Privacy policy
Privacy Policy – 2025
Effective Date: 1 January 2025
This Privacy Policy sets out how NRC Nutrition Pty Ltd (ABN: 75 607 712 701), trading as NaturoBest, collects, uses, stores, and discloses your personal information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the General Data Protection Regulation (GDPR) where applicable.
By using our website www.naturobest.com or providing your personal information to us, you agree to the terms of this Privacy Policy.
1. What Personal Information We Collect
We may collect personal information from you when you:
-
Make a purchase
-
Contact our customer service team
-
Subscribe to our newsletter or SMS promotions
-
Register for an account or webinar
-
Complete a survey or feedback form
-
Interact with our website or social media channels
Personal information may include:
-
Full name
-
Email address
-
Phone number
-
Postal or billing address
-
Payment details (processed via secure third-party gateways)
-
IP address and browser/device information (via cookies and analytics tools)
You may choose to remain anonymous or use a pseudonym; however, this may limit our ability to fulfil certain services.
2. How We Use Your Information
We may use your personal information to:
-
Process and deliver orders
-
Communicate with you about your order or account
-
Respond to enquiries, feedback or complaints
-
Personalise your shopping and browsing experience
-
Manage surveys, competitions or promotions
-
Send marketing emails or SMS (with your consent)
-
Improve our website and services
-
Comply with legal obligations
-
Prevent fraud or unauthorised use
You can unsubscribe from marketing at any time by clicking the “Unsubscribe” link or contacting us.
3. Legal Basis for Processing (GDPR)
Under the GDPR, we only process personal data when we have a lawful basis to do so. These include:
-
Consent – You have given us permission to use your data
-
Contract – Processing is necessary to fulfil an agreement with you
-
Legal Obligation – We are legally required to process your data
-
Legitimate Interests – We use your data in a way that is reasonably expected to run our business and improve our services
4. Storage and Retention of Personal Information
We store your information securely and implement safeguards such as:
-
Secure servers and databases
-
Encryption of sensitive information
-
Access controls limited to authorised staff
-
Security monitoring and regular reviews
We retain personal data only as long as necessary to fulfil the purposes for which it was collected. For example, order records are retained for seven years for accounting and tax compliance.
When no longer needed, your data is securely deleted or anonymised.
5. Disclosure to Third Parties
We may disclose your personal data to:
-
Third-party service providers (e.g. payment processors, couriers, IT support)
-
Professional advisers (e.g. legal and accounting services)
-
Government or regulatory authorities as required by law
These providers are only given the minimum data necessary and must adhere to confidentiality and data protection standards.
6. International Transfers
We are based in Australia and your information may be processed in Australia or other countries outside the European Economic Area (EEA). Where personal data is transferred internationally, we:
-
Rely on adequacy decisions (if applicable), or
-
Use Standard Contractual Clauses (SCCs) approved by the European Commission
By using our services, you consent to this international transfer of your data.
7. Cookies and Analytics
We use cookies and similar technologies to:
-
Remember your preferences
-
Monitor website performance and traffic
-
Provide relevant content and offers
Some cookies are essential, while others are optional. You may adjust your browser settings to refuse cookies, but this may impact your user experience.
We also use third-party analytics (e.g. Google Analytics) to collect anonymised usage data.
8. Your Rights (EU, UK, EEA, Switzerland)
If you are located in the EU, UK, EEA, Switzerland, Iceland, Liechtenstein or Norway, you have the following rights under the GDPR:
-
Access – Obtain a copy of your personal data
-
Rectification – Correct inaccurate or incomplete data
-
Erasure – Request deletion of your data where there is no legal reason to retain it
-
Restriction – Limit processing of your data under specific conditions
-
Portability – Request your data in a portable format
-
Objection – Object to processing based on legitimate interests or direct marketing
-
Withdraw Consent – Where processing is based on consent
-
Lodge a Complaint – With your data protection authority
We may request verification of your identity before fulfilling any request. Some requests may be denied where legally permitted.
9. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you. If this changes, we will inform you and explain your rights.
10. EU Representative (Article 27 GDPR)
If we determine that our processing activities fall under Article 27 of the GDPR, we will appoint a representative in the EU or UK and update this policy with their contact information.
11. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be published on our website, and continued use of our services after any change constitutes your acceptance.
12. Contact Us and Complaints
If you have questions, concerns, or complaints about your privacy or this policy, please contact us:
NaturoBest (NRC Nutrition Pty Ltd)
PO Box 380, Peregian Springs QLD 4573, Australia
Phone: (07) 5448 2001
Email: admin@naturobest.com
If you are not satisfied with our response, you may contact:
-
The Office of the Australian Information Commissioner (OAIC) – www.oaic.gov.au
-
Your local data protection authority (EU/UK residents)