Privacy policy.

We collect information you provide when using the website, placing an order, uploading a payment receipt, contacting support, or requesting order tracking. This may include name, email, phone number, shipping address, order notes, product selections, order number, payment receipt image, and fulfilment details.

We may also collect technical information such as IP address, device type, browser type, approximate location, referral page, pages visited, and standard server logs.

If you upload a payment screenshot or receipt, it may contain personal or financial information visible in the image. Please avoid uploading unnecessary sensitive information where possible.

Receipt uploads are used to match and verify manual PayID or bank transfer payments against the relevant order number.

We use personal information to process orders, verify payment, manage fulfilment, provide tracking, respond to support requests, maintain records, prevent fraud or misuse, improve the website, and comply with legal, accounting, tax, and regulatory obligations.

We do not sell customer personal information.

We may use order and customer information to assess whether an order appears consistent with our research-only supply position and these terms.

Where necessary, we may use information to refuse, cancel, investigate, or document orders that appear suspicious, unsafe, unlawful, or inconsistent with research-only use.

We use trusted service providers to operate the website and order system, including hosting, database, storage, analytics, and email or messaging infrastructure. These providers may process information on our behalf.

Some providers may store or process information outside Australia. Where this occurs, we take reasonable steps to use reputable providers and protect information according to the nature of the data and the service being provided.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

No online system can be guaranteed completely secure. Customers should avoid sending unnecessary sensitive information and should contact us promptly if they believe their information has been compromised.

We retain order, payment, fulfilment, support, and accounting records for as long as reasonably required for business operations, legal compliance, tax and accounting obligations, dispute management, and fraud prevention.

When information is no longer required, we will take reasonable steps to delete it, de-identify it, or archive it securely where deletion is not immediately practical.

Transactional communications, such as order confirmation, payment status, fulfilment updates, and support replies, are necessary for order handling.

We will only send marketing communications where permitted by law and will provide an opt-out method where required.

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, or out of date.

We may need to verify your identity before responding. In some cases, access may be refused where permitted by law, such as where disclosure would affect another person’s privacy, legal privilege, security, or an investigation.

If you have a privacy question, access request, correction request, or complaint, contact Alora Labs using the contact details published on the website.

We will aim to respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.