Privacy policy

PRIVACY POLICY

Last updated: 2 November 2026

Skinceuticals Pty Ltd (ABN 45 655 299 353; ACN 655 299 353), trading as DY•5 (“DY•5”, “we”, “us” or “our”), respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit dy5.com.au, make a purchase, contact us or otherwise interact with DY•5.

If you have a privacy question, access or correction request, or privacy complaint, contact us at info@dy5.com.au.

1. Personal information we collect

The personal information we collect may include:

• your name, email address, phone number, billing address and delivery address;
• order, payment, refund and transaction information;
• the name and contact details of a recipient where you send an order to another person;
• messages, enquiries, reviews, photos and other information you provide to us;
• product or customer-service information, including information you provide about an adverse reaction or product concern;
• marketing preferences and consent records;
• technical and usage information, such as device, browser, IP address, pages viewed, links clicked, cart activity and cookie or similar-technology information.

We collect personal information directly from you when you place an order, create an account, subscribe to marketing, submit a review, contact us or interact with the Website. We may also collect information automatically through cookies and similar technologies when you use the Website.

2. Why we collect and use personal information

We may use personal information to:

• process, deliver and support orders;
• process payments and help prevent fraud;
• communicate with you about orders, returns, product questions and customer service;
• manage accounts, reviews, promotions and website functionality;
• send marketing emails or SMS where you have consented or where otherwise permitted by law;
• analyse and improve our Website, products, customer experience and marketing;
• meet legal, regulatory, tax, product-safety and record-keeping obligations; and
• protect the security, integrity and lawful operation of DY•5 and our Website.

3. Service providers and Apps

We use Shopify to operate our online store. Shopify and its services may process customer and order information to support checkout, payments, store operations and customer communications.

We also use service providers and Shopify Apps that may process information as needed to provide their services, including:

• Klaviyo Email Marketing & SMS, for email and SMS marketing, subscriber management and automated communications;
• Seguno Email, for email marketing and related communications;
• Ali Reviews, to collect, display or manage customer reviews where applicable;
• Shopify Messaging, for customer communications where applicable;
• Shopify Search & Discovery, Bundles, Collabs and Flow, for store functionality, merchandising, collaborations and workflow automation; and
• Remix: Product Badges, for displaying product-related badges.

Payment information is handled by the payment method or payment provider selected at checkout. We do not intentionally store complete payment-card details on our own systems.

We may disclose information to delivery providers, payment providers, IT and hosting providers, professional advisers, regulators, law-enforcement bodies or other parties where reasonably necessary to operate our business, comply with law, protect legal rights or respond to a valid legal request.

We do not disclose personal information to third parties for their independent marketing purposes without your permission.

4. Cookies and similar technologies

We and our service providers may use cookies, pixels, tags and similar technologies to operate the Website, remember preferences, keep the cart and checkout functioning, understand Website usage and support marketing communications.

Some cookies are necessary for the Website to function. You may be able to manage cookies through your browser settings. Disabling cookies may affect the availability or functionality of some parts of the Website.

5. Marketing choices

Where required, we will obtain consent before sending marketing emails or SMS. You can unsubscribe from marketing emails by using the unsubscribe link in an email. You can opt out of marketing SMS by following the opt-out instructions in the message or by contacting us at info@dy5.com.au.

Opting out of marketing does not stop essential communications about your order, account, returns or other transactions.

6. Overseas disclosures

Shopify and some of our service providers or Apps may store or process personal information outside Australia, including in the United States and other countries where they or their service providers operate.

Where we disclose personal information overseas, we take reasonable steps to ensure that the recipient handles the information appropriately and in accordance with applicable privacy requirements.

7. Access and correction

You may request access to personal information we hold about you, or ask us to correct information that is inaccurate, incomplete or out of date. Please email info@dy5.com.au with your request.

We may need to verify your identity before responding. We will respond within a reasonable time and may decline access or correction only where permitted or required by law.

8. Data security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. However, no online system is completely secure and you should take care when using the internet.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including order fulfilment, customer service, tax, legal, accounting, dispute-resolution and product-safety obligations.

9. Privacy complaints

If you believe we have mishandled your personal information, please email info@dy5.com.au with details of your concern.

We will investigate and respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on the Website with a revised “Last updated” date.