FACETORI
Privacy policy
What personal information we collect, why, who receives it, where it is stored and your rights.
Who is responsible
HELLO MOLLY PTY LTD (ABN 91 158 264 076), trading as FACETORI, 74 O’Riordan St, Alexandria NSW 2015, Australia, is responsible for your personal information (“we”). For EU, EEA and UK customers, we are the controller under the GDPR and UK GDPR. Contact for privacy questions: support@facetori.shop, +61 425 944 353.
We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and, where they apply to you, the EU General Data Protection Regulation and the UK GDPR.
What we collect
- Order details: name, delivery and billing address, email, phone number (optional), what you ordered, the currency and language you used.
- Payment details: handled by our payment provider. We receive only the payment status, the payment method type and the last four digits of a card; we never receive or store full card numbers.
- Account details if you create an account: email, password (stored encrypted), saved addresses and order history.
- Messages you send us by email, phone, the contact form or the withdrawal form.
- Technical data: the IP address and browser information our web server logs for security, kept for a short period.
We collect this information directly from you. We do not use advertising or analytics trackers, we do not build profiles, and we do not sell personal information.
Why we use it, and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing, delivering and supporting your order, returns and withdrawals | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Answering your questions | Contract or our legitimate interest in answering you (Art. 6(1)(b) and (f)) |
| Keeping the shop secure and preventing fraud | Legitimate interest (Art. 6(1)(f)) |
| Your account | Contract (Art. 6(1)(b)) |
The details marked as required at checkout are needed to fulfil your order; without them we cannot deliver. We do not send marketing emails.
Who receives it
- Our payment provider, to process your payment and prevent fraud.
- The postal or courier company delivering your parcel (name, address, phone or email for delivery updates), and customs authorities where an import declaration is needed.
- Our website hosting and email providers, who store data on our behalf under data processing terms.
- Professional advisers and authorities where the law requires it.
Where it is stored (overseas disclosure)
Our website is hosted on servers in the European Union. Payment providers and carriers may process data in Australia, the European Union, the United Kingdom and the United States. When personal information of EU, EEA or UK customers is transferred outside those regions, we rely on adequacy decisions or the European Commission’s standard contractual clauses. When we disclose personal information of Australian customers overseas, we take reasonable steps to ensure the recipient handles it in line with the Australian Privacy Principles.
How long we keep it
Order and invoice records: 7 years, to meet Australian tax record-keeping rules. Messages: up to 2 years after the matter is closed. Accounts: until you ask us to delete them (order records are then kept as above). Server logs: up to 30 days.
Security
The shop uses an encrypted connection (HTTPS/TLS). Access to customer data is limited to the people who need it to serve you. Payments are handled by a PCI DSS-compliant provider. If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, and the relevant supervisory authority where the GDPR applies.
Your rights
You can ask to access and correct the personal information we hold about you at any time. If the GDPR or UK GDPR applies to you, you also have the right to erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Email support@facetori.shop; we reply within 30 days and do not charge for requests.
Complaints
Please contact us first and we will try to resolve your concern within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992). If you live in the EU or EEA, you can complain to the data protection authority of your country; in the UK, to the Information Commissioner’s Office (ico.org.uk).
Cookies
We only use the cookies needed for the shop to work. See our Cookie policy.
Children
Our shop is not directed at children, and we do not knowingly collect personal information from anyone under 16.
Changes
We will update this policy if the way we handle personal information changes. The date at the bottom shows when it was last updated.
Last updated 10 October 2026