Privacy Policy

Effective date: 30^th August 2026

Mandarin Mahjong respects your privacy and is committed to handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit mandarinmahjong.com, place an order, join our mailing list, contact us or otherwise interact with Mandarin Mahjong.

Mandarin Mahjong is operated by [insert legal entity name], ABN [insert ABN], trading as Mandarin Mahjong in New South Wales, Australia.

In this policy, “Mandarin Mahjong”, “we”, “us” and “our” refer to the business operating this website. “You” and “your” refer to our customers and website visitors.

1. Personal Information We Collect

Depending on how you interact with us, we may collect:

Your name, email address, telephone number and delivery address
Billing and payment information
Order details, purchase history and returns
Customer account and login information
Messages, enquiries, reviews, photographs and other information you submit
Marketing preferences and mailing-list subscriptions
Device information, browser type, IP address and approximate location
Website activity, such as pages viewed, products considered and links selected
Information collected through cookies, analytics tools and advertising technologies
Information used to identify or prevent fraud, misuse or security risks

Payment information is processed by our payment providers. We generally do not receive or store complete payment-card details.

2. How We Collect Information

We may collect personal information:

Directly from you when you place an order, create an account or contact us
When you subscribe to our Founder’s List, newsletters or other marketing
When you submit a review, photograph or contact form
Automatically through cookies, pixels and similar technologies
From payment providers, delivery carriers, fulfilment partners and other service providers
From advertising, social media or analytics platforms where permitted
From publicly available sources where appropriate and lawful

You may choose not to provide certain information, but this may prevent us from completing an order, delivering a product or responding to your request.

3. How We Use Personal Information

We may use your personal information to:

Process payments, orders, deliveries, returns and refunds
Create and manage customer accounts
Provide customer support
Communicate about orders, products and service updates
Send marketing communications where you have subscribed or where otherwise permitted
Personalise and improve our website, products and customer experience
Measure website traffic and marketing performance
Display relevant advertising
Request and publish customer reviews with permission
Prevent fraud, unauthorised transactions, misuse and security incidents
Maintain business, tax, accounting and transaction records
Comply with legal obligations and resolve disputes
Enforce our Terms of Service and protect our legal rights

We will not use personal information for an unrelated purpose unless we have a lawful basis or obtain any consent required.

4. Marketing Communications

You may receive promotional emails from us where you have subscribed, requested updates or where marketing is otherwise permitted by law.

You may unsubscribe at any time by selecting the unsubscribe link in a marketing email or contacting us through our Contact Us page.

Unsubscribing from marketing will not prevent us from sending necessary communications about an order, payment, delivery, return, account or customer-service request.

5. Cookies and Similar Technologies

Our website uses cookies, pixels and similar technologies to operate the store, remember preferences, understand website activity and support advertising.

These technologies may include:

Essential cookies needed for checkout, security and basic website functions
Preference cookies that remember your selected settings
Analytics cookies that help us understand how visitors use our website
Advertising cookies and pixels used to measure campaigns and show relevant advertising

Depending on the services enabled on our website, these tools may be provided by Shopify, Google, Meta, TikTok, Klaviyo and other technology partners.

Where required, non-essential cookies and advertising technologies will only be activated after you provide consent. You may update your choices through our Cookie Preferences tool.

Blocking some cookies may affect how parts of the website operate.

6. How We Share Personal Information

We may provide personal information to trusted service providers where reasonably necessary to operate our business, including:

Shopify and website-hosting providers
Payment processors and fraud-prevention services
Warehouses, fulfilment providers, shipping carriers and customs agents
Email and customer-communication platforms
Analytics and advertising platforms
Review and customer-feedback providers
Information technology, cybersecurity and cloud-storage providers
Accountants, insurers, legal advisers and professional consultants
Government agencies, regulators or law-enforcement bodies where required by law

These providers may only receive the information reasonably necessary to perform their services.

We may also disclose information in connection with a business sale, merger, restructuring or transfer, subject to appropriate confidentiality and legal requirements.

7. Shopify

Our online store is hosted by Shopify. Shopify processes information about website visitors and customers to provide services such as website hosting, checkout, payment processing, security, analytics and store functionality.

Shopify may process personal information in countries other than your own. Shopify’s handling of information is also governed by its own privacy terms.

8. Advertising and Data Sharing

We do not sell personal information in exchange for money.

However, the use of advertising pixels, personalised advertising and certain analytics services may be treated as a “sale”, “sharing” or use for targeted advertising under some privacy laws.

Where applicable, you may opt out through our:

Cookie Preferences tool
Your Privacy Choices or data-sharing opt-out page
Browser-based Global Privacy Control setting, where supported

Shopify provides tools for publishing a cookie banner and a data-sharing opt-out page, including support for Global Privacy Control signals in applicable regions.

9. International Processing and Transfers

Mandarin Mahjong is based in Australia and serves customers internationally.

Your personal information may be processed or stored outside your country, including in Australia, the United States, Canada, China and countries where our technology, fulfilment, payment and delivery providers operate.

Where required by law, we take reasonable steps to use providers and transfer arrangements designed to protect personal information. Australian privacy guidance requires regulated organisations to consider safeguards when disclosing information to overseas recipients, while European data-protection rules require an approved transfer mechanism or other appropriate safeguard in relevant circumstances.

10. Retaining Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to:

Complete transactions and provide customer support
Maintain tax, accounting and business records
Manage warranties, disputes, returns and product issues
Prevent fraud and maintain security
Meet legal and regulatory requirements
Establish, exercise or defend legal claims

Retention periods depend on the type of information, why it was collected and any applicable legal requirements.

When information is no longer required, we will take reasonable steps to delete, destroy or de-identify it, unless continued retention is permitted or required by law.

11. Keeping Your Information Secure

We use reasonable administrative, organisational and technical measures to protect personal information from loss, misuse, interference and unauthorised access, modification or disclosure.

These measures may include access controls, secure service providers, account protections and encrypted data transmission where appropriate.

No method of online transmission or storage is completely secure. You are responsible for keeping your account password and login information confidential.

Australian Privacy Principle 11 requires regulated entities to take reasonable steps to protect the personal information they hold.

12. Your Privacy Rights

Depending on where you live and the laws applying to your information, you may have the right to:

Request access to personal information we hold about you
Ask us to correct inaccurate or incomplete information
Request deletion of personal information
Restrict or object to certain uses of your information
Withdraw consent where processing is based on consent
Request a portable copy of certain information
Opt out of marketing or targeted advertising
Opt out of the sale or sharing of personal information where applicable
Make a privacy complaint without being treated unfairly

Some rights are subject to legal exceptions. For example, we may need to retain transaction records to meet tax, accounting, fraud-prevention or legal obligations.

The Australian Privacy Principles address access and correction rights. EEA and UK privacy laws provide additional rights relating to access, correction, deletion, restriction and objection. Applicable California law may provide rights to know, correct, delete and opt out of the sale or sharing of information.

To exercise a privacy right, please submit a request through our Contact Us page. We may need to verify your identity before completing the request.

13. EEA and United Kingdom Customers

Where the European Economic Area or United Kingdom data-protection laws apply, [insert legal entity name] is the controller of your personal information.

We process personal information using one or more of the following lawful bases:

Contract: to process and deliver orders and provide requested services
Legal obligation: to comply with tax, accounting and other legal requirements
Legitimate interests: to operate and protect our business, prevent fraud, improve our services and provide customer support, where those interests do not override your rights
Consent: for optional marketing, advertising cookies or other activities requiring consent

European data-protection rules recognise consent, contractual necessity, legal obligations and legitimate interests as possible lawful grounds for processing.

You may withdraw consent at any time, although this will not affect processing completed before consent was withdrawn.

You may also lodge a complaint with the data-protection authority in the country where you live. UK customers may complain to the UK Information Commissioner’s Office.

14. United States Privacy Rights

Residents of certain United States jurisdictions may have additional privacy rights where the relevant law applies to Mandarin Mahjong.

These may include rights to:

Know what personal information is collected, used or disclosed
Request access, correction or deletion
Opt out of the sale, sharing or use of information for targeted advertising
Limit certain uses of sensitive personal information
Exercise privacy rights without unlawful discrimination

You may submit a request through our Contact Us page or use our Your Privacy Choices page where available.

15. Children’s Privacy

Our website and online store are not directed to children under 16, and we do not knowingly collect personal information directly from children under 16.

Our products may contain small parts. Parents and guardians should review the product’s age guidance and supervise children where appropriate.

16. Third-Party Websites

Our website may contain links to third-party websites, social media platforms or services.

We do not control their privacy practices and are not responsible for how they collect or use information. We recommend reviewing the privacy policy of any third-party service you visit.

17. Privacy Enquiries and Complaints

For questions, privacy requests or complaints, please contact us through our Contact Us page.

Please include enough information for us to understand and respond to your request. We may ask you to verify your identity.

We will review privacy complaints fairly and aim to respond within a reasonable period.

If you are not satisfied with our response, you may be entitled to contact:

The Office of the Australian Information Commissioner
Your local EEA data-protection authority
The UK Information Commissioner’s Office
A relevant United States privacy regulator or Attorney General

Australian privacy-policy guidance expects regulated organisations to explain how people can seek access or correction and how privacy complaints will be handled.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes to our business, services, technology or legal obligations.

The updated policy will be published on this page with a revised effective date. Where a change is significant, we may provide additional notice where appropriate or required.

19. Contact Us

Questions about this Privacy Policy or the handling of your personal information may be submitted through our Contact Us page.

Our legal business identity and customer-support contact details are available on that page.

Mandarin Mahjong
Operated by: [Insert legal entity name]
ABN: [Insert ABN]
Business location: New South Wales, Australia
Contact: [Link to Contact Us page]