Privacy Policy

1. Who we are and scope

This policy explains how Wildfire International Pty Ltd (ACN 635 342 264) as trustee for the Wildfire Oils Unit Trust (ABN 56 552 478 779), trading as Wildfire Oil (“Wildfire”, “we”, “us”) handles personal information in connection with our retail website at https://wildfireoil.com/ and related business operations.

It concerns information about identifiable individuals, including customers, business contacts and representatives. It should be read alongside the applicable website terms.

Back to contents

2. Information we collect

We may collect names, business roles, email addresses, phone numbers, billing and delivery addresses, account identifiers, correspondence, enquiries, orders, invoices, purchase history, refunds, payment references and information necessary to provide support. For approved trade arrangements, information may also include credit application details, business references, payment history and recovery correspondence. We do not ordinarily need complete payment-card numbers: these are generally processed by payment service providers.

Our websites and technology providers may process IP addresses, approximate location derived from IP, device and browser identifiers, website usage events, security logs, cookies and similar technical information. We may receive information about individuals from an employing business, an authorised colleague, payment or delivery providers, or other lawful sources.

Back to contents

3. Why and how we use information

We use information to administer accounts; respond to enquiries; supply goods and services; process, reconcile and refund payments; arrange shipping; keep business records; manage customer relationships; assess and administer credit where applicable; investigate fraud and security incidents; manage disputes, product safety and recalls; provide lawful marketing communications; analyse and improve our websites and services; and comply with legal obligations.

Where information is requested for an order or account, choosing not to provide necessary details may prevent us from completing the transaction or providing the requested service. We collect information through our websites, registrations, checkout, email, telephone, business correspondence, and service providers.

Back to contents

4. Accounts, checkout and orders

Our retail website allows customers to browse and order goods and may allow account creation. Checkout and payment services process billing, delivery and transaction information. Fulfilment and freight providers may receive delivery details and telephone numbers where needed to deliver or investigate an order. We may use customer feedback and review-invitation providers where enabled; optional promotional messages remain subject to applicable messaging requirements.

Back to contents

5. Business systems, hosting and technology

We may use website and email hosting services; content-management and ecommerce platforms; plugins, extensions and integrations; banking and payment services; customer relationship management and accounting systems; customer support, business email and communications platforms; office productivity software; document and spreadsheet applications; cloud storage, backup and file sharing; security and anti-spam services; and automation platforms.

Depending on configuration, a plugin or integration may process data solely within our hosting environment or share relevant information with an external provider. Categories of information processed depend on the function of the service. We maintain oversight of our technology arrangements and take reasonable steps to restrict access and protect personal information.

Back to contents

6. Payments, banking and financial records

We may share relevant information with banks, financial institutions, payment gateways, accounting providers and financial intermediaries as reasonably necessary for payments, refunds, bank-detail verification, reconciliation, chargebacks, fraud prevention, financing or credit administration, and legal compliance. We may use external advisers or lawful debt-recovery providers when necessary.

Financial providers may handle information under their own privacy policies. You should not send full payment-card details through ordinary email.

Back to contents

7. Communications and direct marketing

We may use email delivery, campaign management and automated communication services for operational messages, order and account notifications, requested updates and marketing. We may use more than one marketing provider during a migration or operational transition. Marketing messages are sent in accordance with applicable law and any relevant permissions, and include an unsubscribe mechanism where required.

Unsubscribing from promotional communications does not prevent necessary transactional, account, safety or legally required messages. Providing a telephone number by itself does not constitute consent to receive promotional SMS.

Back to contents

8. Website cookies, analytics and security

Our retail site may use cookies, pixels, tags, analytics and advertising attribution technologies to support login, carts, performance measurement, advertising effectiveness and security. These technologies may collect browser or device information, page views, referral sources, interactions and conversion events.

We also use visitor-behaviour analytics, which may provide heatmaps, clicks, scrolling data, and session replay or session-recording features to help understand website usability. We take reasonable steps to use available masking and configuration controls to reduce exposure of sensitive or personal information. Third-party providers may set or read cookies or similar identifiers subject to their own settings and policies.

You can control cookies using your browser and, where available, our site’s preference controls. Disabling some cookies may affect site functionality. Advertising choices may also be offered by relevant advertising providers.

Back to contents

9. Artificial intelligence and automated technologies

We may use artificial intelligence, machine learning, generative AI and AI-assisted automation, including tools for analysis, document processing, communications and operational support. These may be provided by third parties or integrated into business software. Depending on the task and configuration, information submitted to an AI-assisted service may include business records or personal information.

Where personal information is involved, we aim to minimise what is shared, use appropriate access and security controls, and consider the privacy and confidentiality implications of the relevant provider and use. We do not treat this policy as blanket consent to share personal information with any AI service for any purpose. Where a use requires separate notification, consent or another lawful basis, we will address that requirement.

Back to contents

10. Service providers and disclosures

We may disclose relevant information to contractors and service providers who support website hosting, ecommerce, payment processing, cloud storage, customer service, accounting, CRM, email delivery, analytics, security, business administration, fulfilment, carriers and professional advice. We may disclose information to regulators, law enforcement or other parties where required or authorised by law, or where reasonably necessary to protect rights, safety or security.

We do not publish a complete list of our suppliers in this policy because providers change over time. A provider may process information as a service provider or as an independent organisation under its own privacy obligations, depending on its role.

Back to contents

11. Overseas processing and disclosure

Some cloud, email, analytics, ecommerce, security, payment, AI and other technology providers may store or access information outside Australia. Where an overseas disclosure occurs, we take steps appropriate to the circumstances and our applicable obligations, including those relating to overseas recipients.

The countries of overseas recipients depend on the providers and configurations in use. We will identify likely recipient countries where practicable once confirmed in our service-provider review, and update this policy as needed. The use of an Australian hosting company does not necessarily mean all associated processing remains in Australia.

Back to contents

12. Security, record retention and deletion

We use reasonable technical, organisational and administrative measures to safeguard personal information, including access controls and appropriate security processes. No electronic system can be guaranteed completely secure.

We retain personal information for as long as reasonably needed for the purpose collected, and as required by tax, accounting, legal, record-keeping, safety and dispute obligations. We securely delete or de-identify information when no longer required, subject to lawful retention, backups and technical constraints.

Back to contents

13. Age and permitted users

Our retail offering is intended for adults aged 18 and over. We do not knowingly seek personal information from children for retail purchasing. If you believe a minor has provided personal information, please contact us.

Back to contents

14. Access, correction and privacy enquiries

You may request access to personal information we hold about you or ask us to correct inaccurate, incomplete or outdated information. We may need to verify your identity before providing access or making changes. We will respond within a reasonable period and explain any refusal where required by law.

If you have a privacy concern or complaint, please contact us using the details below with an explanation of the issue. We will investigate and respond within a reasonable timeframe, generally aiming to respond within 30 days. If you are dissatisfied, you may be able to complain to the Office of the Australian Information Commissioner (OAIC), subject to applicable requirements.

Back to contents