Privacy policy
PRIVACY POLICY - CHAIR SOCIETY
Last updated: 13 October 2026
This Privacy Policy explains how CEPEP Investments Pty Ltd trading as Chair Society (ABN 54 120 080 855) ("Chair Society", "we", "us", "our") collects, uses, stores, and discloses personal information when you visit chairsociety.com.au or our related pages, make a purchase, or otherwise communicate with us.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
PERSONAL INFORMATION WE COLLECT
Depending on how you interact with us, we may collect:
Contact and delivery details - your name, delivery address, billing address, phone number, and email address
Order and transaction information - items you view, add to cart, or purchase; order history; returns, exchanges, and refunds; and communications about orders.
Payment information - we do not collect or store your full card details. Payments are processed by our payment providers (such as Shopify Payments or PayPal), who handle your payment details under their own privacy policies.
Communications - the content of messages you send us through our website contact page, by email, or by phone.
Device and usage information - information about your device, browser, IP address, and how you interact with our website, collected through cookies and similar technologies. - Marketing preferences - whether you have subscribed to our emails or other marketing. If you choose not to provide personal information we need (for example, a delivery address), we may not be able to provide our products or services to you.
2. HOW WE COLLECT PERSONAL INFORMATION
We collect personal information: - Directly from you - when you place an order, create an account, subscribe to our emails, contact us, or leave a review.
- Automatically - through cookies, analytics, and similar technologies when you use our website.
From third parties - from Shopify (which hosts our store) and, where relevant, from our marketing and advertising partners.
3. WHY WE COLLECT AND USE PERSONAL INFORMATION
We collect, use, and disclose personal information to: - Process and fulfil your orders, arrange delivery, and handle returns, refunds, and exchanges;
- Communicate with you about your orders, deliveries, and enquiries;
- Provide customer support;
- Send you marketing communications where you have consented, and personalise the marketing you see;
- Improve our website, products, and services;
- Prevent and detect fraud, and secure our website;
- Comply with our legal obligations, including tax, record-keeping, and consumer law obligations; -
- Enforce our Terms of Service and protect our rights.
4. DISCLOSURE OF PERSONAL INFORMATION
We disclose personal information to third parties only as needed to run our business, including:
Shopify - our store host and service provider, which processes orders, payments, and store data on our behalf. You can read how Shopify handles personal information at https://www.shopify.com/legal/privacy
Payment providers - such as Shopify Payments and PayPal, to process your payments.
Delivery and courier companies - such as our freight carriers, to deliver your orders. We provide them the contact and delivery details needed to complete delivery.
Marketing and analytics providers - such as email marketing platforms (e.g. Shopify Email or similar) and advertising platforms (e.g. Meta, Google), where you have consented or as permitted by law.
Professional advisers and authorities - our accountants, lawyers, or government agencies where required by law (for example, the Australian Taxation Office). We do not sell your personal information. We do not disclose your personal information to third parties for their own direct marketing without your consent.
5. OVERSEAS DISCLOSURE
Some of the third parties listed above are located outside Australia, or store data outside Australia. In particular, Shopify and some payment, marketing, and technology providers may store or process personal information in the United States, Canada, and other countries.
Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in accordance with the Australian Privacy Principles, including through the contractual arrangements Shopify and our other providers offer.
6. COOKIES AND ANALYTICS
Our website uses cookies and similar technologies to keep the site working, remember your cart, understand how the site is used, and measure the performance of our advertising.
You can control cookies through your browser settings; blocking some cookies may affect how the website functions.
Where required by law (for example, if you visit from the European Economic Area or the United Kingdom), we seek your consent before placing non-essential cookies.
7. MARKETING COMMUNICATIONS
We only send you marketing emails or other direct marketing where you have consented (for example, by subscribing to our emails or ticking a box at checkout) or where otherwise permitted by law.
Every marketing email we send includes an unsubscribe link. If you are on our SMS list (if applicable), you can opt out at any time by replying STOP. You can also ask us to stop marketing to you at any time by contacting info@chairsociety.com.au.
We comply with the Spam Act 2003 (Cth) in all marketing communications.
8. ACCESS, CORRECTION, AND YOUR OTHER RIGHTS
You have a right under the Privacy Act to request access to the personal information we hold about you, and to request correction of information that is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond within a reasonable period.
You may also request that we delete personal information we hold about you where we are not required to keep it by law (for example, tax and consumer law record-keeping requirements require us to keep transaction records for at least 5 years).
To make a request, contact us using the details in section 12. We may need to verify your identity before processing a request.
9. SECURITY AND RETENTION
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure, including through the security measures Shopify provides and restricting access within our team. We keep personal information only for as long as necessary for the purposes set out in this policy, including to meet our legal obligations (Australian tax and consumer law generally require order records to be kept for at least 5 years), after which it is destroyed or de-identified.
10. NOTIFIABLE DATA BREACHES
If a data breach occurs that is likely to result in serious harm to individuals whose information is involved, we will assess it and, where required under the Notifiable Data Breaches scheme, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.
11. CHILDREN
Our website and products are not directed at children, and we do not knowingly collect personal information from children.
If you believe a child has provided us personal information, contact us and we will delete it.
12. QUESTIONS AND COMPLAINTS
If you have questions about this Privacy Policy, want to access or correct your personal information, or wish to make a privacy complaint, contact us:
CEPEP Investments Pty Ltd T/as Chair Society
ABN: 54 120 080 855
Forestdale QLD 4118, Australia
Email: info@chairsociety.com.au
Phone: 1300 003 107 (during business hours)
Website: https://chairsociety.com.au
We take privacy complaints seriously and will respond within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
Phone: 1300 363 992 Online: https://www.oaic.gov.au
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, the law, or our service providers. The current version is always available on this page, with the "Last updated" date shown at the top.