PRIVACY POLICY

Last Updated 21/06/2025

This Privacy Policy (“Policy”) applies to The Scrub Lab, ABN 79 114 978 961

And governs all operations across our Australian business locations, training facilities, and digital platforms, including our website https://www.thescrublab.com.au, and any other online services we manage.

We are committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and other relevant privacy laws.

In the course of delivering our services, we may collect and process personal information as detailed in this Policy. For the purposes of the GDPR, The Scrub Lab is the data controller responsible for determining how and why your personal information is processed

This Policy explains how we collect, use, disclose, store, and dispose of personal information related to our customers, employees, contractors, and anyone else we interact with. It should be read in conjunction with our website’s terms and conditions and any location-specific legal disclosures that apply.

We only collect personal information when it is necessary for the operation of our business or to deliver our services. The type of information we collect will vary depending on how you engage with us. Below outlines the information we collect:

Identification Information: Name, email address, phone number, shipping/billing address
Order Information: Purchase history, payment details (via secure payment gateway), order preferences
Technical Information: IP address, browser type, device information, and cookies when you browse our site
Communication Data: When you contact us via email, forms, or social media

You are not required to provide the personal information we request; however, choosing not to do so may limit our ability to offer you certain products, services, or support. We do not collect sensitive information unless required by law or with your explicit consent.

We primarily collect personal information directly from you for example, when you interact with us via our website, email or in social media. We may also collect and update your information through forms you complete, purchases you make, or inquiries you submit.

In some cases, we may obtain personal information from third-party sources that help us operate and support our business, such as payment processors (e.g., PayPal) or ecommerce platforms (e.g., WIX). These third parties are required to handle your information in accordance with applicable privacy laws.

We collect personal information where it is necessary to operate our business, deliver our services, and manage our relationship with you. This may include:

Processing your orders, handling payments, and organising the delivery of products to you.
Providing customer support, answering your enquiries, and offering guidance related to our products or services.
Sending you updates about our products, special offers, or events you may be interested in, if you’ve opted in to receive such communications.
Improving our products and services through feedback, research, and market insights.
Managing recruitment processes, including applications for jobs, internships, or volunteer opportunities.
Meeting our legal obligations and responding to complaints, claims, or regulatory requests.
Using photos or videos that identify you for promotional purposes, where it is reasonably expected or where you have given your consent—such as tagging us in a social media post or participating in a campaign.

We only use your information for these purposes or for other related uses that you would reasonably expect, or as required or permitted by law.

We collect personal information where it is necessary to operate our business, deliver our services, and manage our relationship with you. This may include:

Processing your orders, handling payments, and organising the delivery of products to you.
Providing customer support, answering your enquiries, and offering guidance related to our products or services.
Sending you updates about our products, special offers, or events you may be interested in, if you’ve opted in to receive such communications.
Improving our products and services through feedback, research, and market insights.
Managing recruitment processes, including applications for jobs, internships, or volunteer opportunities.
Meeting our legal obligations and responding to complaints, claims, or regulatory requests.
Using photos or videos that identify you for promotional purposes, where it is reasonably expected or where you have given your consent—such as tagging us in a social media post or participating in a campaign.

We only use your information for these purposes or for other related uses that you would reasonably expect, or as required or permitted by law.

We do not sell, share, or disclose your personal information to third parties, except as outlined in this Privacy Policy or where required by law. We may disclose your information to trusted third parties who are engaged by us to deliver services and are contractually obligated to keep your information confidential. This may include:

Service providers such as payment processors, shipping partners, IT support, data analysts, marketing agencies, website developers, and customer survey platforms.
Our social media platforms, for promotional purposes, where your content or interaction with us may reasonably be shared.
A purchaser or merging entity in the event that The Scrub Lab is acquired, merged, or involved in a corporate restructure.
Government authorities or regulators if required for investigation or legal compliance, such as workplace incidents or security matters.
A responsible person (e.g. parent, guardian, or spouse) if you are injured or unable to communicate, unless you have advised otherwise.
Legal, insurance, and administrative professionals in relation to managing risks, legal claims, or business operations.

We may also use or disclose your information for purposes you’ve consented to, or that were explained at the time of collection, and for other purposes permitted by law.

You can browse our website without identifying yourself. However, if you choose to provide personal information for example, by submitting an enquiry any details you provide will be handled in accordance with this Privacy Policy.

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored in your browser that help remember your preferences and deliver relevant content. We may collect non-identifiable information such as your IP address, browser type, device type, pages visited, and clickstream data. This information helps us improve site performance and user experience, but it does not identify you personally.

You can manage how cookies are handled through your browser settings. Please note that disabling cookies may limit access to some features or pages on our site.

We also use cookies to remember items placed in your shopping cart, including when a cart is abandoned. This data may be used to send you reminders via email or SMS, where applicable.

Our website may contain links to third-party sites. We are not responsible for the content or privacy practices of these external sites. Any information you share directly with a third party (e.g. PayPal) will be governed by their privacy policy.

We retain your personal information only for as long as necessary to provide the products or services you have requested, meet our legal obligations, resolve disputes, and enforce our rights and policies. Unless we have an ongoing relationship with you (for example, as a regular customer) or are required to retain it for legal or regulatory reasons, we will not keep your personal information for more than two years.

You have the following rights regarding your personal information:

Erasure: You may request that we delete your personal information without undue delay in certain situations—for example, if you withdraw your consent and we have no other legal basis to retain it.
Objection and Restriction: You may object to or ask us to restrict the processing of your personal information in specific circumstances, such as when we are verifying its accuracy or if it is being used for direct marketing or based on our legitimate interests.
Data Portability: Where processing is based on your consent, you may request a copy of your personal information in a structured, commonly used, and machine-readable format, and ask us to transfer it to another party where technically feasible.
Withdrawal of Consent: You may withdraw your consent to our use of your personal information at any time. However, we may continue processing if there is another lawful basis to do so.
Lodging a Complaint: If you believe your rights under applicable data protection laws have been infringed, you may lodge a complaint with the relevant data protection authority. We can assist you in identifying the appropriate authority upon request.

Under the Australian Privacy Principles (APPs), we may be required to notify you in the event of an eligible data breach. A data breach is considered eligible if:

There has been unauthorised access to, disclosure of, or loss of personal information in circumstances where such access or disclosure is likely.
The breach is likely to result in serious harm to you.
We are unable to prevent that harm through remedial action.

If a data breach is suspected but not immediately clear, we will investigate and assess the situation to determine whether notification is required.

Even where a breach does not meet the threshold for mandatory notification, we may still choose to inform you as part of our commitment to transparency and protecting your privacy.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or would like to make a privacy-related request, please contact:

The Scrub Lab
Email: contact@thescrublab.com.au
ABN: 79 114 978 961