for a limited period (around 90 days) before deleting them.

Only if you accept our cookie banner do we also enable advertising and conversion-measurement cookies (Google Ads), including remarketing and "Enhanced Conversions". For Enhanced Conversions, a hashed — irreversible — version of your email address or phone number may be shared with Google to measure whether one of our ads led to a purchase. You can decline this, and declining does not affect your ability to shop with us.

These tools are managed through Google Tag Manager and gated by your consent, so nothing advertising-related loads until you agree. See our Cookie Policy for more detail.

Some of our articles include a YouTube video. The video player is not loaded until you press play. Before then, the article shows the video's preview image, which your browser fetches from YouTube's image server (i.ytimg.com); like any request for an image, that passes your IP address and browser details to Google, which operates YouTube.

We use YouTube's privacy-enhanced mode (youtube-nocookie.com). Once you play a video, Google may collect information about your device and your viewing, and may store cookies or similar technologies on your device, under Google's own privacy policy. Playing a video is optional — the article can be read in full without it.

Some of our articles also include an Instagram post. Nothing from Instagram is loaded until you choose to show the post: before then, the article shows only a button and a link to the post on Instagram. Once you show the post, your browser loads it from Instagram, and Meta Platforms, Inc., which operates Instagram, may collect information about your device and your viewing, and may store cookies or similar technologies on your device, under Instagram's own privacy policy. Showing a post is optional — the article can be read in full without it.

We are an Australian business and aim to keep your information in Australia. However, some of our service providers operate globally — in particular, payment processing through Stripe may involve the transfer of payment-related information to overseas providers. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

When an article shows an embedded YouTube video, Google LLC (United States), which operates YouTube, receives your IP address and browser details when the video's preview image loads. If you press play, it also receives information about your device and your viewing. Google handles that information under its own privacy policy.

When an article includes an Instagram post, nothing is sent to Instagram until you choose to show the post (or follow the link to it on Instagram). If you do, Meta Platforms, Inc. (United States), which operates Instagram, receives your IP address, browser details and information about your viewing. Meta handles that information under Instagram's own privacy policy.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include encrypted connections to our website, authenticated access to your account, restricted staff access to health information and secure payment processing through Stripe.

No online service can be guaranteed completely secure, so please keep your account password confidential and let us know immediately if you suspect unauthorised access to your account.

We keep your personal information for as long as it is needed to provide our services to you, and as required by Australian law — including pharmacy record-keeping and tax obligations. When your information is no longer required, we take reasonable steps to delete or de-identify it.

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. You can update most account and delivery details yourself by signing in to your account, or contact us using the details below and we will respond within a reasonable time.

If you believe we have mishandled your personal information, please contact us first using the details below. We will investigate and respond to you. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

For any privacy question, access or correction request, or complaint:

• Email: admin@nutraaura.com.au
• Phone: +61 2 9538 7636

Our business details are available on request.