Privacy Policy

That Makeup Brand ("That Makeup Brand", "we", "us" or "our") is an Australian beauty brand. This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit our website, create an account, make a purchase, join our mailing list, enter a promotion, contact us or interact with us on social media (together, the "Services").

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you are located outside Australia, additional rights under your local law may apply and we will honour them to the extent required.

By using the Services you acknowledge that you have read this policy. If you do not agree with it, please do not use the Services.

We collect personal information directly from you when you:

• create an account, place an order or check out as a guest;
• subscribe to our emails or SMS, or enter a competition or promotion;
• leave a review, testimonial or other content on the Services;
• contact us through our contact form, by email, phone or social media;
• apply to our wholesale, press, ambassador or affiliate programs;
• interact with our profiles on Instagram, TikTok or other platforms.

We also collect some information automatically when you browse (see section 3), and we may receive information about you from our service providers, advertising platforms, delivery partners and payment providers in the course of providing the Services.

The information we collect depends on how you use the Services. It may include:

• Identity and contact details: name, email address, phone number, delivery and billing addresses, date of birth where you choose to provide it.
• Account details: your login email, a securely hashed password, saved addresses and preferences.
• Order details: products purchased, order history, returns and exchanges, gift messages and delivery instructions.
• Payment details: payments are processed by our payment providers. We do not store full card numbers; we receive a confirmation of payment and the last four digits of the card used.
• Skin, hair and beauty preferences: information you volunteer when asking for product advice, completing a quiz or leaving a review. Some of this may be considered sensitive information; we collect it only with your consent and use it solely to help you.
• Communications: the content of messages you send us and our replies.
• Trade and partner information: business name, ABN, outlet details and social handles when you apply to a wholesale, press, ambassador or affiliate program.

We need certain information to provide the Services. If you choose not to provide it, we may not be able to process your order, create your account or respond to your request.

When you visit the Services we and our providers use cookies, pixels and similar technologies to collect device and usage information, such as your IP address, browser and device type, approximate location, referring page, the pages and products you view, how long you stay and the actions you take. We use this to run the site, remember your bag, measure performance and, with your consent, personalise content and advertising.

Our Cookies & Tracking Policy explains these technologies in detail and how to manage them. You can change your choices at any time using the "Manage cookies" link in the footer.

We use personal information to:

• process, fulfil, deliver and provide support for your orders, and to manage returns and refunds;
• create and administer your account and verify your identity;
• communicate with you about orders, deliveries, product safety notices and changes to our terms or policies;
• send marketing emails and SMS where you have opted in, which you can withdraw at any time;
• personalise the Services, recommend products and remember your preferences;
• run promotions, competitions and referral or loyalty programs;
• assess applications to our wholesale, press, ambassador and affiliate programs;
• detect, investigate and prevent fraud, abuse and security incidents;
• analyse and improve our products, Services, marketing and customer experience;
• comply with our legal obligations and enforce our terms.

We will only use your information for a purpose you would reasonably expect, a purpose you have consented to, or as otherwise permitted or required by law.

We do not sell your personal information. We share it only as needed to run the Services, with:

• Service providers acting on our behalf, including our e-commerce platform and hosting provider, payment processors, delivery carriers and fulfilment partners, email and SMS providers, customer support tools, review platforms and analytics providers. They may only use your information to perform their services for us.
• Advertising platforms such as Meta, Google and TikTok, where you have consented to marketing cookies, so that we can measure campaigns and show you relevant advertising.
• Professional advisers such as lawyers, accountants and insurers, where necessary.
• Regulators, law enforcement and courts, where we are required to by law or where disclosure is reasonably necessary to protect our rights, our customers or the public.
• A buyer or successor, if we sell or restructure all or part of our business, subject to this policy.

Some of these providers store or process information outside Australia, including in the United States, the European Union, the United Kingdom and Singapore. Before disclosing information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the APPs.

If you subscribe to our emails or SMS, or purchase from us and do not opt out, we may send you news, launches and offers. Every marketing message includes an unsubscribe link or a reply option; you can also change preferences in your account or by contacting us. We comply with the Spam Act 2003 (Cth).

Transactional messages about your orders and account are not marketing and will continue while you have an active order or account.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These include encrypted connections (HTTPS), hashed passwords, access controls, payment processing by PCI-DSS compliant providers and staff confidentiality obligations.

No method of transmission or storage is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

We keep personal information for as long as needed for the purposes above, and to meet legal, tax and accounting obligations. Order records are typically kept for seven years in line with Australian record-keeping requirements. Marketing data is kept until you unsubscribe or your account becomes inactive. When information is no longer needed we delete or de-identify it.

You may ask us to access or correct the personal information we hold about you, and to delete it where we are not required to keep it. You may also opt out of marketing, withdraw consent to cookies and ask how your information has been handled. To make a request, contact legal@thatmakeupbrand.com. We will respond within 30 days and may need to verify your identity first.

If you have a complaint about our handling of your information, please contact us first and we will investigate and respond in writing. If you are not satisfied with our response, you may complain to the OAIC at oaic.gov.au.

The Services are intended for adults. We do not knowingly collect personal information from anyone under 16 without parental consent. If you believe a child has provided us with personal information, contact us and we will delete it.

The Services may link to websites, social platforms and services we do not control. Their privacy practices are their own and we encourage you to read their policies.

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be announced on the Services or by email where appropriate. Your continued use of the Services after a change means you accept the updated policy.

Privacy questions, access or correction requests and complaints can be sent to legal@thatmakeupbrand.com. Please mark your message "Privacy". For anything else, write to hello@thatmakeupbrand.com or use our Contact page.