Privacy policy

FYAH PTY LTD Privacy Policy
Effective date: 10/06/2026
Last updated: 05/08/2026

 

1. About this Privacy Policy

This Privacy Policy explains how FYAH ABN 88677150015 of Suite 315/ 10-20 Gwynne Street, Cremorne, VIC, 3121 collects, uses, holds and discloses personal information in connection with its website at www.fyah.com.au, its business operations, and its communications with customers, suppliers and other individuals.

In this Privacy Policy, “personal information” has the meaning given in the Privacy Act 1988 (Cth) and generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Where applicable, FYAH handles personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles.

 

2. Personal information we collect

The types of personal information we may collect include:

  1. Contact details, such as name, email address, telephone number, business name and postal address.
  2. Account or enquiry information, such as details submitted through website forms, booking forms, contact forms or quote requests.
  3. Transaction information, such as order details, payment status, billing details and delivery information.
  4. Marketing preferences, such as newsletter subscriptions, consent records and communication preferences.
  5. Website usage information, such as IP address, browser type, device information, pages visited, referring website, time spent on the website and other analytics data.
  6. Correspondence records, including emails, telephone notes and messages sent through online platforms or social media.
  7. Any other personal information voluntarily provided to us by an individual.

We do not generally collect sensitive information, such as health information, racial or ethnic origin, political opinions, religious beliefs or criminal record information, unless it is reasonably necessary for our functions or activities and the individual has consented, or collection is otherwise permitted by law.

 

3. How we collect personal information

We may collect personal information:

  1. directly from an individual, including when they:
    • use our website;
    • complete an online form;
    • make an enquiry;
    • request a quote;
    • purchase goods or services;
    • subscribe to a mailing list;
    • communicate with us by email, telephone, social media or other means;
  2. automatically through our website, including through cookies, analytics tools and similar technologies;
  3. from third parties, where lawful and appropriate, including:
    • payment processors;
    • delivery or logistics providers;
    • marketing platforms;
    • referral partners;
    • publicly available sources.

Where reasonable and practicable, we collect personal information directly from the individual concerned.

 

4. Cookies and website analytics

Our website may use cookies, pixels, tags and similar technologies to:

  1. enable website functionality;
  2. improve website performance and user experience;
  3. understand how visitors use the website;
  4. remember user preferences;
  5. support marketing, remarketing or advertising activities.

We may use third-party services such as Google Analytics / Meta Pixel / Google Ads / TikTok. These services may collect information about website usage and may combine that information with other information held by those providers.

Users can usually adjust their browser settings to refuse cookies or notify them when cookies are being used. However, some parts of the website may not function properly if cookies are disabled.

 

5. Purposes for which we use personal information

We may use personal information for the following purposes:

  1. to operate and manage our business;
  2. to provide goods or services;
  3. to respond to enquiries and requests;
  4. to process orders, bookings, payments and refunds;
  5. to communicate with customers, suppliers and business contacts;
  6. to deliver website functionality and improve the website;
  7. to personalise user experience;
  8. to conduct marketing and promotional activities;
  9. to send newsletters or updates, where permitted;
  10. to manage customer relationships;
  11. to comply with legal, regulatory, accounting and tax obligations;
  12. to protect our lawful interests, including fraud prevention, security and dispute management;
  13. for any other purpose disclosed at the time of collection or authorised by law.

 

6. Direct marketing

We may use personal information to send direct marketing communications where permitted by law. These communications may include information about our products, services, promotions, updates or events.

Individuals may opt out of receiving marketing communications at any time by:

  1. using the unsubscribe link in an email;
  2. contacting us using the details in section 15 of this Privacy Policy.

We will take reasonable steps to action opt-out requests within a reasonable period.

 

7. Disclosure of personal information

We may disclose personal information to:

  1. our employees, contractors and related entities;
  2. professional advisers, including lawyers, accountants and consultants;
  3. IT service providers, hosting providers and software providers;
  4. payment processors and financial institutions;
  5. delivery, freight or logistics providers;
  6. marketing, analytics and advertising providers;
  7. customer support and communications platforms;
  8. government authorities, regulators or law enforcement bodies, where required or authorised by law;
  9. third parties involved in a business sale, merger, restructure or due diligence process;
  10. any other person with the individual’s consent or where disclosure is otherwise permitted by law.

We do not sell personal information to third parties.

 

8. Overseas disclosure

Some of our service providers may store, process or access personal information outside Australia. The countries in which these providers are located may include United States, New Zealand, Singapore, United Kingdom, European Union, China.

Where we disclose personal information overseas, we will take reasonable steps to ensure that the overseas recipient handles the information in a manner consistent with applicable Australian privacy requirements, unless an exception applies.

 

9. Payment information

Payments made through our website may be processed by third-party payment providers such as Stripe / PayPal / Square / Shopify Payments / Afterpay

We do not generally store complete payment card details. Payment information is handled by the relevant payment processor in accordance with its own privacy and security practices.

 

10. Security of personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Security measures may include:

  1. secure website hosting;
  2. SSL encryption;
  3. access controls;
  4. password protection;
  5. secure cloud storage;
  6. staff confidentiality obligations;
  7. regular review of information handling practices.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of information transmitted through the website.

 

11. Retention of personal information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to comply with legal, accounting, taxation and business record obligations.

When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless we are required or authorised by law to retain it.

 

12. Access to and correction of personal information

An individual may request access to personal information we hold about them, or request correction of that information if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests should be made using the contact details in section 15.

We may need to verify the individual’s identity before responding. In some circumstances, we may refuse access or correction where permitted by law. If we refuse a request, we will provide reasons where reasonable and lawful to do so.

 

13. Privacy complaints

If an individual has a concern or complaint about how we have handled their personal information, they may contact us using the details in section 15.

We will consider the complaint and respond within a reasonable period. We may request further information to properly investigate the matter.

If the individual is not satisfied with our response, they may contact the Office of the Australian Information Commissioner.

Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Telephone: 1300 363 992

 

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on our website with the effective date.

Continued use of the website after changes are published constitutes acceptance of the updated Privacy Policy, to the extent permitted by law.

 

15. Contact details

For privacy-related enquiries, access or correction requests, or complaints, please contact:

FYAH
Attention: Customer Support
Email: support@fyah.com.au
Address: Suite 315 / 10-20 Gwynne Street, Cremorne, VIC, 3121