1. About This Policy

This Privacy Policy explains how Good Native, a trading name of Do Harvey Pty Ltd (52 631 514 442) (“we”, “us”, “our”), collects, uses, discloses, and protects your personal information when you use our applications and services (“Services”).

We are committed to handling your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), and where applicable, the General Data Protection Regulation (GDPR) for users in the European Economic Area and the United Kingdom.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and any other information you provide during registration.

2.2 Store and Platform Data

When you install and use our Apps, we may access data from your connected platforms depending on the permissions you grant. This may include:

• Shopify store data: product listings, order and transaction information, customer data as permitted by your Shopify store settings.
• Webflow site data: site structure, content, and configuration data.
• Google Analytics data: website traffic, user behaviour, and conversion data.
• Klaviyo data: subscriber lists and event data (we send events to Klaviyo on your behalf).
• Slack: we may post notifications or data summaries to your designated Slack channels.
• Meta (Facebook) Ads, Google Ads, and Google Tag Manager: we may send conversion or event data to these platforms on your behalf

2.3 Usage and Technical Data

We automatically collect information about how you interact with our Services, including IP address, browser type, device information, pages visited, and actions taken within our Apps.

2.4 Payment Information

We do not directly collect or store your payment card details. All payment processing is handled by Paddle.com Market Limited (“Paddle”), our Merchant of Record. Please refer to Paddle’s privacy policy for information about how they handle your payment data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services.
• Process your subscription and manage your account.
• Send data to third-party platforms you have connected (e.g., pushing events to Klaviyo, conversion data to Google Ads or Meta Ads, notifications to Slack).
• Communicate with you about your account, updates, and support requests.
• Monitor and analyse usage patterns to improve performance and user experience.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the EEA and UK, we process your personal data on the following legal bases:

• Contract: Processing necessary to perform our contract with you (providing the Services).
• Legitimate Interest: Processing for our legitimate business interests, such as improving Services and preventing fraud.
• Consent: Where you have given consent for specific processing, such as receiving marketing communications.
• Legal Obligation: Processing required to comply with applicable laws.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Paddle (Merchant of Record): To process payments and manage subscriptions.
• Third-party platforms you connect: Such as Shopify, Webflow, Google Analytics, Google Ads, Meta Ads, GTM, Slack, and Klaviyo — only as directed by you through our App integrations.
• Infrastructure providers: Hosting and cloud service providers who assist in delivering our Services, under appropriate data processing agreements.
• Legal and regulatory bodies: Where required by law, court order, or to protect our legal rights

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. After account closure, we will retain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements. We will delete or de-identify your data when it is no longer needed.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. These include encryption of data in transit, access controls, and regular security reviews. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Portability: Request a copy of your data in a portable format (GDPR).
• Objection: Object to processing based on legitimate interests (GDPR).
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@goodnative.com.au. We will respond within 30 days (or as required by applicable law).

9. International Data Transfers

Your data may be processed and stored in Australia and other countries where our service providers operate. Where we transfer data outside your jurisdiction, we take steps to ensure appropriate safeguards are in place, including standard contractual clauses where required by GDPR.

10. Cookies and Tracking

Our website and Services may use cookies and similar tracking technologies to improve functionality and analyse usage. You can manage cookie preferences through your browser settings. Our Apps may also facilitate the use of tracking pixels and tags (e.g., Google Tag Manager, Meta Pixel) on your store or website as part of the App functionality.

11. Children’s Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services. The updated policy will be effective from the date stated at the top of the document.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact us:

Email: support@goodnative.co

Entity: Do Harvey Pty Ltd, trading as Good Native

Address: Level 2/696 Bourke St, Melbourne VIC 3000

‍

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or with your local data protection authority if you are in the EEA or UK.