Privacy Policy

This policy explains how Ashton Care handles personal information when you visit ashton-care.com.au or contact us. We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) as a matter of good practice, whether or not they apply to us by law.

1. Who we are

This website is operated by BCO Group LLC, trading as Ashton Care, based in Pleasanton, California, USA ("Ashton Care", "we", "us"). You can reach us at hello@ashton-care.com.au or through our contact page.

2. We don't sell on this website

Ashton Care products are sold and delivered through Amazon Australia. When you click a "Buy on Amazon" button you leave our site. Your order, payment and delivery details are collected by Amazon under Amazon's Privacy Notice, not by us. As the seller, we receive from Amazon only what we need to fulfil and support your order.

3. What we collect

When you contact us

Your name, email address, Amazon order number (if you give it), the content of your message, the date it was sent and the country your connection comes from.

When you browse

We measure visits without cookies and without advertising or tracking tools. For each visit we record the page viewed, the referring website, campaign tags in the link (such as utm_source), the country your connection comes from, your device type and which "Buy on Amazon" button or pack QR code you used. To count unique visitors we create a one-way pseudonymous code from your IP address and browser details combined with a random secret value that is replaced every day and then deleted. Your visits on different days are not connected. We do not store your IP address and we do not try to identify individual visitors.

Security

Our hosting provider may process IP addresses briefly to protect the site from abuse and to apply rate limits. We keep only a one-way hashed version for that purpose.

4. How we use it

• to reply to your enquiry and handle any product issue or complaint;
• to understand which pages and products people are interested in and improve the site;
• to keep the site secure and prevent spam and misuse;
• to meet our legal obligations.

We do not sell, rent or trade personal information. We don't send marketing emails. If we ever offer a newsletter, you will only receive it if you opt in, and every message will include an unsubscribe link, as required by the Spam Act 2003 (Cth).

5. Cookies

The public website does not use cookies, except an optional cookie our staff set on their own devices to exclude their visits from our statistics. Our private administration area uses strictly necessary cookies to keep staff signed in securely.

6. Who we share it with

We use a small number of service providers to run the site, who handle information only on our instructions:

• Cloudflare, Inc. (USA): website hosting, security, data storage and email forwarding;
• Resend, Inc. (USA): sending notification emails to our team;
• Google LLC (USA): our business email inbox.

We may also disclose information where required or authorised by law.

7. Overseas disclosure

We are based in the United States. Your information is stored and processed in the United States, may pass through Cloudflare's global network, and is accessed by our team in Türkiye and the United Arab Emirates. By contacting us you understand your information will be handled outside Australia. We take reasonable steps to ensure our providers protect it to a standard consistent with the APPs.

8. Automated decisions

We do not use computer programs to make decisions about you that could significantly affect your rights or interests.

9. How long we keep it

• contact messages, including copies in our email inbox: up to 3 years after our last contact with you, then deleted;
• visit statistics: up to 26 months, then deleted;
• security records: up to 180 days.

10. Security

Data is encrypted in transit, access to our administration area is limited to authorised staff and protected by two-factor authentication. No method of storage or transmission is completely secure, but we take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access.

11. Access and correction

You can ask to see the personal information we hold about you, or ask us to correct or delete it, by emailing hello@ashton-care.com.au. We will respond within 30 days. We may need to confirm your identity first.

12. Complaints

If you have a concern about how we've handled your information, please contact us first and we will try to resolve it within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

13. Children

Our products are for adults. This site is not directed at children and we do not knowingly collect information from anyone under 18.

14. Changes

We may update this policy. The date at the top shows when it last changed.