Privacy policy
Last updated: 25 August 2026
AromaHug is operated by Stepmac Pty Ltd ("AromaHug", "we", "us" or "our"). This Privacy Policy explains how we collect, use, store and disclose personal information when you visit aromahug.com.au, purchase or pre-order our products, communicate with us, subscribe to our marketing communications, or otherwise use our services.
We respect your privacy and handle personal information in accordance with applicable privacy laws.
Information we collect
We may collect personal information that you provide directly to us, including:
• your name
• email address and telephone number
• billing and shipping addresses
• order and transaction information
• account information, if you create an account
• communications you send to us, including customer service enquiries
• marketing preferences and subscription information.
Payment information is processed by our payment providers. We generally do not receive or store your complete credit or debit card details.
Information collected automatically
When you use our website, certain information may be collected automatically through cookies and similar technologies. This may include your IP address, browser and device information, pages viewed, interactions with our website and information about how you arrived at our website.
We use this information to operate and improve our website, understand how customers use it, measure marketing performance and help protect against fraud and misuse.
How we use your information
We may use your personal information to:
• process purchases, pre-orders, payments, refunds and returns
• fulfil and deliver orders
• provide order and delivery updates
• communicate with you about your purchase or enquiry
• provide customer support
• administer customer accounts
• send marketing communications where you have consented to receive them or where otherwise permitted by law
• analyse and improve our products, website and customer experience
• prevent fraud and maintain the security of our services
• comply with our legal and regulatory obligations.
Marketing communications
If you subscribe to receive news, product updates or promotional communications from AromaHug, we may use your contact information to send those communications.
You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in our emails. Unsubscribing from marketing does not prevent us from sending necessary transactional communications relating to an order, pre-order, payment or customer service matter.
Cookies and analytics
We use cookies and similar technologies to operate our website, remember preferences, understand website usage and improve our services. Some cookies may also be used by third-party services that support our website, analytics and marketing.
You can manage cookies through your browser settings and, where available, through the privacy controls provided on our website. Disabling certain cookies may affect some website functionality.
Shopify
Our online store is powered by Shopify. Shopify processes certain personal information on our behalf in connection with operating our online store, checkout and related services.
Shopify's own privacy practices are governed by its applicable privacy policies.
Payment providers and other service providers
We may disclose information to trusted third parties where reasonably necessary to operate our business and provide our services. These may include:
• Shopify
• payment providers
• shipping and fulfilment providers
• email and marketing service providers
• analytics and technology providers
• professional advisers and service providers.
These providers may process information only as necessary to provide their services or as otherwise permitted by applicable law and their own privacy policies.
We may also disclose information where required by law or where reasonably necessary to protect our legal rights, our customers or others.
International processing
Some of our service providers may process or store personal information outside Australia. The countries involved will depend on the providers we use and their infrastructure.
Where personal information is disclosed or processed internationally, we take reasonable steps appropriate to the circumstances and applicable law in relation to the handling of that information.
Security and retention
We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining appropriate business and transaction records, resolving disputes and complying with legal, accounting and regulatory obligations.
Access and correction
Depending on applicable law and your location, you may have rights in relation to the personal information we hold about you, including requesting access to or correction of your information.
You may contact us if you would like to access or correct personal information we hold about you or have a question about how it is handled.
Customers in certain jurisdictions may have additional privacy rights, including rights relating to deletion, restriction or objection to processing, portability and withdrawal of consent where applicable.
Children's privacy
Our website and products are not directed at children, and we do not knowingly collect personal information from children through our services.
Third-party websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties, and we recommend reviewing their privacy policies before providing them with personal information.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, technology, legal obligations or privacy practices. The latest version will be published on our website with the updated date.
Contact us
If you have questions about this Privacy Policy, would like to request access to or correction of your personal information, or wish to make a privacy complaint, please contact:
AromaHug
Stepmac Pty Ltd
Email: info@aromahug.com.au
If you make a privacy complaint, we will review it and respond within a reasonable period.
