Privacy policy

 

Pass Around the Smile Website Privacy Policy Last updated: 20 October 2026

We care about your privacy as much as your peace of mind. This policy explains what personal information we collect through passaroundthesmile.com, why, who helps us look after it, and the choices you have.

1. Who we are

passaroundthesmile.com (the website) is run by Pass Around the Smile Enterprises Pty Ltd (ACN 644 249 954) as trustee for the Massey Family Trust (ABN 98 249 525 387), of PO Box 218, Nobby Beach QLD 4218, Australia (we, us, our). Our privacy officer is Cleo Massey. Privacy questions and requests: hello@passaroundthesmile.com.

This policy covers the website, our online shop, our 1:1 readings, our online courses, our email newsletter and the forms on our website. The Pass Around the Smile app has its own privacy policy at app.passaroundthesmile.com/privacy.

We handle personal information in line with the Australian Privacy Principles. Where they apply to you, we also follow the UK GDPR and EU GDPR, New Zealand's Privacy Act 2020 and Canada's privacy laws.

2. Information we collect

Information

Why we collect it

Name, email, phone number, billing and delivery address

To process, deliver and support your order, and send order and shipping updates

Order history and customer account details (if you create an account)

To show your orders, handle returns and answer questions

Payment details

Handled by our payment providers. We never see or store your full card number

Reading bookings: your chosen time, and anything you share about yourself or your question in your order notes, booking form or session

To prepare for and give your reading, and send your video call link or voice note

Course purchase details (name and email)

To deliver your course

Your marketing email choice and when you made it

To send newsletters only to people who asked, and keep a record of that consent

Messages and form submissions (contact form, wholesale enquiries, podcast guest applications, Ask Cleo questions)

To reply to you and consider your application or question

Cookies and similar technology: pages viewed, products added to cart, device, browser, approximate location from your IP address

To run the shop, remember your cart, understand what's popular and, with your consent where needed, show you our ads

Sensitive information. Readings are personal, and you might choose to tell us about your health, relationships, wellbeing or other sensitive matters. You never have to. If you do, you consent to us using it only to give you your reading. We don't use it for marketing, we don't share it with anyone outside our small team, and we never mention it publicly.

How we collect it. We collect information directly from you, automatically when you use the website, and from our service providers (for example, Shopify when you check out, or our booking app when you book a reading). You can browse the website without giving us your name. We need your contact and delivery details to fulfil an order.

What we don't do. We never sell or rent your personal information. We don't record readings. We don't use what you share in a reading or in a form to build an advertising profile of you.

3. How we use your information

We use your information to sell and deliver products, give readings and courses, provide customer support, send the emails you choose, keep the website secure, improve what we offer, advertise our products (see section 5) and meet our legal obligations. We don't make decisions about you by automated means that significantly affect you.

If you are in the UK or EU, our legal bases are: performing our contract with you (orders, readings, courses and support); our legitimate interests in running, securing and improving our business, and in handling complaints or legal claims; your consent (marketing emails, non-essential cookies, and any sensitive information you share in a reading); and legal obligations (tax and business records). You can object at any time to our use of your information based on legitimate interests.

4. Marketing emails

We only send newsletters and offers if you sign up or tick the marketing box at checkout. Buying from us is not agreeing to marketing. If you opt in, we add your email address to our list in Klaviyo, our email provider. Every email has an unsubscribe link, and we act on it within 5 working days. We keep unsubscribed email addresses on a do-not-send list so we can honour your choice.

5. Cookies, analytics and advertising

The website uses cookies, pixels and similar technology. Some are essential, such as those that keep your cart and run checkout. We also use them for:

  • Analytics: Shopify analytics, Google Analytics and Microsoft Clarity help us see how people use the website. Clarity records how visitors scroll, click and move around our pages (session recordings and heatmaps) so we can improve the site. It is set to mask what you type into form fields.
  • Advertising: pixels from Meta (Facebook and Instagram), Google and YouTube, Pinterest and TikTok measure our ads and help show them to people likely to be interested. Some of these also receive visit and purchase information directly from Shopify's servers, not only from your browser.
  • Email: Klaviyo connects your visits with the emails you've signed up for, so we can send relevant emails, such as a reminder about items left in your cart.
  • Reviews and video: Judge.me shows and collects product reviews, and Tolstoy shows our shoppable videos and counts views.
  • Creator partnerships: Shopify Collabs tracks purchases made through our creators' affiliate links so we can pay them commission.

This means these providers may receive information about your visit, such as pages viewed, products added to cart, purchases, your device and your IP address, and use it under their own privacy policies. You can choose which cookies to allow through our cookie banner where it's shown, change your ad settings on each platform, or block or delete cookies in your browser. Blocking essential cookies may stop the shop working properly.

6. Who helps us run the website

We use trusted service providers who handle your information on our behalf, under terms that limit how they can use it and require them to protect it.

Provider

What they do

Where data is held

Shopify (including Shopify Collabs)

Runs our website, shop, checkout, customer accounts, digital downloads and creator affiliate links

Canada, the United States and other countries

Shopify Payments and Shop Pay

Process card payments and Shop Pay checkout

Australia, the United States and other countries

PayPal

Processes PayPal payments

Australia, the United States and other countries

Afterpay

Processes buy now, pay later payments and checks your eligibility

Australia and the United States

Hoppy Appointments

Takes reading bookings and session times in our Shopify store

Overseas, as set out in its own privacy policy

Australia Post

Delivers your parcels

Australia, and partner carriers for overseas orders

Klaviyo

Newsletters, sign-up forms and email personalisation, only if you opt in

United States

Judge.me

Collects and shows product reviews

Overseas, as set out in its own privacy policy

Tolstoy

Shows our shoppable videos and measures views

Overseas, as set out in its own privacy policy

Microsoft Clarity

Website analytics, session recordings and heatmaps

United States and other Microsoft locations

Google (Analytics, Ads and YouTube)

Website analytics and advertising

United States and other Google locations

Google Workspace (including Google Meet and Google Drive)

Our email, reading video calls and free download files

United States and other Google locations

Meta

Measures and shows our Facebook and Instagram ads

United States and other countries

Pinterest

Measures and shows our Pinterest ads

United States and other countries

TikTok

Measures and shows our TikTok ads

United States, Singapore and other countries

Xero

Our accounting and tax records

Australia, the United States and other countries

Asana and Slack

Internal task management and team communication

United States

We may also disclose information to our professional advisers (such as our accountant), if we sell or restructure the business (under confidentiality), or where the law requires it.

7. Information stored overseas

Some providers store or process data in the United States, Canada and other countries where they have facilities. We choose providers that protect personal information to a high standard and take reasonable steps to make sure they handle it in line with the Australian Privacy Principles. For UK and EU customers, transfers are covered by standard contractual clauses, the UK International Data Transfer Addendum, adequacy decisions (Canada) or, where the provider is certified, the EU-US Data Privacy Framework and its UK Extension. You can ask us for a copy of the safeguards we use.

8. Children

Many of our products are made for families, but our shop, courses and readings are for adults. If you are under 18, please ask a parent or guardian to buy for you. Readings, podcast guest applications and Ask Cleo submissions are for people 18 and over. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, please email us and we will delete it.

9. How long we keep your information

Information

How long

Orders, invoices and business records (including reading bookings and anything typed into order notes)

5 years, as required by Australian tax law

Customer accounts

Until you ask us to delete your account, unless needed for the records above

Reading notes and what you share for a voice note

Deleted within 2 weeks of your reading or voice note

Voice note recordings

Deleted within 2 months of sending

Contact form and wholesale emails

2 years

Podcast guest applications and Ask Cleo submissions not used

12 months

Product reviews

While shown on our website, or until you ask us to remove them

Marketing consent records

While you receive our emails, then 2 years after you unsubscribe

Do-not-send list

For as long as we send marketing emails

Cookie and analytics data

As set by each provider, generally no more than 2 years

10. Keeping your information safe

We use encrypted connections on our website, two-step login on our business accounts, access limited to the people who need it, and providers with strong security programs. Payment details are encrypted and handled by our payment providers. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and any regulator we need to.

11. Your rights

You can ask to access or correct your personal information, or to delete it (unless we must keep it, for example for tax records). Email hello@passaroundthesmile.com and we'll reply within 20 working days (and always within one month), free of charge. We may need to confirm your identity first. If you are in the UK or EU, you can also object to or restrict our use of your information, receive a copy in a portable format, and withdraw consent at any time. If you are in the US, we don't sell your personal information for money. Our advertising pixels may count as sharing for targeted advertising under some US state laws. You can opt out through our cookie banner, your ad settings on each platform, or by emailing us.

12. Complaints

Please email hello@passaroundthesmile.com first. We will acknowledge your complaint promptly (and always within 30 days) and aim to resolve it within 30 days. If you're not satisfied, you may be able to contact the privacy regulator where you live: Australia: the Office of the Australian Information Commissioner, oaic.gov.au; UK: the Information Commissioner's Office, ico.org.uk; EU: your local data protection authority; New Zealand: the Office of the Privacy Commissioner, privacy.org.nz; Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca.

13. Changes to this policy

We may update this policy when our business or the law changes. We'll post the new version here with a new date, and if a change is important, we'll tell you by email or on the website before it takes effect.

14. Contact us

Pass Around the Smile Enterprises Pty Ltd, PO Box 218, Nobby Beach QLD 4218, Australia. Email: hello@passaroundthesmile.com.