1. About this Policy
1.1 Southern Labs AU Pty Ltd (ABN 47 696 872 698 · ACN 696 872 698), trading as Southern Pacific Labs (“Southern Pacific Labs”, “we”, “us”) is committed to protecting your privacy.
1.2 This Policy explains how we collect, use, store, disclose, and protect your Personal Information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and where applicable the European Union’s General Data Protection Regulation (GDPR), the United Kingdom’s UK GDPR and Data Protection Act 2018, and applicable United States state privacy laws.
1.3 By using southernpacificlabs.com.au or placing an Order, you consent to the collection and use of your information as described in this Policy.
2. The information we collect
2.1 Information you provide directly:
- Identity information: name, date of birth (where provided)
- Contact information: email address, phone number, shipping and billing address
- Account information: password (stored as a salted hash, never in plain text), preferences
- Order information: items purchased, order history, special requests
- Payment information: card details processed by Stripe (we do not store full card numbers)
- Communications: emails, contact form submissions, WhatsApp messages, customer service interactions
- Researcher attestations: confirmation of intended use submitted at checkout
2.2 Information collected automatically when you visit our Site:
- Technical data: IP address, browser type, device type, operating system, screen resolution
- Usage data: pages visited, time spent on pages, click paths, referral source
- Cookies and similar technologies (see clause 9)
3. Lawful basis for collection
3.1 We collect, use, and disclose your Personal Information on the following lawful bases:
(a) Performance of contract — to process and fulfil your Order
(b) Legitimate interests — to operate, improve, and protect our business, where those interests are not overridden by your rights
(c) Legal obligation — to comply with tax, consumer protection, and other legal duties
(d) Consent — for marketing communications and non-essential cookies (you can withdraw consent at any time)
3.2 For users in the EU, UK, or jurisdictions with similar frameworks, the lawful basis applicable to a particular processing activity is described above. You may contact us for more detail on any specific use.
4. How we use your information
4.1 We use Personal Information to:
(a) process and fulfil Orders, including arranging shipping
(b) communicate with you about your Order, our service, and your account
(c) provide customer support and respond to enquiries
(d) send marketing communications where you have opted in (you can unsubscribe at any time)
(e) improve our Site, products, and services
(f) detect, prevent, and respond to fraud, security incidents, or misuse
(g) comply with legal obligations and regulatory requests
(h) defend or pursue legal claims
6. International data transfers
6.1 Some of our service providers (including Stripe, our hosting provider, and our email provider) operate servers outside Australia, including in the United States and European Union.
6.2 Where we transfer Personal Information overseas, we take reasonable steps to ensure recipients handle it consistently with the APPs and applicable data protection laws, including by using providers who comply with recognised data protection frameworks (such as the EU-US Data Privacy Framework or equivalent).
6.3 By providing your information to us, you consent to it being transferred to and processed in the jurisdictions described.
7. How we protect your information
7.1 Personal Information is stored on secure servers operated by reputable cloud providers.
7.2 We use industry-standard security measures including: encryption in transit (HTTPS/TLS), encrypted databases, access controls, regular security review, and limited access on a need-to-know basis.
7.3 No transmission over the internet is 100% secure. While we take reasonable steps, we cannot guarantee absolute security.
7.4 If we become aware of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
8. How long we keep your information
8.1 Order and account information: kept while your account is active, and for up to seven (7) years after your last Order to comply with Australian taxation, consumer protection, and corporate record-keeping requirements.
8.2 Marketing preferences: kept until you opt out, then a record of your opt-out is retained to honour your choice.
8.3 Communications and customer service records: kept for up to three (3) years.
8.4 Anonymised usage data: kept indefinitely.
8.5 You may request earlier deletion of your information (subject to clauses 8.1–8.3) — see clause 10.
10. Your rights
10.1 You have the right to:
(a) Access — request a copy of the Personal Information we hold about you
(b) Correct — ask us to correct inaccurate or incomplete information
(c) Delete — request deletion of your information (subject to legal retention obligations)
(d) Object — object to certain processing (such as marketing)
(e) Restrict — request that we restrict processing in certain circumstances
(f) Portability — request your information in a portable, machine-readable format (where applicable)
(g) Withdraw consent — where processing is based on consent, withdraw it at any time
(h) Opt out — unsubscribe from marketing communications
(i) Complain — lodge a complaint with us, and if unresolved, with the OAIC at oaic.gov.au, the UK’s ICO at ico.org.uk, your EU member state supervisory authority, or your applicable US state regulator
10.2 To exercise any of these rights, email info@southernpacificlabs.com.au. We will respond within 30 days. We may need to verify your identity before responding.
10.3 Exercising these rights is free of charge. We may charge a reasonable fee only if a request is manifestly unfounded or excessive.
11. Specific notes for international visitors
11.1 For EU residents (GDPR): Your rights under the GDPR include those listed in clause 10. Our lawful bases are described in clause 3. You have the right to lodge a complaint with your member state supervisory authority. We do not currently have an EU representative; for any GDPR enquiry, contact info@southernpacificlabs.com.au.
11.2 For UK residents (UK GDPR / Data Protection Act 2018): Your rights are equivalent to those described in clause 11.1. The UK supervisory authority is the Information Commissioner’s Office (ICO), ico.org.uk.
11.3 For US residents: Depending on your state of residence (including California, Colorado, Connecticut, Virginia, and Utah), you may have specific rights regarding access, deletion, correction, opt-out of “sale” or “sharing” (we do neither), and portability. To exercise any state-specific rights, email info@southernpacificlabs.com.au with your state of residence.
12. Children
Our Products and Site are intended for users aged 18 and over. We do not knowingly collect Personal Information from anyone under 18. If you believe we have, contact us immediately and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. The version published on this page applies. Material changes will be flagged at the top of this page for at least 30 days after the change.
14. Contact
Privacy enquiries: info@southernpacificlabs.com.au
Privacy contact: Director, Southern Labs AU Pty Ltd
Southern Labs AU Pty Ltd, Sydney, NSW, Australia.
Last reviewed: May 2026
Questions? Email info@southernpacificlabs.com.au