The personal information we collect depends on how you interact with AREUM and may include:

• your name;

• email address and telephone number;

• billing and delivery addresses;

• order details, transaction information and purchase history;

• account details, where customer accounts are available;

• newsletter subscriptions and communication preferences;

• messages, enquiries, reviews, feedback and correspondence;

• information you voluntarily provide about your skin, sensitivities, pregnancy, breastfeeding or product preferences;

• details connected with returns, exchanges, damaged products or customer-service requests;

• social media usernames or publicly available interactions with AREUM;

• internet protocol address, browser type, device information, referring pages and website activity; and

• cookie, analytics and advertising information.

We ask that you only provide personal information that is relevant to your enquiry or interaction with us.

You may sometimes choose to share information about allergies, sensitivities, pregnancy, breastfeeding or a skin condition when asking about a product.

We will only collect and use sensitive information where it is reasonably necessary, you have consented, or we are otherwise permitted or required to do so by law.

Information provided to AREUM is not a substitute for medical advice, diagnosis or treatment.

We may collect personal information directly from you when you:

• place or attempt to place an order;

• create an account;

• subscribe to the AREUM mailing list;

• complete a website form;

• contact us by email, social media or another communication channel;

• request a return, exchange or refund;

• enter a promotion, event or product trial;

• submit feedback, a review or other content; or

• otherwise communicate or transact with AREUM.

We may also receive limited information from service providers that help us operate the website, process payments, fulfil orders, deliver communications, analyse website activity or manage advertising.

If you interact with AREUM through Instagram, Facebook or another third-party platform, that platform may collect and process information in accordance with its own privacy policy.

We may collect, hold and use personal information to:

• process, prepare, dispatch and deliver orders;

• process payments and maintain transaction records;

• communicate with you about your order;

• respond to questions, feedback and customer-service requests;

• manage returns, exchanges, refunds and product concerns;

• provide information about AREUM products and their use;

• administer customer accounts, promotions, events or product trials;

• send newsletters, product updates and other marketing communications where permitted;

• understand how customers use our website;

• improve our products, services, website and customer experience;

• detect or prevent fraud, misuse and security incidents;

• maintain business, tax and accounting records;

• protect our legal rights and resolve disputes; and

• comply with legal, regulatory and insurance obligations.

Where practical, you may interact with AREUM anonymously or using a pseudonym. However, we will need identifying and contact information to process orders, deliver parcels, issue refunds or respond to certain requests.

Payments are processed through third-party payment providers made available through our website or checkout.

AREUM does not ordinarily receive or retain your complete payment-card details. Payment providers may collect and process your information in accordance with their own terms and privacy policies.

Where you have subscribed, consented or we are otherwise permitted by law, AREUM may send you emails about products, formulations, journal articles, launches, restocks and other brand news.

You may unsubscribe at any time by selecting the unsubscribe link within an email or by contacting us.

Unsubscribing from marketing will not prevent us from sending transactional communications that are necessary to manage an order, payment, delivery, return or customer-service request.

We do not sell mailing lists or personal information to third parties for their independent marketing purposes.

Our website may use cookies and similar technologies to:

• enable essential website and checkout functions;

• remember preferences;

• understand website traffic and visitor behaviour;

• measure the effectiveness of communications and campaigns;

• improve website performance; and

• provide relevant advertising where enabled.

Some cookies are necessary for the website to function. Others may be placed by analytics, social media, advertising, payment or website-service providers.

You can manage or disable cookies through your browser settings and, where available, the website’s cookie controls. Disabling certain cookies may affect how parts of the website operate.

We may disclose personal information where reasonably necessary to:

• website-hosting and ecommerce providers;

• payment processors and financial institutions;

• Australia Post, couriers and delivery providers;

• email and customer-communication platforms;

• analytics, technology, security and advertising providers;

• accountants, insurers, legal advisers and other professional advisers;

• contractors and service providers assisting AREUM;

• government agencies, regulators, courts or law-enforcement bodies where required or authorised by law; and

• another party involved in a proposed or completed sale, transfer or restructuring of the business, subject to appropriate confidentiality and privacy arrangements.

We only disclose the information reasonably necessary for the relevant service or purpose.

Some of the technology and service providers used by AREUM may store or process personal information outside Australia.

These locations may include the United States and other countries in which our website, payment, email, analytics, advertising or cloud-service providers operate.

The countries involved may change as service providers update their infrastructure. Where required, we take reasonable steps to ensure overseas disclosures are handled consistently with applicable Australian privacy requirements.

If you tag AREUM, mention AREUM publicly, send us content or provide a review, we may ask for permission to share your words or imagery through our website, social media or other communications.

We will not treat a private message as permission to publish it. Where appropriate, we will seek consent before using identifiable customer content for promotional purposes.

Content shared publicly on third-party platforms remains subject to the privacy settings and terms of those platforms.

AREUM takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These steps may include restricted access, password protection, reputable service providers and secure website and payment technologies.

No internet transmission, electronic storage system or delivery method can be guaranteed to be completely secure. You should take care when sending personal information online and keep any account credentials confidential.

If a data breach occurs, we will assess and respond to it in accordance with applicable legal requirements.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to:

• fulfil orders and provide customer support;

• maintain tax, accounting and business records;

• respond to disputes or product concerns;

• satisfy insurance requirements; and

• meet legal and regulatory obligations.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, unless it must be retained by law.

You may request access to personal information AREUM holds about you or ask us to correct information that is inaccurate, incomplete or out of date.

Please submit your request through the Contact page at areum.au and provide enough information for us to identify you and understand your request.

We may need to verify your identity before providing access or making a correction.

We will respond within a reasonable period. In some circumstances, the law may allow or require us to refuse access. If this occurs, we will explain the reason where we are permitted to do so.

If you believe AREUM has not handled your personal information appropriately, please contact us through the Contact page at areum.au.

Please include:

• your name and contact details;

• a description of your concern;

• relevant dates or correspondence; and

• the outcome you are seeking.

We will acknowledge your complaint, investigate it and respond within a reasonable period.

If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner or another relevant regulator.

The AREUM website may contain links to third-party websites, platforms or services.

AREUM is not responsible for the privacy practices, security or content of third parties. We recommend reviewing their privacy policies before providing them with personal information.

The AREUM website and online store are intended for a general adult audience.

We do not knowingly collect personal information directly from children without the involvement or consent of a parent or legal guardian where required.

We may update this Privacy Policy when our business, website, service providers or legal obligations change.

The current version will be published on areum.au with its most recent revision date. We encourage you to review it periodically.

For privacy questions, access or correction requests, or complaints, please contact AREUM through the Contact page at areum.au.

Last updated: July 2026