Privacy policy

Last updated: October 2025

At Tropical Harvest Qld, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.tropicalharvestqld.com.au (the “Site”) or otherwise interact with us.

Who We Are

J & J Oshea Enterprises Pty Ltd (ABN 68 668 472 044) trading as Tropical Harvest Qld
Registered address: 65249 Burke Developmental Rd, Dimbulah QLD 4872 Australia
Email for privacy enquiries: sales@tropicalharvestqld.com.au

We are an Australian-owned and operated business that produces and sells dried-fruit products.
Our main market is Australia, but we accept international orders.

Information We Collect

We collect personal information that you provide and data generated automatically when you use our Site.

Information you provide:

Name, billing and shipping addresses, email address, phone number
Account login details (if you create an account)
Payment details (processed securely by our payment providers — we do not store card data)
Order and delivery information
Reviews, testimonials or user-generated content (e.g. social media tags and comments)
Competition entries and loyalty program participation
Any correspondence with us (e.g. customer service emails)

Information collected automatically:

Device and browser information (IP address, operating system, time zone, browser type)
Usage data and analytics (through Shopify Analytics, Google Analytics, Meta Pixel and Pinterest tags)
Cookies and similar tracking technologies (see our Cookie Policy)

How We Use Your Information

We use your personal information to:

Process and fulfil orders, including payment and shipping
Manage your account and order history
Communicate with you about your orders or support requests
Send marketing emails and newsletters (with your consent)
Administer our loyalty programs and competitions
Improve our products, services and website experience
Comply with legal obligations and prevent fraud

We rely on several lawful bases for processing, including contract performance, legitimate interests, legal obligation and consent (where applicable).

Sharing Your Information

We only share personal information with trusted service providers who assist us in running our business.
These include:

Shopify — e-commerce platform and website host.
Shopify acts as our service provider and processes data on our behalf in accordance with its Privacy Policy .
Payment processors — Shopify Payments and PayPal.
We do not store credit-card numbers.
Email and marketing providers — Flodesk and Shopify Email (for newsletters and promotional communications).
Loyalty program provider — SLOYALTY (for Loyalty program management).
Analytics and advertising partners — Google Analytics, Meta (Facebook/Instagram) and Pinterest (to measure and improve performance of ads and content).
Shipping and logistics providers — Australia Post and other trusted couriers for order delivery.

All third parties are bound by contractual and confidentiality obligations consistent with the Australian Privacy Principles and where applicable the GDPR.

We do not sell, rent, or trade personal information.

Marketing & Communications

We may send you email marketing messages if you’ve opted in.
You can unsubscribe at any time using the link in the email or by contacting us.

We comply with the Spam Act 2003 (Australia) and similar laws in other jurisdictions (e.g. CASL in Canada).

International Data Transfers

We are based in Australia but use service providers with servers in multiple countries (including the United States and Canada).
When your data is transferred overseas, we take reasonable steps to ensure it is protected and handled in accordance with the Australian Privacy Principles and, for EU/UK visitors, the GDPR/UK GDPR using approved safeguards (e.g. Standard Contractual Clauses).

Data Security & Breach Response

We maintain administrative, technical and physical safeguards to protect your information against unauthorised access, use or disclosure.

In the unlikely event of a data breach likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches Scheme.

Data Retention

We keep personal information only as long as necessary to fulfil the purposes for which it was collected and to comply with legal requirements (e.g. tax and accounting records for up to 7 years).

Your Rights

Australia

You have the right to request access to and correction of your personal information.
If you have concerns, contact us first; you may also lodge a complaint with the Office of the Australian Information Commissioner at h ttps://www.oaic.gov.au .

European Union & United Kingdom

Under the GDPR/UK GDPR, you may request access, rectification, erasure, restriction of processing, data portability, and withdrawal of consent.
You may also object to processing based on legitimate interests and lodge a complaint with your local data-protection authority.

California (US)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA/CPRA) to request access, correction, or deletion of personal information and to opt out of any “sale or sharing” of personal data (we do not sell personal information).

Cookies

We use cookies and similar technologies to operate our site, improve performance, and deliver relevant ads.
For details on the types of cookies we use and how to manage your preferences, please see our Cookie Policy .

Access, Correction & Complaints

If you wish to access, correct, or delete your information, or if you have a privacy concern or complaint, please contact us at sales@tropicalharvestqld.com.au .
We will respond within a reasonable time and inform you of any further steps.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The updated version will be posted on this page with a revised date.