Effective date: 26 September 2026

Homegrown Hemp (“Homegrown Hemp”, “we”, “us” or “our”) respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit homegrownhemp.com.au, create an account, place an order, contact us or otherwise interact with our business.

Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to us, we handle personal information in accordance with those requirements.

1. Information We Collect

Depending on how you use our website, we may collect:

• Your name
• Billing and delivery addresses
• Email address
• Telephone number
• Account username and encrypted login credentials
• Order details and purchase history
• Payment status and limited transaction information
• Delivery and tracking information
• Returns, refunds and customer-service records
• Enquiries, feedback, reviews and other communications
• Marketing and communication preferences
• IP address, browser type and device information
• Approximate location and referring website
• Website activity, cookie identifiers and technical data
• Any other information you voluntarily provide to us

We generally do not receive or store your complete payment-card details. Payments are processed securely by third-party payment providers according to their own privacy and security practices.

Please do not send us medical records, diagnoses or other sensitive health information. If you voluntarily provide sensitive information when contacting us, we will use it only as reasonably necessary to respond to your enquiry and as permitted by law.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order
• When you create or manage an account
• When you contact us or submit a website form
• When you request a return, replacement or refund
• When you subscribe to marketing communications
• Automatically through WordPress, WooCommerce, cookies, server logs and similar technologies
• From payment processors, delivery providers and fraud-prevention services involved in your transaction
• From third parties where you have authorised the disclosure or where collection is permitted by law

If you do not provide the information required to process an order, we may be unable to accept, fulfil or deliver it.

3. How We Use Personal Information

We may use your personal information to:

• Process payments, purchases and deliveries
• Create and manage customer accounts
• Provide order confirmations and tracking information
• Process returns, replacements and refunds
• Respond to questions, complaints and customer-service requests
• Detect and prevent fraud, misuse and security incidents
• Operate, maintain, secure and improve our website
• Maintain transaction, taxation and accounting records
• Comply with legal, regulatory and law-enforcement requirements
• Analyse website performance and customer experience
• Send marketing communications where you have consented or where otherwise permitted by law

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us.

Messages relating directly to your orders, payments, account, safety notices or customer-service requests are not marketing communications.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Keep products in your shopping cart
• Operate checkout and customer-account functions
• Remember preferences
• Protect the website against fraud and misuse
• Understand how visitors use the website
• Measure website performance
• Support marketing activities where you have provided any required consent

You can manage or block cookies through your browser settings and, where available, through our website’s cookie controls.

Blocking essential cookies may prevent parts of the website, including the shopping cart, checkout or account area, from working correctly.

5. How We Share Personal Information

We may disclose relevant personal information to trusted service providers that assist us with:

• Website hosting and technical support
• WordPress and WooCommerce functionality
• Payment processing
• Shipping, delivery and order fulfilment
• Email and customer communications
• Website analytics
• Security, fraud prevention and data backup
• Accounting, insurance, legal and professional services

We may also disclose information:

• When required or authorised by law
• To regulators, courts or law-enforcement agencies
• To protect our legal rights, customers, website or business
• In connection with a proposed or completed sale, restructure or transfer of the business, subject to appropriate confidentiality arrangements

We do not sell your personal information for money.

Service providers receive only the information reasonably necessary to perform their services and may be subject to their own privacy policies.

6. Overseas Processing and Storage

Some of our website, payment, email, analytics, security or hosting providers may store or process information outside Australia.

The countries involved may vary depending on the providers and infrastructure used. Where required by law, we take reasonable steps to ensure that overseas recipients handle personal information appropriately.

Information processed overseas may be subject to the laws of the country in which it is stored or processed.

7. Payment Information

Online payments are handled by secure third-party payment providers. Homegrown Hemp generally receives confirmation of the payment, transaction identifiers and limited payment information rather than your complete card number.

Your payment provider may collect and process information according to its own privacy policy and terms. We recommend reviewing those documents before completing a transaction.

8. Data Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information against:

• Misuse
• Interference
• Loss
• Unauthorised access
• Unauthorised modification
• Unauthorised disclosure

These measures may include secure connections, access restrictions, software updates, account controls, backups and security monitoring.

However, no website, electronic transmission or storage system is completely secure. We cannot guarantee the absolute security of information transmitted over the internet.

You are responsible for keeping your account password confidential. Please notify us promptly if you believe your account has been accessed without permission.

9. How Long We Retain Information

We retain personal information only for as long as reasonably necessary for purposes including:

• Completing and documenting transactions
• Providing customer support
• Managing returns and refunds
• Preventing fraud
• Resolving disputes
• Meeting taxation and accounting requirements
• Complying with legal and regulatory obligations

When personal information is no longer reasonably required, we take reasonable steps to delete it or remove identifying information, subject to backup, legal and recordkeeping requirements.

10. Accessing or Correcting Your Information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

To protect your privacy, we may need to verify your identity before completing a request.

In some circumstances permitted by law, we may refuse access or correction. Where required, we will explain the reason for the refusal and the available complaint process.

11. Marketing Communications

We may send promotional emails where you have subscribed, consented or where otherwise permitted by law.

You may unsubscribe at any time by:

• Selecting the unsubscribe link in a marketing email, or
• Contacting us at hello@homegrownhemp.com.au

We may retain a record of your unsubscribe request to ensure that your preference is respected.

12. Third-Party Websites

Our website may contain links to social media platforms, payment providers and other third-party websites.

We do not control those third parties and are not responsible for their content, security or privacy practices. You should review the privacy policy of a third-party service before providing personal information.

13. Children’s Privacy

Our online store and products are intended for adults.

We do not knowingly collect personal information directly from children under 18. If you are a parent or guardian and believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

14. Privacy Complaints

If you have a question or complaint about how we handle personal information, please contact us using the details below.

Please provide enough information for us to identify and investigate the issue. We will acknowledge and respond to your complaint within a reasonable period.

If you are not satisfied with our response and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner through oaic.gov.au.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, service providers, website features or legal obligations change.

The current version will be published on this page with its effective date. Where appropriate, we may also provide notice of material changes through the website or by email.

16. Contact Us

For privacy questions, access or correction requests, or complaints, contact:

Homegrown Hemp
Website: homegrownhemp.com.au
Email: hello@homegrownhemp.com.au
Phone: +61 449 583 752