Last Updated: 18 May 2026

1. Introduction

My PlantCo (“we”, “us”, or “our”) is committed to protecting your privacy. This policy outlines how we collect, use, disclose and safeguard your data in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and where applicable, the EU General Data Protection Regulation (GDPR).

2. Information We Collect

We collect personal information that is reasonably necessary for our business functions.

• Direct Collection: Name, email and phone number via contact forms.
• Technical Data: IP addresses, browser type and usage data collected via cookies (see Section 8).
• Sensitive Data: We do not typically collect sensitive information (e.g., health or ethnicity) via our website. If we do, we will seek your explicit consent.

3. Lawful Basis for Processing (GDPR Requirement)

Under the GDPR, we process your data based on:

• Consent: When you voluntarily submit a contact form or subscribe to a newsletter.
• Contractual Necessity: To fulfill a request or service you have engaged us for.
• Legitimate Interests: To improve our products and website security, provided these do not override your fundamental rights.

4. How We Use and Disclose Information

We use your data to respond to inquiries, process wholesale applications and (with your consent) send marketing updates.

• Third Parties: We may share data with trusted service providers (e.g., CRM platforms or website hosts).
• Overseas Disclosure: We may use cloud service providers located outside Australia (e.g., USA). We take reasonable steps to ensure these recipients comply with the APPs or equivalent data protection standards.

5. Data Security and Retention

We implement robust technical and organisational measures (including SSL encryption) to protect your data from unauthorised access. We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.

6. Your Rights

Regardless of your location, you have the following rights:

• Access & Correction: You may request access to or correction of your personal data.
• Erasure (Right to be Forgotten): You may request that we delete your personal data (subject to legal obligations).
• Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: You can withdraw consent for marketing at any time.

7. Complaints and Contact

If you believe we have breached the APPs or GDPR, please contact our Privacy Officer at privacy@myplantco.com.  We will respond within 30 days. If you are unsatisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

8. Cookies and Tracking

Our website uses cookies to enhance user experience. You can manage your cookie preferences through your browser settings or our on-site consent banner.