Privacy Policy
Your privacy matters to us. This Privacy Policy explains how WA White Goods collects, uses, stores, and protects your personal information in full compliance with Australian law.
Your Privacy Is Important to UsBy using our website or providing your personal information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or provide us with your personal information. We are committed to handling your data with care, transparency, and full compliance with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs).
About This Policy & Who We Are
This Privacy Policy is issued by Budget Whitegoods Pty Ltd, the legal entity that owns and operates WA White Goods. We are a Western Australian business specialising in the sale of reconditioned and second-hand household appliances. We take our privacy obligations seriously and are committed to being transparent about how we collect and handle personal information.
Our Identity
Trading Name
WA White Goods
Legal Entity
Budget Whitegoods Pty Ltd
ABN
642 874 995
GST Registration
86 642 874 995
Address
Unit 4/125-129 Welshpool Road, Welshpool WA 6106
Privacy Contact
Scope of This Policy
This Privacy Policy applies to:
- All personal information collected through our website at wawhitegoods.com.au.
- Personal information collected in person at our Welshpool premises.
- Personal information provided by phone, email, live chat, or any other communication channel.
- All customers, prospective customers, suppliers, and any other individuals who interact with our business.
Our Privacy Commitment: We only collect personal information that is reasonably necessary for our business functions. We handle all personal information in a responsible, secure, and lawful manner consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
The Australian Privacy Principles (APPs)
The Privacy Act 1988 (Cth) contains thirteen Australian Privacy Principles (APPs) that regulate how organisations like WA White Goods must handle personal information. These principles are legally binding and form the foundation of this Privacy Policy. Below is a plain-English summary of each principle and how it applies to our business.
What Personal Information We Collect
We collect only the personal information that is reasonably necessary for us to operate our business and provide services to you. The types of personal information we collect include:
Identity and Contact Information
- Full name
- Residential or business delivery address
- Email address
- Phone number (mobile and/or landline)
Transaction and Order Information
- Details of products purchased, including item description, condition, and price
- Order number and transaction history
- Delivery address and delivery instructions
- Payment method type (we do not store full card numbers — see Section 17)
- Refund and warranty claim records
Technical and Usage Information
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited on our website, time spent, and navigation patterns
- Referring website or search engine that directed you to our site
- Cookie identifiers and session data (see Section 9)
Communication Records
- Emails, live chat transcripts, and phone call notes between you and our team
- Enquiries submitted through our contact forms
- Feedback and reviews you provide about our products or services
- Complaint records and correspondence
Sensitive Information
We do not intentionally collect sensitive information as defined under the Privacy Act 1988 (Cth) — such as health information, racial or ethnic origin, religious beliefs, or criminal records. If you voluntarily provide such information in the course of communicating with us, we will handle it with the highest level of care and will not use it for any purpose other than addressing your specific enquiry.
Minimum Necessary Principle: In accordance with APP 3, we only collect personal information that is reasonably necessary for one or more of our business functions. We do not collect information in bulk or beyond what is needed for legitimate purposes.
How We Collect Your Information
We collect personal information in a number of ways, both directly from you and, in some cases, indirectly through automated means. We always endeavour to collect information from you directly rather than from third parties.
Direct Collection
We collect information directly from you when you:
- Place an order on our website or in person at our Welshpool premises
- Create an account or register on our website
- Complete a contact form, enquiry form, or privacy request form on our website
- Contact us by phone, email, or live chat
- Subscribe to our email newsletter or promotional communications
- Submit a warranty claim, refund request, or complaint
- Interact with us on social media platforms
Indirect and Automated Collection
We also collect certain technical information automatically when you visit our website, including through:
- Cookies and tracking technologies — our website uses cookies to collect browsing data and improve your experience (see Section 9 for full details)
- Google Analytics — we use Google Analytics to understand how visitors use our website. Google Analytics collects anonymised usage data including page views, session duration, and device type
- Payment gateway data — when you make a payment, our payment gateway provider processes and records transaction data on our behalf
- Server logs — our web hosting provider automatically logs IP addresses and access requests as part of standard server operations
Collection Notification (APP 5): In accordance with APP 5, we will take reasonable steps to notify you about the collection of your personal information at or before the time of collection, or as soon as practicable thereafter. This Privacy Policy serves as our primary notification mechanism.
Why We Collect Your Information
We collect personal information for specific, legitimate business purposes. We do not collect information speculatively or for purposes unrelated to our business operations. The primary purposes for which we collect personal information are:
| Purpose | Detail |
|---|---|
| Order Fulfilment | To process, confirm, and deliver your order, including arranging delivery logistics and issuing your tax invoice. |
| Customer Service | To respond to your enquiries, manage complaints, process warranty claims, and provide after-sales support. |
| Payment Processing | To facilitate secure payment transactions for purchases made through our store. |
| Legal Compliance | To comply with our legal obligations including Australian Consumer Law, taxation law, and record-keeping requirements. |
| Safety & Security | To detect and prevent fraudulent transactions, unauthorised access, and other security threats. |
| Business Improvement | To analyse website usage, improve our product range and website functionality, and enhance the customer experience. |
| Marketing (with consent) | To send you promotional communications about our products and offers, where you have consented to receive them. |
| Dispute Resolution | To manage and resolve disputes, complaints, and legal matters in accordance with our policies and applicable law. |
How We Use Your Information
In accordance with APP 6, we only use your personal information for the primary purpose for which it was collected, or for a directly related secondary purpose that you would reasonably expect, or where you have given us your consent. The specific ways we use your personal information are as follows:
Order and Delivery Management
- Processing your order and confirming its receipt by email
- Coordinating delivery or collection of your purchased appliance
- Issuing GST-compliant tax invoices and receipts
- Managing returns, warranty claims, and refunds
Communication and Support
- Responding to your enquiries, questions, and service requests
- Notifying you of order updates, changes to delivery schedules, and other service-related matters
- Providing after-sales support and warranty assistance
Legal and Compliance Purposes
- Meeting our obligations under Australian Consumer Law, the Privacy Act 1988 (Cth), and taxation legislation
- Maintaining accurate business and financial records as required by law
- Cooperating with law enforcement or regulatory authorities where required by law
Business Operations and Improvement
- Analysing website traffic and usage patterns to improve our website and product offerings
- Conducting internal research and analysis to improve our business operations
- Training our staff to provide better customer service
Secondary Use: We will not use your personal information for a purpose that is unrelated to the reason for which it was originally collected without first obtaining your consent, unless we are required or permitted to do so by law.
Sharing & Disclosure of Your Information
We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. In accordance with APP 6, we only disclose your personal information in the circumstances described below.
Service Providers (Third-Party Processors)
We engage certain trusted third-party service providers to assist us in operating our business. These providers are required to handle your personal information securely and only for the purpose for which it was shared. They include:
- Payment gateway providers — to process secure online payments (e.g. Stripe, PayPal, Afterpay). These providers operate under their own strict security and privacy standards.
- Delivery and logistics providers — to arrange and complete delivery of your purchased appliance to your nominated address.
- Email and communication platforms — to send order confirmations, transactional notifications, and (with your consent) marketing communications.
- Website hosting and IT service providers — who host and maintain our website and business systems. These providers are contractually bound to protect your data.
- Analytics providers — including Google Analytics, which uses anonymised and aggregated data to help us understand website usage patterns.
- Legal and accounting advisers — who may need access to certain records for the purpose of providing professional advice to us.
Legal Requirements
We may disclose your personal information to government agencies, regulatory bodies, or law enforcement authorities where we are required or authorised to do so by law. This includes situations where disclosure is necessary to:
- Comply with a court order, subpoena, or other legal process
- Protect the rights, property, or safety of WA White Goods, our customers, or the public
- Cooperate with law enforcement, regulatory, or government investigations
- Fulfil our obligations under the Taxation Administration Act 1953 (Cth) or other applicable legislation
No Sale of Data: We will never sell your personal information to any third party. Your data is only shared with trusted service providers who assist us in running our business, and only to the extent necessary for those purposes.
Overseas Disclosure of Personal Information
Some of the third-party service providers we use to operate our business may store or process personal information on servers located outside Australia. In accordance with APP 8 of the Privacy Act 1988 (Cth), we take reasonable steps to ensure that any overseas recipient of your personal information is subject to privacy protections that are at least as rigorous as the Australian Privacy Principles.
Potential Overseas Locations
Personal information may be processed or stored in the following countries or regions through our third-party service providers:
- United States of America — through platforms such as Google Analytics, PayPal, Stripe, and cloud-based email services that operate data centres in the United States.
- European Union — some IT infrastructure providers and SaaS platforms may process data in EU member states under GDPR-compliant frameworks.
- Other locations — if any other overseas disclosure occurs, we will take all reasonable steps to ensure the information is protected consistently with Australian privacy law.
APP 8 Obligation: By providing your personal information to us and using our website, you acknowledge that we may disclose your personal information to overseas recipients as described above. We take all reasonable steps to ensure your information is handled securely, but we cannot guarantee that overseas privacy laws will provide the same level of protection as Australian law in all cases.
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your browsing experience, understand how our website is used, and deliver relevant content. This section explains what cookies are, what types we use, and how you can control them.
What Are Cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognise your device and remember certain information about your visit, such as your preferences and session details.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Strictly Necessary | Required for the website to function. These enable core features such as shopping cart, checkout, and account login. The website cannot function properly without these. | Session / Short-term |
| Performance / Analytics | Collect anonymised information about how visitors use our website, including which pages are visited most often. We use Google Analytics for this purpose. | Up to 2 years |
| Functional | Remember your preferences and settings (such as language or region) to provide a more personalised experience. | Up to 1 year |
| Marketing / Targeting | Used to track your browsing activity and deliver relevant advertisements on third-party platforms. These are only set with your consent. | Up to 90 days |
Third-Party Cookies
Some cookies on our website are set by third-party services, including Google Analytics, Facebook Pixel (if applicable), and payment providers. These third parties have their own privacy policies governing how they use the data collected through their cookies. We recommend reviewing the privacy policies of these providers for further information.
How to Manage or Disable Cookies
You can control cookies through your web browser settings. Most modern browsers allow you to:
- View the cookies that have been set on your device
- Block or delete cookies from specific websites
- Set your browser to notify you when a cookie is being set
- Block all cookies (though this may affect the functionality of some parts of our website)
Cookie Consent: By continuing to use our website after being presented with our cookie notice, you consent to our use of non-essential cookies as described above. You can withdraw your consent at any time by adjusting your browser settings or contacting us. Please also refer to our Cookie Policy for complete details.
How We Store & Protect Your Personal Information
In accordance with APP 11 of the Privacy Act 1988 (Cth), we take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include both technical and organisational safeguards.
Technical Security Measures
- SSL/TLS Encryption: Our website uses Secure Sockets Layer (SSL) encryption to protect all data transmitted between your browser and our website during checkout and account interactions.
- Secure Hosting: Our website is hosted on secure, reputable servers with access controls, firewalls, and regular security monitoring.
- Password Protection: Customer account passwords are stored using industry-standard hashing algorithms. We do not store plain-text passwords.
- Payment Security: We do not store full credit or debit card numbers. All payment card data is processed by PCI DSS-compliant payment gateways.
- Regular Updates: We keep our website software, plugins, and security systems regularly updated to address known vulnerabilities.
Organisational Security Measures
- Access to personal information is restricted to authorised staff members on a need-to-know basis.
- Our staff are trained to handle personal information responsibly and in accordance with our privacy policies and procedures.
- We require all third-party service providers who handle personal information on our behalf to implement appropriate security measures.
- We conduct periodic reviews of our data handling practices and security measures.
No Absolute Guarantee: While we take all reasonable precautions to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. If you become aware of any unauthorised access to your account or a security breach, please contact us immediately at [email protected] or call +61 424 260 450.
Data Retention & Deletion
We retain personal information only for as long as it is necessary for the purposes for which it was collected, or as required by applicable Australian laws and regulations. Once personal information is no longer required, we take reasonable steps to destroy or permanently de-identify it.
Retention Periods
| Type of Information | Retention Period | Reason |
|---|---|---|
| Customer order records | 7 years from the date of transaction | Required under Australian taxation law and the Corporations Act 2001 (Cth) for financial record-keeping. |
| Warranty and complaint records | 3 years from resolution | To manage potential follow-up claims and comply with Australian Consumer Law obligations. |
| Customer account information | Duration of account plus 3 years after last activity | To provide ongoing service and maintain records of past interactions. |
| Marketing consent records | Until consent is withdrawn plus 3 years | To demonstrate compliance with the Spam Act 2003 (Cth) and APP 7. |
| Website analytics data | Up to 26 months (Google Analytics default) | To understand website usage trends over time. Data is anonymised after collection. |
| Staff access logs | 12 months | For security monitoring and audit purposes. |
Deletion and De-Identification
When personal information is no longer required and its retention period has expired, we will take one of the following steps depending on the nature of the data:
- Secure deletion — electronic data is permanently deleted using industry-standard deletion processes that prevent recovery.
- Physical destruction — any physical documents containing personal information are shredded or destroyed securely.
- De-identification — in cases where we wish to retain data for analytical or statistical purposes, we de-identify it so it can no longer be linked to an individual.
Requesting Deletion: You may request that we delete your personal information at any time by submitting a Privacy Request using the form in Section 20. Please note that we may be required by law to retain certain information even after your deletion request, in which case we will inform you of the specific legal basis for continued retention.
Your Privacy Rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have a number of important rights in relation to your personal information. We are committed to upholding these rights and making it easy for you to exercise them.
Your Rights Include
How to Exercise Your Rights
To exercise any of your privacy rights, please submit a Privacy Request using the form in Section 20 of this page, or contact us directly:
- Email: [email protected]
- Phone: +61 424 260 450 — Monday to Sunday, 09:00 AM – 06:00 PM AWST
- Post: Privacy Officer, Budget Whitegoods Pty Ltd, Unit 4/125-129 Welshpool Road, Welshpool WA 6106
We will respond to all valid privacy rights requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Accessing & Correcting Your Personal Information
In accordance with APPs 12 and 13, you have the right to access and correct the personal information we hold about you. We are committed to ensuring that the information we hold is accurate, complete, and up to date.
Accessing Your Information
You may request access to the personal information we hold about you by submitting a written request to us. We will provide you with access to your information within 30 days of receiving your request, unless an exception under the Privacy Act applies.
We may decline an access request in limited circumstances, such as where:
- Providing access would pose a serious threat to the life, health, or safety of any individual
- Providing access would have an unreasonable impact on the privacy of other individuals
- The request is frivolous or vexatious
- The information relates to existing or anticipated legal proceedings between us and you
- We are required by law to refuse access
If we refuse your access request, we will provide you with a written explanation of the reasons and inform you of any complaint mechanisms available to you.
Correcting Your Information
If you believe that personal information we hold about you is inaccurate, incomplete, out of date, irrelevant, or misleading, you may request that we correct it. We will take reasonable steps to correct the information within 30 days.
If we refuse to correct your information, we will notify you in writing with the reasons for our decision and information about how to lodge a complaint.
Identity Verification: To protect your privacy, we may need to verify your identity before we can provide access to or correct your personal information. This may involve asking you to provide certain identifying details to confirm that you are the person to whom the information relates.
Fees for Access
We do not charge a fee for receiving an access or correction request. However, in cases where a significant amount of work is required to locate, compile, or review information, we may charge a reasonable fee to cover our costs. We will advise you of any applicable fee before proceeding.
Marketing Communications & Your Choices
We may send you marketing communications about our products, promotions, and special offers, but only with your consent. We comply fully with the Spam Act 2003 (Cth) and APP 7 in relation to all direct marketing activities.
When We Send Marketing Communications
- We will only send you marketing emails, SMS messages, or other promotional communications if you have expressly consented to receive them.
- You may provide consent at the time of creating an account, placing an order, or subscribing to our newsletter.
- All marketing communications will clearly identify WA White Goods as the sender and provide an easy mechanism to unsubscribe.
How to Opt Out
You can opt out of receiving marketing communications from us at any time by:
- Clicking the "Unsubscribe" link included at the bottom of every marketing email we send
- Emailing us at [email protected] with the subject line "Unsubscribe"
- Calling us on +61 424 260 450 during business hours
- Submitting a privacy request using the form in Section 20 of this page
Unsubscribe Processing Time: We will process your unsubscribe request within 5 business days. Please note that even after you unsubscribe from marketing communications, we will continue to send you transactional emails related to any active orders, warranty claims, or other service interactions, as these are not marketing communications.
Children's Privacy
Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly or intentionally collect personal information from children under the age of 18.
- By using our website or placing an order, you confirm that you are 18 years of age or older.
- If you are a parent or guardian and you believe your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected].
- If we become aware that we have collected personal information from a person under 18 without appropriate parental consent, we will take prompt steps to delete that information from our records.
Parental Action Required: If you believe your child has provided us with their personal information without your consent, please contact us at [email protected] or call +61 424 260 450 immediately so we can take appropriate action.
Third-Party Websites & Services
Our website may contain links to third-party websites, social media platforms, payment portals, and other external services. This Privacy Policy applies only to personal information collected by WA White Goods and does not cover the privacy practices of any third-party website or service.
- When you click a link to an external website, you leave our website and are subject to the privacy policy and terms of that third-party site.
- We are not responsible for the privacy practices, content, or security of third-party websites, even if we have provided a link to them.
- We encourage you to read the privacy policies of any third-party websites you visit before providing them with your personal information.
Social Media Platforms
We maintain business pages on Facebook and Instagram. When you interact with our social media pages (such as by liking, commenting, or sending a message), the social media platform will collect and process your information in accordance with its own privacy policy. We encourage you to review the privacy settings and policies of any social media platform you use.
Google Analytics
We use Google Analytics to analyse website traffic and usage. Google Analytics may collect certain information about your device and browsing behaviour. This data is anonymised and aggregated before we receive it. For information about how Google collects and processes data, please visit policies.google.com/privacy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
Payment Data & Financial Security
The security of your payment information is of the highest importance to us. We have implemented stringent measures to ensure that your financial data is handled safely and in compliance with payment industry standards.
What Payment Data We Collect
- We collect the payment method type (e.g. Visa, Mastercard, American Express, Afterpay) for record-keeping and invoice purposes.
- We collect partial card details (such as the last four digits) for reference in transaction records and customer service purposes.
- We record whether a payment was successful, declined, or refunded for order management and financial record-keeping.
What Payment Data We Do NOT Collect or Store
- We do NOT store full credit or debit card numbers on our servers at any time.
- We do NOT store card verification values (CVV/CVC codes).
- We do NOT store card expiry dates beyond what is retained by your payment gateway provider.
- We do NOT store bank account numbers or BSB details entered during direct bank transfer transactions.
PCI DSS Compliance
All online payment processing is handled by third-party payment gateways that comply with the Payment Card Industry Data Security Standard (PCI DSS). These providers implement industry-leading security protocols to protect your financial information during transmission and processing.
Safe Payment Assurance: Your full payment card details are encrypted and processed directly by our PCI DSS-compliant payment partners. We never have access to your complete card information. Our website uses SSL/TLS encryption to secure all data transmitted during the checkout process.
Privacy Complaints & How to Lodge a Complaint
If you believe that WA White Goods has handled your personal information in a way that is inconsistent with this Privacy Policy or the Australian Privacy Principles, you have the right to lodge a privacy complaint. We take all privacy complaints seriously and will investigate and respond to them in a fair, transparent, and timely manner.
Step 1 — Contact Us Directly
In the first instance, please contact us directly. We encourage you to raise privacy concerns with us before escalating to an external regulator, as most concerns can be resolved quickly through direct communication. You can reach our Privacy Officer by:
- Email: [email protected] — Subject line: "Privacy Complaint"
- Phone: +61 424 260 450 — Monday to Sunday, 09:00 AM – 06:00 PM AWST
- Post: Privacy Officer, Budget Whitegoods Pty Ltd, Unit 4/125-129 Welshpool Road, Welshpool WA 6106
- Online Form: Use the Privacy Request Form in Section 20 of this page and select "Privacy Complaint" as your request type.
We will acknowledge your privacy complaint within 5 business days and aim to provide a substantive response and resolution within 30 days. If your complaint is complex and requires more time, we will advise you of the extended timeframe and keep you informed of our progress.
Step 2 — Office of the Australian Information Commissioner (OAIC)
If you are not satisfied with our response to your privacy complaint, or if we have failed to respond within a reasonable time, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
- Website: www.oaic.gov.au
- Phone: 1300 363 992 (within Australia)
- Online complaint form: Available at www.oaic.gov.au/privacy/privacy-complaints
- Post: GPO Box 5218, Sydney NSW 2001
Data Breach Notification: In the event of an eligible data breach under the Privacy Act 1988 (Cth) Notifiable Data Breaches (NDB) scheme, we will notify the OAIC and all affected individuals as soon as practicable. We will take immediate steps to contain the breach and prevent further harm.
Changes to This Privacy Policy
We review and update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or best practices. We reserve the right to modify this Privacy Policy at any time, and the updated version will always be published on our website.
- The "Last Updated" date at the top of this page will always reflect when this Privacy Policy was most recently revised.
- Material changes to this Privacy Policy will be communicated to registered customers via email where practicable.
- Your continued use of our website or services after changes to this Privacy Policy are published constitutes your acceptance of the revised policy.
- If you do not agree with any changes to this Privacy Policy, you should discontinue your use of our website and contact us to discuss your concerns.
- The most current version of this Privacy Policy is always available at wawhitegoods.com.au/privacy-policy/.
We encourage you to revisit this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.
Privacy Request Form & Contact
You can use the form below to submit any privacy-related request, including accessing your personal information, requesting a correction, requesting deletion, opting out of marketing, or lodging a privacy complaint. All requests will be handled in accordance with the Australian Privacy Principles and responded to within 30 days.
Submit a Privacy Request
Complete the form below and a member of our team will respond to your request within 30 days in accordance with the Privacy Act 1988 (Cth). All fields marked with an asterisk (*) are required.
Fields marked with * are required.
Contact Our Privacy Officer
If you prefer to contact us directly about a privacy matter, our team is available Monday to Sunday during business hours. We aim to respond to all privacy enquiries within 5 business days.
