Privacy policy.

1. Who we are

Dune Living is the trading name of Ky Michael Gregory Heffernan, ABN 85 564 399 798, of 42 Township Drive, Burleigh Heads QLD 4220 ("Dune Living", "we", "us", "our"). We supply and install outdoor saunas and cold plunges in Queensland and surrounding areas. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What we collect

We only collect what we need. Depending on how you deal with us, this may include:

• Contact details: your name, email address, phone number, suburb and postcode.
• Enquiry and project details: the product you are interested in, details about your property, installation site and timing, and anything else you choose to tell us, including photos you upload.
• Order details: delivery and billing addresses, what you bought, and payment and payment plan history. Card details are handled by our payment provider and are not stored by us.
• Identity verification: if you take a payment plan, we may ask you to verify your identity through our payment provider. We keep the result, not copies of your documents.
• Website and advertising information: your IP address, device and browser type, pages viewed, and how you arrived at our site (for example, from an ad), collected through cookies and similar tools.
• Social media and ad forms: if you contact us through Facebook or Instagram, or complete a lead form in one of our ads, we receive the details you submit and your public profile name.

We collect most information directly from you. We may also receive it from advertising platforms, our payment provider, or someone who refers you to us. You can deal with us without giving your name when you are only asking a general question, but we cannot quote, sell or install without your contact details.

3. How we use it

• to respond to your enquiry, provide quotes and book consultations
• to process orders and payments, and manage payment plans
• to arrange delivery, site checks and installation
• to provide customer support, servicing and warranty
• to send you updates and offers we think you will be interested in (you can opt out at any time)
• to measure and improve our website and advertising, and to show relevant ads to you and to people like you
• to prevent fraud and meet our legal, tax and accounting obligations

4. Who we share it with

We do not sell your personal information. We share it only with people who help us run the business, and only what they need:

• payment and identity verification providers (such as Stripe)
• website hosting, data storage, email and software providers, including the image tool behind our product visualiser
• advertising and analytics platforms (such as Meta and Google)
• delivery, installation and licensed trade contractors working on your job
• our professional advisers, such as accountants and lawyers
• government bodies or others where the law requires or allows it

5. Cookies, pixels and advertising

Our website may use cookies and similar technologies, including tools such as the Meta Pixel and Google tags, to understand how people use the site, measure how our ads perform, and show our ads to people who have visited our site or who are similar to our customers. We may also share hashed (encrypted) contact details with advertising platforms to create or exclude audiences.

You can control cookies in your browser settings, manage ad preferences in your Facebook and Instagram ad settings and Google ad settings, or opt out of interest-based ads at youradchoices.com.au. The site still works if you block cookies.

6. Marketing

We only send marketing emails or SMS where you have agreed or where it is otherwise allowed under the Spam Act 2003 (Cth). Every message includes a way to unsubscribe, or you can simply reply and ask us to stop. We will still contact you about an order, installation or payment plan you have with us.

7. Storage, security and overseas providers

We store information electronically with reputable providers and take reasonable steps to protect it from misuse, loss and unauthorised access. Some of our providers store data outside Australia, including in the United States. We keep personal information only as long as we need it for the purposes above or as the law requires (for example, tax records for 7 years), then delete or de-identify it.

If a data breach is likely to cause you serious harm, we will notify you and, where required, the Office of the Australian Information Commissioner.

8. Access, correction and deletion

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it where we no longer need it. Contact us using the details below. We will respond within 30 days and may need to confirm your identity first.

9. Complaints

If you have a concern about how we have handled your information, contact us first and we will try to resolve it within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

10. Contact us

Dune Living, 42 Township Drive, Burleigh Heads QLD 4220
Email: ky.heffernan@duneliving.com.au
Phone: 0450 326 290

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.