Privacy Policy

Last updated: 26 July 2026

Maison Obsidian ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, hold and disclose your personal information when you use maisonobsidian.com.au (the "Site").

The personal information we collect

We collect only what we need to process your orders and requests:

• Contact details — your name and email address.
• Delivery details — your shipping address, suburb, state and postcode.
• Order information — the products you order and your order history.
• Fragrance requests — the fragrance you ask us to source, along with your name and email.
• Payment information — card details are entered directly with our payment processor, Stripe. We never see or store your full card number; we receive only confirmation of payment and limited details such as the amount and a payment reference.
• Functional storage — your browser stores small functional items (for example, to remember that a prompt has already been shown). We do not use third-party advertising or analytics cookies.

How we collect it

We collect personal information directly from you — when you place an order, enter a postcode to calculate shipping, or submit a fragrance request. Payment information is collected by Stripe on our behalf at checkout.

Why we collect and use it

We use your personal information to:

• process, fulfil and deliver your orders;
• obtain a live shipping quote from Australia Post;
• respond to your fragrance requests and enquiries;
• provide customer service and keep records of your orders; and
• meet our legal obligations.

We only use your information for the purpose for which it was collected, a related purpose you would reasonably expect, or where you have consented.

Who we share it with

We disclose personal information only to the service providers that help us run the Site, and only as needed to provide their service:

• Stripe — payment processing.
• Australia Post — shipping rates and delivery.
• Supabase — secure database storage of orders and requests.
• Vercel — website hosting.

We do not sell your personal information, and we do not disclose it for any unrelated purpose without your consent.

Overseas disclosure

Some of our service providers (including Stripe, Supabase and Vercel) may store or process data on servers located outside Australia, including in the United States and the European Union. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

Direct marketing

We will only send you marketing communications if you have opted in, and every such message will include an easy way to unsubscribe. Transactional messages about your order or request are not marketing and may be sent as needed to complete your order.

How we keep it secure

We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access or disclosure. Order and request data is stored with access restricted to us, and payment card data is handled entirely by Stripe. No method of transmission or storage is completely secure, but we work with reputable providers who maintain strong security practices.

Accessing and correcting your information

You may ask us for a copy of the personal information we hold about you, or ask us to correct it, at any time. Contact us using the details below and we will respond within a reasonable period. If we cannot give you access or make a correction, we will explain why in writing.

How long we keep it

We keep your personal information only for as long as needed to fulfil your orders, meet our legal and record-keeping obligations, and resolve any disputes. When it is no longer needed, we take reasonable steps to destroy or de-identify it.

Complaints

If you believe we have mishandled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact us

Maison Obsidian
Email: privacy@maisonobsidian.com.au
[Registered business name / ABN / postal address — to be added]

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the "last updated" date shown above.

This policy is provided for the Maison Obsidian storefront and describes our current practices. It is general information, not legal advice — please confirm the business details above and have the policy reviewed for your specific circumstances before relying on it.