Privacy policy

Last updated: June 20, 2026

EBMT PTY LTD (ABN 49 690 949 912), trading as Ensoo Matcha ("we", "us", or "our"), operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). The Services are powered by Shopify, which enables us to provide them to you. We are committed to protecting your personal information and handling it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. Personal information does not include information collected anonymously or that has been de-identified so that it cannot reasonably identify you. Depending on how you interact with the Services, we may collect or process the following categories of personal information, including inferences drawn from it:

  • Contact details including your name, billing address, shipping address, phone number, and email address.
  • Financial information including payment card details, transaction details, form of payment, and payment confirmation. Payment card details are processed securely by our payment providers and are not stored by us.
  • Account information including your username, password, preferences and settings, where you create an account.
  • Transaction information including the items you view, add to your cart or wishlist, or purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including the information you provide when you contact us, for example a customer support enquiry or a product review.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information about how and when you interact with or navigate the Services.

How We Collect Personal Information

We may collect personal information from the following sources:

  • Directly from you when you create an account, place an order, subscribe to our emails, communicate with us, or otherwise provide your information;
  • Automatically through the Services from your device when you visit or use our website, including through cookies and similar technologies;
  • From our service providers when they collect or process your personal information on our behalf, such as our hosting, payment, analytics, and shipping providers.

How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

  • Providing and improving the Services. To process your payments, fulfil and ship your orders, manage returns and exchanges, remember your preferences, create and manage your account, enable you to post reviews, provide a customised shopping experience, and otherwise operate and improve the Services.
  • Marketing. Where you have subscribed or otherwise consented, to send you marketing and promotional communications by email, and from time to time by SMS or post, such as seasonal releases, brewing guides, and stories from Uji. You can opt out of these at any time using the unsubscribe link in our emails. We may also, in future, show you online advertisements for our products on other websites based on your activity with the Services.
  • Security and fraud prevention. To authenticate your account, provide a secure shopping experience, and detect, investigate, and prevent fraudulent, unlawful, or malicious activity. If you create an account, you are responsible for keeping your credentials safe.
  • Communicating with you. To provide customer support, respond to your enquiries, and maintain our relationship with you.
  • Legal reasons. To comply with applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

We may disclose your personal information to third parties for the legitimate purposes described in this Privacy Policy, including:

  • With Shopify and other vendors and service providers who perform functions on our behalf, such as website hosting, payment processing, analytics, customer support, email marketing, fulfilment, and shipping.
  • When you direct or consent to us disclosing your information, such as to ship your order, or through your use of social media features or login integrations.
  • To comply with applicable legal obligations, respond to lawful requests from authorities, enforce our terms or policies, or protect the rights, property, or safety of EBMT PTY LTD, our customers, or others.
  • In connection with a business transaction, such as a sale or restructure of the business, where your information may be transferred as part of that transaction subject to this Privacy Policy.

Analytics and Tracking Technologies

We use third-party analytics services to understand how visitors use the Services so that we can improve them. These services collect information through cookies and similar tracking technologies and may share it with the providers named below. Each provider handles your information in accordance with its own privacy policy.

  • Microsoft Clarity. We partner with Microsoft Clarity to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay. Website usage data, such as mouse movements, clicks, and scrolling, is captured using first and third-party cookies and other tracking technologies, and is used to optimise the site, improve our products and services, and for fraud and security purposes. This information is shared with Microsoft. To learn more about how Microsoft collects and uses your data, please see the Microsoft Privacy Statement.
  • Google Analytics. We use Google Analytics to collect information about your interaction with the Services, such as the pages you visit, your approximate location, your device and browser, and how you navigate the site. Google Analytics uses cookies and similar technologies to collect this information, which Google processes on our behalf and may combine with data from other sites and services. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. To learn more about how Google collects and uses your data, please see Google's Privacy Policy.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located outside Australia, in order to provide and improve the Services. To help operate and improve our business, we also use certain Shopify features that incorporate data from your interactions with our store. In these circumstances, Shopify is responsible for processing your personal information, including responding to your requests in relation to that processing. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy.

Overseas Disclosure

Although we deliver only within Australia, some of the service providers we rely on store and process personal information outside Australia. In particular, your personal information may be disclosed to, and stored by, providers located in the United States (including Microsoft and Google) and Canada and the United States (Shopify). Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including by relying on the contractual and privacy commitments of these providers.

Third Party Websites and Links

The Services may contain links to websites or platforms operated by third parties. If you follow links to sites we do not control, you should review their own privacy policies and terms. We are not responsible for the privacy or security of those sites, or the accuracy or reliability of information found on them. Our inclusion of a link does not imply any endorsement of that site or its operator.

Children's Privacy

The Services are intended for adults and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us using the details below and we will take reasonable steps to delete it.

Security and Data Breaches

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We recommend you do not send sensitive or confidential information through unsecured channels. If a data breach occurs that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), which may include notifying affected individuals and the Office of the Australian Information Commissioner.

Retention of Your Information

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including to provide the Services to you, maintain your account, comply with our legal, accounting, and tax obligations, resolve disputes, and enforce our agreements. When we no longer need your personal information, we will take reasonable steps to delete or de-identify it.

Your Rights and Choices

Under the Australian Privacy Principles, you have the following rights in relation to the personal information we hold about you:

  • Access. You may request access to the personal information we hold about you.
  • Correction. You may request that we correct personal information that is inaccurate, out of date, incomplete, or misleading.
  • Marketing preferences. You may opt out of our marketing communications at any time using the unsubscribe link in our emails or by contacting us. If you opt out, we may still send you non-promotional messages about your account or orders.

You may also ask us to delete personal information we hold about you, and we will consider such requests, subject to our legal, accounting, and record-keeping obligations. To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding, and we will respond within a reasonable time as required by law. We will not charge you for making a request unless permitted by law, and we will not discriminate against you for exercising your rights.

Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first using the details below so that we can try to resolve it. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date above. Where required by law, we will provide additional notice of material changes.

Contact

If you have any questions about this Privacy Policy or our handling of your personal information, or would like to exercise any of your rights, please contact us at contact@ensoomatcha.com.au.