Privacy Policy
Table of Contents
GhamaHealth operates this store and website, including all related information, content, features, tools, products and services (the “Services”) to provide you with a curated shopping experience. GhamaHealth is powered by Shopify, which enables us to provide the Services.
This Privacy Policy explains how we collect, use, and disclose personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in relation to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy and the practices described here. If you do not agree, please refrain from using the Services.
Personal Information We Collect
When we use the term “personal information”, we mean information that identifies you (or can reasonably be linked to you) or another person. Personal information does not include information that has been collected anonymously or de-identified so it cannot reasonably be linked back to you.
Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process:
- Contact details: name, address, billing address, shipping address, phone number, and email address.
- Financial information: payment card information, transaction details, form of payment, payment confirmation and other payment details.
- Account information: username, password, security questions, preferences and settings.
- Transaction information: items you view, add to cart, add to wishlist, purchase, return, exchange or cancel, and your past transactions.
- Communications with us: information included in messages to us (for example customer support enquiries).
- Device information: device, browser, network connection, IP address, and other unique identifiers.
- Usage information: how and when you interact with or navigate the Services.
Personal Information Sources
We may collect personal information from the following sources:
- Directly from you: when you create an account, visit or use the Services, communicate with us, or otherwise provide personal information.
- Automatically through the Services: from your device when you visit or use the Services, including through cookies and similar technologies.
- From service providers: where we engage them to provide technology, services, or processing on our behalf.
- From partners or other third parties.
How We Use Your Personal Information
Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:
- Provide, tailor, and improve the Services: process payments, fulfil orders, manage accounts, arrange shipping, facilitate returns/exchanges, remember preferences, enable reviews, and personalise your shopping experience.
- Marketing and advertising: send promotional communications (email, SMS, post where applicable) and show you advertising based on your activity and purchases.
- Security and fraud prevention: authenticate accounts, maintain secure transactions, detect and respond to potential fraudulent, illegal, unsafe, or malicious activity.
- Communicating with you: customer support, service updates, and maintaining our relationship with you.
- Legal reasons: comply with applicable laws, respond to valid legal requests, enforce policies, and protect the Services and users.
How We Disclose Personal Information
We may disclose personal information to third parties for legitimate purposes, including:
- Service providers: including Shopify, vendors and other third parties performing services for us (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
- Business and marketing partners: to provide marketing services and advertise to you. Depending on where you live, you may have the right to opt out of sharing for targeted advertising — you can exercise this right here.
- At your direction: when you request, consent to, or direct disclosure (for example shipping providers, social widgets, login integrations).
- Affiliates / corporate group: where applicable.
- Business transactions and legal obligations: mergers, bankruptcy, subpoenas, warrants, and to protect the Services, our rights, and users.
Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information you submit may be transmitted to and shared with Shopify and third parties located in countries outside where you reside.
Shopify may also use data from your interactions with our store (and other merchants) to provide enhanced features that help protect, grow and improve businesses. In these circumstances, Shopify is responsible for certain processing and for responding to requests to exercise rights related to that processing.
Learn more: Shopify Consumer Privacy Policy • Shopify Privacy Portal
Third-Party Websites & Links
The Services may link to third-party websites or platforms. If you follow those links, you should review their privacy and security practices. We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party sites.
Information shared in public or semi-public spaces (including social platforms) may be viewable by others. Our inclusion of links does not imply endorsement unless stated on the Services.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian and believe a child has provided personal information, please contact us so we can delete it.
As of the Effective Date of this policy, we do not have actual knowledge that we “share” or “sell” (as defined by applicable law) personal information of individuals under 16 years of age.
Security & Retention
No security measure is perfect or impenetrable and we cannot guarantee “perfect security.” Information transmitted to us may not be secure while in transit, so we recommend avoiding unsecure channels for sensitive information.
We retain personal information for as long as needed to maintain your account, provide Services, comply with legal obligations, resolve disputes, or enforce contracts and policies.
Your Rights & Choices
Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may apply only in certain circumstances. Where permitted by law, we may decline a request.
- Right to access / know: request access to personal information we hold about you.
- Right to delete: request deletion of personal information we maintain about you.
- Right to correct: request correction of inaccurate personal information.
- Right of portability: request a copy of your personal information and, in some cases, transfer to a third party.
- Right to opt out of sale/sharing for targeted advertising: where applicable, you may opt out of “sale”/“sharing” or processing for targeted advertising. You can opt out here. If Global Privacy Control is enabled in your browser, we may treat this as an opt-out request for that device/browser (and for your Shopify account where we can associate it). Other than Global Privacy Control, we do not respond to other “Do Not Track” signals.
- Managing communication preferences: you can unsubscribe from promotional emails at any time. We may still send non-promotional emails (e.g. order updates).
If you reside in the UK or European Economic Area, you may also have rights to object to processing, request restriction of processing, and withdraw consent (where processing is based on consent).
To learn more about rights related to data processed by Shopify, visit https://privacy.shopify.com/en.
To exercise rights, contact us using the details below. We may need to verify your identity. You may also designate an authorised agent; we will require proof of authorisation and may ask you to verify your identity directly.
Complaints
If you have complaints about how we process personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. For the EEA, a list of supervisory authorities is available here: EDPB Members.
International Transfers
We may transfer, store and process personal information outside the country you live in.
If we transfer personal information out of the EEA or the UK, we rely on recognised transfer mechanisms such as Standard Contractual Clauses, or equivalent UK contracts, unless the destination country is recognised as providing an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this website and update the “Last updated” date, and provide notice where required by applicable law.
Contact
If you have questions about our privacy practices, this Privacy Policy, or would like to exercise any rights available to you, please contact us:
Phone: +61 2 9683 2598
Email: info@ghamahealth.com.au
Address: 26 Artisan Road, Seven Hills, NSW 2147, Australia
NOT OPEN TO THE PUBLIC. COMMERCIAL ONLY.
















