Who We Are

This website (carlahome.com) is operated by Wilson Trading Import Pty Ltd (ABN 51 649 718 043), trading as CARLA HOME. When we say "we", "us" or "our" in this policy, we mean Wilson Trading Import Pty Ltd.

Email: info@wilsontradingimport.com
Location: Manly, NSW, Australia

What Information We Collect and Why

We collect, use and disclose personal information where it is reasonably necessary for our business activities or as otherwise permitted or required by law.

Information you provide to us

When you browse our website, create an account, make a purchase, subscribe to our newsletter, leave a product review or contact us, we may collect the following information:

• Name and contact details (email address, phone number, shipping and billing address).
• Payment information (processed securely by Shopify Payments, Afterpay or PayPal — we do not store your full credit card details).
• Order history and product preferences.
• Product review content and photos you submit.
• Any information you provide when contacting our support team.

Information collected automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• Device information (browser type, operating system, screen resolution).
• IP address and approximate location (country/city level).
• Pages visited, time on site, referring website and browsing behaviour.
• Information collected by analytics and advertising tools (see Section 5).

How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfil your orders, including shipping and payment processing.
• To communicate with you about your orders, returns or enquiries.
• To send you marketing communications if you have opted in (you can unsubscribe at any time).
• To personalise your shopping experience and show relevant product recommendations.
• To analyse website performance and improve our products and services.
• To run advertising campaigns on platforms such as Meta (Facebook/Instagram), Google and TikTok.
• To detect and prevent fraud.
• To comply with our legal obligations.

Who We Share Your Information With

We do not sell your personal information in the traditional sense. However, we may share certain data (such as browsing behaviour and purchase activity) with advertising and analytics partners to help us deliver relevant advertising and measure campaign performance.

We share your information with the following categories of service providers who help us run our business:

• Shopify — our ecommerce platform (hosts the website, processes orders).
• Shopify Payments, Afterpay, PayPal, Apple Pay, Google Pay — payment processing.
• Our 3PL fulfilment partner — to ship your orders.
• Klaviyo — email marketing (only if you have opted in to receive emails).
• Judge.me — product reviews platform.
• Google Analytics (GA4) — website analytics.
• Meta Pixel and Conversions API — advertising measurement.
• TikTok Pixel — advertising measurement.
• Google Ads — advertising measurement.
• AfterShip — shipment tracking.

These service providers only have access to the information necessary to perform their functions and are required to protect your information.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. By continuing to use our website, you consent to the use of cookies and tracking technologies as described in this policy, unless you disable them via your browser settings.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality, including checkout and personalisation features.

Email Marketing and the Spam Act 2003

We comply with the Spam Act 2003 (Cth). We will only send you marketing emails if you have given us your consent (for example, by subscribing to our newsletter or checking an opt-in box at checkout).

Every marketing email we send includes an unsubscribe link. You can opt out at any time and we will process your request promptly. Transactional emails (order confirmations, shipping updates, return communications) are not marketing and will continue to be sent as needed to fulfil your order.

How We Protect Your Information

We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access. Our website is hosted on Shopify, which uses industry-standard SSL encryption for all data transmitted between your browser and our servers. Payment information is processed by PCI-DSS compliant payment providers.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. To the maximum extent permitted by law, we are not liable for any unauthorised access to, or disclosure of, your personal information where such access or disclosure occurs despite our reasonable security measures.

Data breach notification

In the event of a data breach that may result in serious harm to affected individuals, we will take reasonable steps to notify those individuals and, where applicable, the Office of the Australian Information Commissioner, in accordance with our obligations.

Data Retention and Aggregated Data

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting or reporting requirements. Order records are typically retained for 7 years for tax and legal compliance purposes.

If you request deletion of your account or personal information, we will process your request within a reasonable time, subject to any legal obligations that require us to retain certain records.

We may use de-identified or aggregated data for analytics, research and business improvement purposes. Such data does not identify you personally and may be used without restriction.

Your Rights

You may contact us at any time to:

• Ask what personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to legal requirements).
• Unsubscribe from marketing communications.

We may require you to verify your identity before processing any request relating to your personal information. This is to protect your privacy and prevent unauthorised access.

To exercise any of these rights, email us at info@wilsontradingimport.com. We will respond within 30 days.

International Data Transfers

Some of our service providers (such as Shopify, Klaviyo and Google) may store or process data outside of Australia, including in the United States and Canada.

You acknowledge that overseas recipients may not be subject to the same privacy obligations as Australian entities. By using our website and providing your personal information, you consent to the transfer of your information to these overseas recipients as described in this policy.

Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. The updated version will be effective from the date posted on this page. We encourage you to review this page periodically.