Pephive

Privacy Policy

Version 2026-10-15 · effective 15 October 2026

This policy explains how Pephive (ABN 34 414 282 275) collects, uses, shares and protects personal information. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. What we collect

When you enter the site

  • your answers to the three entry statements, with the date and time, your IP address and your browser type;
  • the version of our policies shown to you;
  • a random device code, if your browser holds one (see Cookies below).

We do not ask for your name, date of birth or identity documents at this step.

When you create an account

  • your email address;
  • your answers to the three statements, with the date and time, IP address, browser type and policy version;
  • whether you ticked the optional box to receive our emails;
  • how you found us, such as a referral code, an ad, a search or an email link.

When you confirm your email and sign in

  • records of the confirmation and sign-in emails we send, and of each link opened, used or expired, with the date, time and IP address;
  • when and how your email was confirmed;
  • whether your past orders were linked to your account, and whether the account was locked or its email changed.

When you order

  • your name, email address, phone number, and billing and delivery addresses;
  • what you ordered, the amounts, and how and when you paid;
  • your answers to the three statements at checkout, with the date and time, IP address, browser type and policy version;
  • for PayID or bank transfer, any payment confirmation or screenshot you send us;
  • how you found us (for example an ad, a search or an email link), recorded with your order.

If you start checkout but do not finish, we keep the email address and cart details you entered, so we can send you a reminder.

When you join a list, contact us or leave a review

  • your email address, if you ask to hear when a product is back in stock or claim a code from an offer on our site;
  • your messages, calls and any details you give us;
  • if you post a public review of Pephive, its text and your display name.

When you browse

  • technical information such as your IP address, browser and device type, the pages you visit and the site that sent you to us.

We do not knowingly collect sensitive information, such as health information. Please do not send it to us.

2. How we collect it

Mostly directly from you. Some information is collected automatically by our website and by cookies. We also receive information from our service providers, for example payment results from our payment processor and delivery updates from Australia Post.

3. Why we use it

  • to run the 18+ step and record the statements you confirm;
  • to create and secure your account, confirm your email and send sign-in links;
  • to process, deliver and support your orders, including refunds and returns;
  • to take payments and to prevent fraud, spam and misuse, including limits on repeated attempts from one IP address or email;
  • to keep the records our payment processor and the law require, and to respond to payment disputes;
  • to send service emails about your account and orders;
  • to send marketing emails where the law allows (see section 4);
  • to measure our ads and improve the site;
  • to meet our legal, tax and accounting obligations.

4. Emails from us

  • We send service emails about your account and orders. These include confirmation and sign-in links, order and payment updates, and tracking.
  • We send emails about restocks, new batches, lab results and offers to customers who have ordered from us or who ticked the opt-in box.
  • If you start checkout but do not finish, we may send you reminder emails about your cart.
  • After an order is completed, we may email you once to ask for a review.
  • Every marketing email has an unsubscribe link. You can also email us to unsubscribe. We action unsubscribe requests within 5 business days.

5. Cookies and similar technologies

  • Cookies the site needs to work: they remember that this browser has passed the 18+ step, keep you signed in, keep your cart and help protect the site from misuse. They hold no payment details.
  • Measurement cookies and tags: they record how you found us (for example an ad, a search or an email) and count visits to our pages. Our advertising partners may set their own cookies to measure their ads.

You can block or delete cookies in your browser settings. If you block the cookies the site needs, the 18+ step, sign-in and cart will not work. You can manage ad personalisation in your account settings with the advertising platforms you use.

6. Who we share it with

We share personal information only as needed for the purposes above, with:

  • our payment processor, and the card schemes and banks involved in a payment or a dispute;
  • our delivery and shipping-label providers, to deliver your order and send tracking;
  • our website host and the services that run our site and email, including spam and security checks and backups;
  • our advertising and analytics providers, to measure how visitors find us;
  • our professional advisers, such as our accountant or lawyer;
  • government authorities and regulators, when the law requires or allows it.

We do not sell personal information.

7. Information sent overseas

Some of these providers store or process information outside Australia, including in the United States and other countries where our providers operate. Before we share information with an overseas provider, we take reasonable steps to make sure it handles the information in line with the Australian Privacy Principles.

8. How we protect it

  • The site uses encrypted connections (HTTPS).
  • Your card details pass through our website to our payment processor over an encrypted connection. We do not store them.
  • Access to customer records is limited to the people who run the store.
  • Confirmation and sign-in links work only once and expire.
  • If a data breach is likely to cause you serious harm, we will tell you and, where the law requires, the Office of the Australian Information Commissioner (OAIC).

9. How long we keep it

  • Records of the statements you confirm: 7 years.
  • Records of confirmation and sign-in emails, links and account events: up to 24 months.
  • Orders, invoices and payment records: at least 5 years, as Australian tax law requires.
  • Your account: until you ask us to close it. We still keep the records above for the periods shown.
  • Security counters, such as the number of attempts from one IP address: deleted automatically within a few days.
  • Everything else: only as long as we need it for the purposes in this policy. Then we delete it or remove the details that identify you.

10. Dealing with us without your name

Where it is practical, you can deal with us without giving your name, or by using a different name. For example, you can browse after the 18+ step, or ask a general question, without telling us who you are. To create an account or order, we need your real name, email address and delivery details.

11. Access and correction

You can ask for a copy of the personal information we hold about you, or ask us to correct it. Email us. We will confirm your identity first, and we aim to respond within 30 days.

  • Asking for access is free. If we give you access, we may charge a reasonable fee to cover the cost of doing so. We will tell you the fee before we charge it.
  • Corrections are free.
  • If we refuse a request, we will tell you why in writing and how to complain. If we refuse to correct your information, you can ask us to attach a statement saying you believe it is wrong, and we will do so.
  • You can update your own details at any time in My Account, and you can ask us to close your account.

To make a request, email pephiveau@gmail.com with “Privacy” in the subject line.

12. Complaints

If you have a concern about how we handle your information, email us with “Privacy” in the subject line. We will reply within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) using its online complaint form, or call the OAIC on 1300 363 992.

13. People under 18

Our site is only for people aged 18 or older. If we learn that we hold personal information about someone under 18, we delete it, unless the law requires us to keep it.

14. Automated decisions

Some decisions are made automatically by our systems, without a person checking first. These are:

  • blocking repeated sign-in or sign-up attempts from one IP address or email;
  • locking an account after suspicious activity;
  • declining a payment that fraud checks flag.

If one of these affects you, contact us and a person will review it.

15. Changes to this policy

This policy has a version and an effective date, shown at the top of this page. We update it when our practices change. A new version applies from its effective date.

16. Contact us

Privacy questions: email pephiveau@gmail.com or call 0405 691 170.

Enter Pephive