PRIVACY POLICY

Last Updated: March 21, 2026.

This Privacy Policy applies to all personal information collected by J.Halliday Studio (we, us or our) and describes how we collect, use, and disclose your personal information when you visit, use our services, or make a purchase from the site (via the website located at www.jhallidaystudio.com.au) or otherwise communicate with us (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

1. What information do we collect?

The kind of personal information that we collect from you will depend on how you use the
website and use our services. The personal information which we collect and hold about you may include:

- Order information including your full name, billing address, shipping address, payment details, email address, phone number.

- Account information/login details including your username, password, security questions.

- Shopping information including the items you view, put in your cart or add to your wish list.

- Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

2. Types of information

The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

(a) whether the information or opinion is true or not; and

(b) whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in
most cases not be classified as “Personal Information” and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional
body, criminal record or health information.

Sensitive Information will be used by us only:

(a) for the primary purpose for which it was obtained;
(b) for a secondary purpose that is directly related to the primary purpose; and
(c) with your consent or where required or authorised by law.

3. How we collect your personal information

(a) We may collect personal information from you whenever you input such information into the website, related app or provide it to Us in any other way.

(b) We may also collect cookies from your computer which enable us to tell when you use the website and also to help customise your website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.

(d) Where reasonable and practicable we collect your personal information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.

4. Purpose of collection

(a) We collect personal information to provide you with the best service experience possible on the website and keep in touch with you about developments in our business.

(b) We customarily only disclose personal information to our service providers who assist us in operating the website. Your personal information may also be exposed from time to time to
maintenance and support personnel acting in the normal course of their duties.

(c) By using our website, you consent to the receipt of direct marketing material. We will only use your personal information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive personal information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.

5. Security, Access and correction

(a) We store your personal information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. When we no longer require your personal information for the purpose for which we obtained in, we will take reasonable steps to destroy and anonymise or de-identify it. Most of the personal information that is stored in our client files and records will be kept for a maximum of 7 years to fulfill our record keeping obligations.

(b) The Australian Privacy Principles:

(i) permit you to obtain access to the personal information we hold about you in certain circumstances (Australian Privacy Principle 12); and

(ii) allow you to correct inaccurate personal information subject to certain exceptions (Australian Privacy Principle 13).

(c) Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.

6. Complaint procedure

If you have a complaint concerning the manner in which we maintain the privacy of your personal information, please contact us as on the contact details set out at the bottom of this policy. All complaints will be considered by Jordyn Halliday and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

7. Overseas transfer

Your personal information may be transferred overseas or stored overseas for a variety of reasons. It is not possible to identify each and every country to which your personal information may be sent. If your personal information is sent to a recipient in a country with data protection laws which are at least substantially similar to the Australian Privacy Principles, and where there
are mechanisms available to you to enforce protection of your personal (7) information under that overseas law, we will not be liable for a breach of the Australian Privacy Principles if your personal information is mishandled in that jurisdiction. If your personal information is transferred to a jurisdiction which does not have data protection laws as comprehensive as Australia's, we will take reasonable steps to secure a contractual commitment from the recipient to handle your information in accordance with the Australian Privacy Principles.

8. GDPR
In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in Europe. The fact that you may be located in Europe does not, however, on its own entitle you to protection under the GDPR. Our website does not specifically target customers located in the European Union and we do not monitor the behaviour of individuals in the European Union, and accordingly the GDPR does not apply.

9. Information we collect through cookies

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

10. Information we obtain from third parties

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

- Companies who support our site and services, such as Wix.

- Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the site, update the "Last updated" date and take any other steps required by applicable law.

12. How to contact us about privacy

If you have any queries, or if you seek access to your personal information, or if you have a complaint about our privacy practices, you can contact us through: info@jhallidaystudio.com.au.

STUDIO

PRIVACY POLICY