Your privacy,
handled with care
A short, plain-English summary of how House of Kanha collects, uses and protects your personal information — under the Australian Privacy Principles.
APP compliant
Regulated by the OAIC under Australian privacy law.
Never sold
We don't sell, rent or trade your data. Ever.
3-day reply
Requests acknowledged in 3 days, resolved in 30.
Breach alerts
You and the OAIC are notified under the NDB scheme.
Jump to a section
Overview
House of Kanha is an Australian business. We handle your personal information under the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). Using our site or buying from us means you accept this policy.
- Entity
- House of Kanha Pty Ltd
- ABN
- [insert ABN]
- Contact
- [email protected]
- Regulator
- OAIC
You can deal with us anonymously or by pseudonym for general enquiries (APP 2) — but not for orders, delivery or warranty claims.
What we collect
Only what we reasonably need (APP 3):
- Name
- Email & phone
- Billing / delivery address
- Order & sizing details
- Account login
- Payment type + last 4 digits
- IP, device & browser
- Pages viewed
- Messages & reviews
- Card numbers are never stored by us — payments go straight to PCI-DSS compliant processors.
- Sensitive information (e.g. a metal allergy for a custom piece) is only collected with your consent.
- We mostly collect directly from you; sometimes via payment, shipping, analytics partners or a gift sender.
How we use it
| Purpose | Why |
|---|---|
| Orders | Payment, packing, delivery, returns, warranty |
| Support | Answering enquiries and resolving issues |
| Accounts | Login, saved addresses, wishlist |
| Marketing | Newsletters and launches — with consent |
| Improvement | Analytics and product decisions |
| Security | Fraud prevention and site protection |
| Compliance | Tax, consumer law and lawful requests |
We won't use your information for an unrelated purpose without your consent, unless the Privacy Act allows it.
Cookies
| Type | Purpose | Opt out? |
|---|---|---|
| Essential | Cart, checkout, login, security | No |
| Preferences | Currency, size, recently viewed | Yes |
| Analytics | Traffic and performance stats | Yes |
| Marketing | Retargeting and ad measurement | Yes |
Manage these via our cookie banner or your browser. Opt out of ad targeting at youronlinechoices.com.au.
Who we share with
We never sell, rent or trade your personal information.
- Payments — Stripe, PayPal, Afterpay and similar.
- Delivery — Australia Post and couriers.
- Tech providers — hosting, CRM, email/SMS, chat, analytics.
- Advisers — accountants, insurers, lawyers (confidential).
- Authorities — where required by Australian law.
- A buyer of our business — if we sell or restructure.
Overseas (APP 8)
Some providers store data in the USA, Canada, Ireland/EU, Singapore and India (artisan despatch). We take reasonable steps to ensure they meet APP standards, but overseas recipients may not be subject to Australian law.
Marketing & opt-out
- Marketing complies with APP 7 and the Spam Act 2003 (Cth).
- Every email and SMS has a working unsubscribe link.
- Opt-outs are actioned within 5 business days.
- Any phone marketing is screened against the Do Not Call Register.
Opting out stops marketing — not order confirmations, shipping updates or safety notices.
Security & breaches
Under APP 11 we protect your information with:
- TLS/HTTPS encryption
- Tokenised payments
- Role-based access
- MFA on admin accounts
- Encrypted backups
- Staff privacy training
If an eligible data breach is likely to cause serious harm, we notify affected individuals and the OAIC under the Notifiable Data Breaches scheme — usually assessed within 30 days. No system is perfectly secure, so please keep your password private.
Your rights
Under APP 12 & 13 you can ask us to access, correct or delete your information, or opt out of marketing. Email [email protected] with the subject "Privacy Request".
How long does it take?
Acknowledged in 3 business days, answered within 30 days.
Is there a fee?
No fee to request or correct. A reasonable fee may apply for extensive archival retrieval — always quoted first.
Can you refuse?
Only in limited cases allowed by the Privacy Act. We'll give written reasons and tell you how to complain.
Do you verify identity?
Yes — we confirm who you are before releasing anything. It protects you.
Complaints
Step 1 — email [email protected], subject "Privacy Complaint". We reply within 30 days.
Step 2 — not satisfied? Escalate to the OAIC:
- Web
- oaic.gov.au
- Phone
- 1300 363 992
- [email protected]
- Post
- GPO Box 5218, Sydney NSW 2001
Other details
- Children — our store is for adults; we don't knowingly collect data from under-15s without a guardian's consent.
- Third-party links — linked sites and embedded content have their own privacy policies.
- Updates — we review this policy regularly; significant changes will be notified on this page or by email.
Version 1.0 — effective 2 September 2026. Earlier versions available on request.
Privacy questions?
Our Privacy Officer replies personally — usually within three business days.