Privacy Policy

Effective date: June 2026  |  Last updated: June 2026

Dean Turner Art ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit deanturnerart.com or make a purchase from us.

We are an Australian business based on the Gold Coast, Queensland. We sell to customers in Australia, the United States, and internationally. This policy is designed to comply with:

• The Australian Privacy Act 1988 (Cth) and the Privacy and Other Legislation Amendment Act 2024

• The Australian Privacy Principles (APPs)

• The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) — for California residents

• US state privacy laws applicable to our customers

• The EU/UK General Data Protection Regulation (GDPR) — for EU/UK customers

• Google Merchant Center and Google Shopping Ads requirements

1. What Personal Information We Collect

We collect the following categories of personal information:

1.1 Information you provide directly

1.2 Information collected automatically

1.3 Information from third parties

2. How We Use Your Personal Information

We only use your personal information for the following purposes:

3. Legal Basis for Processing (GDPR — EU/UK Customers)

If you are located in the European Union or United Kingdom, we process your personal data on the following legal bases under the GDPR:

You have the right to withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

4. Third-Party Services That Receive Your Data

We use the following third-party platforms that may receive your personal information as part of providing their services to us. Each has their own privacy policy which we encourage you to review.

Some of these providers are located outside Australia (including in the United States). When your data is transferred internationally, we take steps to ensure it is protected to an equivalent standard as required under Australian privacy law and the GDPR where applicable.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit our website. We use the following types:

You can control non-essential cookies through your browser settings. Disabling marketing cookies will not stop you seeing ads from us — it may just make them less relevant to your interests.

For EU/UK visitors: Non-essential cookies require your explicit consent before being set. Our cookie consent banner allows you to accept or decline categories of cookies.

6. How Long We Keep Your Data

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

If you request deletion of your data, we will delete or anonymise your personal information unless we are required by law to retain it (e.g. tax records).

7. Your Privacy Rights

Depending on your location, you have some or all of the following rights regarding your personal information:

All customers (Australian Privacy Principles):

• Right to access the personal information we hold about you

• Right to correct inaccurate personal information

• Right to request deletion of your personal information (subject to legal retention requirements)

• Right to complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

EU/UK customers (GDPR):

• All of the above, plus:

• Right to data portability — receive your data in a structured, machine-readable format

• Right to object to processing based on legitimate interests

• Right to restrict processing in certain circumstances

• Right to withdraw consent at any time for consent-based processing

• Right to lodge a complaint with your local data protection authority

California residents (CCPA/CPRA):

• Right to know what personal information we collect, use, share, or sell

• Right to delete personal information we have collected (with certain exceptions)

• Right to opt-out of the sale or sharing of personal information — we do not sell your data

• Right to correct inaccurate personal information

• Right to limit use of sensitive personal information

• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at contact@deanturnerart.com or +61 410 555 841. We will respond to verified requests within 30 days (or within the timeframe required by your local law).

8. Marketing Communications

We send marketing emails and SMS messages only to customers who have given their consent. We use Klaviyo to manage our email marketing.

How to unsubscribe:

• Email: Click the 'Unsubscribe' link at the bottom of any marketing email

• SMS: Reply STOP to any marketing text message

• Contact us: Email contact@deanturnerart.com or call +61 410 555 841

Unsubscribing from marketing does not affect transactional emails such as order confirmations and shipping notifications, which we are required to send as part of fulfilling your order.

9. How We Protect Your Information

We take the security of your personal information seriously and implement the following measures:

• All data transmitted between your browser and our website is encrypted using SSL/TLS technology (HTTPS)

• Payment card data is processed using PCI-DSS compliant payment gateways — we never store full card numbers

• Access to customer data is restricted to authorised team members only

• We use Shopify's secure platform which employs AES-256 encryption for stored data

• We regularly review our data practices and app permissions

While no online transmission is 100% secure, we follow all applicable industry standards and take reasonable technical and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure.

10. Data Breaches

In the event of a data breach that is likely to result in serious harm to affected individuals, we will:

• Notify the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme

• Notify affected individuals as soon as practicable

• Take immediate steps to contain and remediate the breach

11. Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Note: Australia's Children's Online Privacy Code is due to be registered by 10 December 2026. We will update this policy as required when that code comes into force.

12. International Data Transfers

We are an Australian business. Your personal information may be transferred to and processed in countries other than Australia, including the United States, where our third-party service providers (including Meta, Google, and Klaviyo) operate. These countries may have different privacy laws to those in Australia or your home country.

Where we transfer data internationally, we take steps to ensure it receives adequate protection, including through contractual obligations with our service providers. By using our website and making a purchase, you acknowledge that your data may be transferred internationally for the purposes described in this policy.

13. Additional Information for California Residents (CCPA/CPRA)

In the past 12 months, we have collected the following categories of personal information from California residents:

• Identifiers: name, email address, IP address, phone number

• Commercial information: purchase history, products viewed

• Internet or other electronic network activity: browsing behaviour, cookie data

• Geolocation data: approximate location derived from IP address

We do not sell personal information. We do not share personal information with third parties for cross-context behavioural advertising without giving California residents the right to opt out. To opt out of sharing for advertising purposes, contact us at contact@deanturnerart.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the 'Last updated' date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

15. Contact Us — Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to make a complaint about how we have handled your personal information, please contact us:

Regulatory bodies — if you are not satisfied with our response: