Effective Date: October 17, 2026
Welcome to the privacy policy of KHM IMPORTING PTY LTD. This document is designed to inform you clearly and comprehensively about how we collect, use, store, disclose and protect your personal information when you access and use our e-commerce shopping website available at www.khmimporting.com. We are committed to upholding the highest standards of data privacy and compliance with all applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as other relevant global data protection regulations that may apply to our international customers. We treat your personal privacy as a top priority, and we have implemented rigorous operational and technical measures to ensure your personal information is handled securely, transparently and only for the legitimate purposes outlined in this policy.
1. Introduction: Who We Are
KHM IMPORTING PTY LTD is an Australian registered importing and e-commerce company, located at VIC 3029, Australia. Our core business operations focus on sourcing high-quality imported goods, connecting global suppliers with local and international consumers through our official online shopping platform. If you have any questions, concerns or requests related to this privacy policy or our handling of your personal data, you can reach out to our dedicated privacy team at any time by sending an email to grits@khmimporting.com, or calling our customer service line on +61 3 9275 7777 during our standard business hours. This privacy policy applies to all visitors, registered users, customers and any other individuals who access our website, create an account, place an order, subscribe to our marketing communications, or interact with our platform in any capacity. By continuing to browse, access or use our website, you acknowledge that you have read, understood and agreed to the terms and practices described in this policy. If you do not agree with any part of this privacy policy, we advise you not to access or use our e-commerce platform.
2. Types of Information We Collect
We only collect information that is necessary to deliver our e-commerce services to you, and we never gather personal data in an unauthorized or overly broad manner. The categories of information we may collect include the following:
First, the information you voluntarily provide to us directly. When you create a user account on our website, we will ask you to provide your full name, email address, residential or delivery address, contact phone number, and a securely hashed password for your account access. When you proceed to checkout and place an order on our platform, we will additionally collect your payment information including billing address, credit card or debit card details, or other payment method identifiers required to process your transaction. We do not store full unredacted payment card details on our own servers, all payment processing is handled through PCI DSS compliant third-party payment gateways to eliminate unnecessary security risks. If you choose to subscribe to our newsletter, fill out a customer satisfaction survey, submit a product review, send us a customer support inquiry, or participate in our promotional activities, we will collect the content of all the information you submit in those interactions, including any personal details you choose to share. We may also collect information you provide when you enter competitions, loyalty programs, or reward schemes we run on our website.
Second, the information we collect automatically when you access our website. This includes your device information such as the type of device you use to browse our platform, your unique device identifier, your operating system version, your web browser type and version, your IP address, and your network location data. We also collect website usage data including the pages you visit on www.khmimporting.com, the time and date of your visit, the duration you spend on each page, the links you click, the product pages you view, the search queries you enter on our platform, the website that referred you to our e-commerce site, and other behavioral data related to your browsing activity. We use cookies, web beacons, pixel tags and other similar tracking technologies to collect this automatic information, which helps us understand how users interact with our website so we can continuously optimize our service experience. You can adjust the settings on your web browser to refuse cookies, but please note that disabling cookies may limit some of the core functionality of our website, such as saving your shopping cart contents or staying logged into your user account.
Third, the information we receive from trusted third-party sources. For example, when you choose to log in to our website through a third-party social media account such as Google or Facebook, the social media platform may share your public profile information, including your name and email address, with us to simplify the account creation process. We may also receive updated delivery address information from our logistics and courier partners to ensure that your purchased products are delivered to your correct location without delays, and we may receive fraud screening information from reputable third-party anti-fraud service providers to help us prevent unauthorized transactions and protect both our customers and our business from financial harm.
3. How We Use Your Personal Information
All the personal information we collect is used for clear, legitimate and explicitly stated purposes, and we will never process your data in a way that is incompatible with the purposes disclosed in this policy. The primary use cases for your information are as follows:
First and foremost, to fulfill and manage your orders. We use your contact details, delivery address and payment information to process your purchase, verify your payment status, arrange shipping and delivery through our courier partners, send you order confirmation notifications, tracking updates, and post-delivery support communications. This processing is necessary for the performance of the sales contract we enter into with you when you place an order on our platform, and it is essential to ensure you receive the products you have purchased in a timely and correct manner. We may also use your information to process product returns, refunds, exchanges and warranty claims in accordance with our store policies.
Second, to manage and maintain your user account. We use your account information to verify your identity when you log in, provide you with personalized access to your order history, saved shopping preferences, saved payment methods (with your explicit consent), loyalty program points, and other account-exclusive features. We will also use your contact information to send you important administrative notifications related to your account, such as password reset alerts, account security updates, and notifications about changes to our terms of service or this privacy policy.
Third, to improve and personalize your shopping experience on our website. We analyze your browsing behavior, purchase history and preference data to tailor the product recommendations we show you, display content that is more relevant to your interests, optimize our website layout and navigation structure, test new features and functions of our platform, and conduct internal data analysis to identify popular product categories, seasonal demand trends and opportunities to improve our overall service quality. This personalized processing is carried out based on our legitimate business interest to provide a more intuitive, user-friendly e-commerce experience for all our customers.
Fourth, for customer service and support purposes. When you contact our support team via email at grits@khmimporting.com or phone on +61 3 9275 7777, we use the personal information you provide to us to respond to your inquiries, resolve technical issues you encounter on our website, address your complaints, answer product-related questions, and provide you with after-sales assistance in a fast and effective manner. We may retain copies of your support communications to maintain a service history and ensure consistency in the support we provide to you across all interaction channels.
Fifth, for marketing and promotional communications, where you have given us your explicit consent. If you opt in to receive our marketing emails, we will use your email address to send you newsletters, information about new product arrivals, exclusive discount offers, upcoming sales events, and promotional campaigns that we believe may be of interest to you. You can opt out of receiving these marketing communications at any time, free of charge, by clicking the “unsubscribe” link located at the bottom of every marketing email we send, or by sending an unsubscribe request to our email address grits@khmimporting.com. We will never send you unsolicited marketing messages, and we will immediately stop processing your information for marketing purposes once you have submitted an opt-out request.
Sixth, for legal compliance, fraud prevention and security protection. We may use your personal information to verify your identity, screen for potentially fraudulent or unauthorized transactions, protect our website, our systems and our users from malicious cyberattacks, unauthorized access, data breaches and other illegal activities. We may also process your personal information when we are required to do so by law, court order, or valid request from a regulatory or government authority, to the full extent permitted by Australian law.
4. Disclosure of Your Personal Information
We will never sell, rent or lease your personal information to any third parties for their independent marketing purposes without your explicit written consent. We may only disclose your personal data to carefully selected third parties under the following limited circumstances, and all of these third parties are required to comply with strict data protection obligations that are at least as protective as the requirements in this privacy policy:
- Trusted service providers that support our business operations: This includes our PCI DSS compliant payment processing partners who help us process your transactions securely, our courier and logistics companies who use your delivery address and contact details to ship your purchased products to you, our cloud hosting service providers who store our website data in secure servers, our anti-fraud and cybersecurity service providers who help us protect our platform from unauthorized access, our email service providers who help us deliver operational and marketing emails to you, and our professional advisors including lawyers, accountants and auditors who provide us with compliance and business consulting services. All these third-party service providers are only permitted to process your personal information strictly on our behalf and according to our explicit instructions, and they are not allowed to use your data for their own unrelated business purposes.
- Law enforcement and regulatory authorities: We may disclose your personal information to government bodies, law enforcement agencies, courts or regulatory entities when we are legally obligated to do so, or when the disclosure is necessary to protect our legal rights, the safety of our customers, the safety of the public, or to comply with a valid legal process.
- Business transfer scenarios: In the event that we undergo a merger, acquisition, sale of all or a substantial portion of our business assets, or other corporate restructuring transaction, your personal information may be transferred to the successor entity as part of the transaction. We will require the new controlling entity to continue to handle your personal information in accordance with the terms of this privacy policy, and we will provide you with advance notice if any material changes to how your data is handled will occur as a result of the transaction.
- With your explicit consent: In any other scenario where we are required to share your personal information, we will first obtain your clear, voluntary and informed consent before proceeding with the disclosure.
5. Data Security Measures
We take the security of your personal information extremely seriously, and we have implemented a multi-layered set of technical, administrative and physical security safeguards designed to protect your data against unauthorized access, accidental loss, alteration, disclosure, misuse or destruction. All sensitive personal information transmitted between your browser and our website is encrypted using industry-standard TLS 1.3 technology, which ensures that no third party can intercept and read your data during transmission over the internet. Our servers that store personal user data are hosted in secure, access-controlled data centers with 24/7 physical security monitoring, fire suppression systems, redundant power supplies and strict biometric access restrictions.
We regularly update our information security systems to patch known vulnerabilities, conduct frequent security audits and penetration testing to identify and address potential risks, and our internal team members are only granted access to your personal information on a strict need-to-know basis. All of our employees who handle user personal data are required to complete regular data privacy and security training, and they are bound by strict confidentiality obligations. In the unlikely event that a personal data breach occurs that poses a significant risk to your rights and freedoms, we will notify you and the relevant Australian regulatory authority as soon as reasonably possible, in full compliance with the Notifiable Data Breaches scheme under the Privacy Act 1988.
While we make every reasonable effort to protect your personal information, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us via the contact details provided in this policy so we can take immediate remedial action.
6. Your Rights Over Your Personal Information
Under Australian privacy law and applicable global data protection regulations, you hold a comprehensive set of rights in relation to the personal information we hold about you:
- Right of access: You can request a copy of all the personal data we currently hold about you, free of charge in most circumstances. We will respond to your access request within the statutory timeframe required by law.
- Right to correction: If you find that any of the personal information we hold about you is inaccurate, incomplete or out of date, you have the right to request that we correct and update that information without undue delay.
- Right to erasure (right to be forgotten): You can request that we delete all of your personal information from our systems, subject to a small number of exceptions where we are legally required to retain certain data for tax, accounting or legal compliance purposes.
- Right to restrict processing: You have the right to request that we limit the way we process your personal information, for example when you contest the accuracy of your data, or when our processing activities are no longer legitimate but you do not want us to fully delete your information.
- Right to data portability: You can request to receive a machine-readable copy of all the personal data you have provided to us, or ask us to transfer this data directly to another data controller where technically feasible.
- Right to object: You have the right to object to our processing of your personal information that is based on our legitimate business interests, including for direct marketing purposes at any time, which we will honor immediately.
- Right to withdraw consent: At any point where you have previously given us consent to process your personal data for specific purposes, you can withdraw that consent easily, and we will stop all processing activities based on that consent going forward.
To exercise any of these rights, you can simply send your request to our dedicated privacy team via email at grits@khmimporting.com, or call us on +61 3 9275 7777. We may require you to verify your identity before we process your request, to ensure that no unauthorized individual can access or modify your personal information. We will not charge you any fee for submitting a legitimate request to exercise your rights, unless your request is manifestly excessive, repetitive or frivolous.
7. Data Retention
We will not retain your personal information for any longer than is strictly necessary to fulfill the exact purposes for which the information was originally collected. For example, we will retain your order and transaction information for a minimum of 7 years after your order is completed, to comply with Australian tax law requirements and accounting record keeping obligations. We will retain your user account information for as long as your account remains active, or as needed to provide you with our services. If you request that we delete your user account, we will permanently remove all your personal data from our active systems within 30 days, except for the limited information we are required to retain to satisfy legal, tax or regulatory obligations. Once the retention period ends, we will securely and permanently delete or anonymize your personal information in a way that can no longer be linked back to you as an identifiable individual.
8. Children’s Privacy
Our e-commerce website www.khmimporting.com is intended for use by adults aged 18 years or older. We do not knowingly collect personal information from children under the age of 18, and no part of our platform is designed to attract users under this age group. If you are a parent or guardian and you become aware that your child has provided us with their personal information without your consent, please contact us immediately at grits@khmimporting.com. We will promptly take steps to delete that information from all our systems and records. If we discover that we have inadvertently collected personal data from a child under 18, we will immediately erase that data securely as soon as we become aware of the situation.
9. Third-Party Links
Our website may contain hyperlinks to external third-party websites that are not operated or controlled by KHM IMPORTING PTY LTD, including links to social media platforms, partner retailer sites, and product review platforms. We do not exercise any control over the privacy policies, terms of service or data handling practices of these external websites. Once you click on a third-party link and leave our platform, the privacy policy of that external site will apply to your activities on that site. We strongly recommend that you review the privacy policy of every website you visit before providing any of your personal information to them. KHM IMPORTING PTY LTD takes no responsibility and assumes no liability for the content, privacy practices or conduct of any third-party websites that we do not own or operate.
10. Changes to This Privacy Policy
We may occasionally update and revise this privacy policy from time to time to reflect changes in our business operations, new legal requirements, or updates to our service offerings. When we make material changes to this policy, we will update the “Effective Date” at the top of this document, and we will post the revised version on a prominent location on our homepage at www.khmimporting.com. For significant changes that substantially alter how we process your personal information, we may also notify you directly via email using the contact information you have provided to us. Your continued use of our website after the effective date of the revised privacy policy will constitute your acknowledgement and acceptance of the updated terms. We encourage you to review this privacy policy periodically on a regular basis to stay informed about how we are protecting your personal information.
11. Contact Us
If you have any questions, comments, concerns, or complaints about this privacy policy, or about how we handle and protect your personal information, please do not hesitate to get in touch with our team. You can email us at grits@khmimporting.com, give us a call on +61 3 9275 7777, or send physical mail to our registered address at VIC 3029, Australia. We will respond to your inquiry as soon as possible, within no more than 30 days in accordance with Australian privacy regulatory requirements. If you are not satisfied with our response to your privacy concern, you also have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC), the national regulatory body responsible for overseeing privacy compliance in Australia.