Privacy policy
Privacy Policy
This Privacy Policy explains, in plain language, what personal information THE MINERALS LAB collects when you shop for Cutting Drops at themineralslab.com, why we collect it, who we share it with, and the rights available to you under the privacy laws of Australia, the United States, the United Kingdom, Canada and New Zealand.
Who We Are
The Minerals Lab is a registered trading name of URBAN CLOTHING PTY LTD (ABN 78 671 782 111), a company registered in Queensland, Australia. We are the data controller (and, for United States purposes, the "business") responsible for the personal information described in this Privacy Policy. We sell one product — Cutting Drops, a liposomal botanical formula — directly to consumers through our Shopify-hosted storefront at themineralslab.com.
Scope Of This Policy
This Privacy Policy applies to personal information we collect through themineralslab.com, our checkout, our customer support channels (email, phone and live chat), and any order you place with us for delivery to Australia, the United States, the United Kingdom, Canada or New Zealand — the only five countries we currently ship to. It does not apply to third-party websites you may reach through links on our site, or to information you provide directly to a courier, payment provider or social media platform under that party's own privacy terms.
Because we serve customers in five different jurisdictions, this policy is organised so that everyone can find the section that applies to them: general practices first, followed by a dedicated, plain-language section explaining your specific rights under the law of your own country.
Personal Information We Collect
We only collect what we genuinely need to sell you Cutting Drops, get it to your address, support you afterwards, and (where you allow it) tell you about the product. We group it into the following categories.
Identity & contact data
Full name, billing address, shipping address, email address and telephone number, collected at checkout or when you contact us.
Order & transaction data
What you ordered, order value, order date, shipping method, tracking numbers, returns, refunds and any correspondence about your order.
Payment data
Payment is processed by Shopify's PCI-DSS-compliant checkout infrastructure and, where offered, PayPal. We do not receive, view or store your full card number, card expiry date or card security code — our systems only receive a payment confirmation and the last four digits of your card for order-matching purposes.
Account data
If you create a customer account, we hold your login email, order history and any saved addresses linked to that account.
Marketing preference data
Whether you have opted in to receive marketing emails or SMS from us, and your engagement with those messages (for example, whether an email was opened), if you have subscribed.
Browsing & device data
IP address, browser type, device type, pages viewed, referring website, and approximate location derived from your IP address, collected automatically through cookies and similar technologies described in Section 06.
What we deliberately do not collect
Cutting Drops is a botanical wellness product, not a medicine, and our checkout does not run a health questionnaire or medical intake quiz. We do not knowingly collect health records, medical history, genetic data, biometric data, or any special category of personal information about you. If you choose to tell us about a health condition in an email — for example, to ask whether an ingredient is suitable for you — we use that information only to answer your question and to keep a record of the advice we gave, and we do not use it for advertising or profiling.
How We Collect Your Information
- Directly from you — when you place an order, create an account, sign up to marketing, or email, call or chat with us.
- Automatically, as you browse — through cookies, pixels and similar technologies on our storefront, described in Section 06.
- From our service providers — for example, Shopify sends us your order details once a payment is confirmed, and our payment processor confirms whether a transaction was successful.
- From couriers — delivery status and tracking events for your parcel are passed back to us by the courier or postal carrier handling your shipment.
Why We Use Your Information, And Our Legal Basis
For customers in the United Kingdom and anyone whose data protection law requires us to state a legal basis, here is the basis we rely on for each purpose. For customers elsewhere, the same purposes apply — we simply are not required to label a formal legal basis under Australian, US state, Canadian or New Zealand law.
We do not use your personal information for any purpose that is unrelated to, or incompatible with, the purposes listed above, without telling you and, where required, obtaining your consent first.
Cookies And Tracking Technologies
Like almost every Shopify store, themineralslab.com uses cookies and similar technologies. We group them as follows:
Keep your cart contents, remember your currency and region, and let you complete checkout securely. These cannot be switched off without breaking basic site function, and are set by Shopify.
Help us understand which pages are visited and how the store is performing, using tools such as Shopify Analytics and Google Analytics, where enabled.
Where active on this store, advertising pixels such as the Meta (Facebook/Instagram) Pixel, Google Ads tag, and TikTok Pixel may be used to measure and personalise the ads you see for Cutting Drops elsewhere on the internet.
You can block or delete cookies at any time through your browser settings, and where required by law (including under the UK's Privacy and Electronic Communications Regulations) we will ask for your consent to non-essential cookies before they are set. Turning off cookies may mean some checkout or personalisation features do not work as smoothly. If you would like the current, specific list of advertising or analytics technologies active on this store at the time of your visit, email us at help.themineralslab@gmail.com and we will confirm this for you.
Who We Share Your Information With
We do not sell your personal information for money, and we never have. We share limited personal information with the following categories of trusted service providers, only so they can perform a specific function for us, and only to the extent needed for that function.
E-commerce platform
Shopify Inc., which hosts our store, processes orders, and stores order and customer records on our behalf under its own data processing terms.
Payment processors
Shopify Payments and, where selected at checkout, PayPal, to authorise and process your payment securely.
Couriers & postal carriers
The courier or postal service appointed for your destination country, given only your name, delivery address and phone number needed to deliver your parcel.
Email & SMS marketing tools
A marketing platform such as Klaviyo, used only to send messages to customers who have opted in, and to manage unsubscribe requests.
Advertising & analytics partners
Where active on this store: Meta, Google and TikTok, which receive limited browsing and device data through pixels described in Section 06, used to measure and, if you have not opted out, personalise advertising.
Legal & regulatory disclosures
Where we are required to by law, court order, or a lawful request from a government or regulatory authority, or to establish, exercise or defend a legal claim.
Under United States privacy law, sharing personal information with an advertising partner for cross-context behavioural advertising can be treated as "sharing" even though no money changes hands. Section 15 explains how US customers can opt out of this.
International Data Transfers
We are based in Queensland, Australia, but we ship to customers in the United States, the United Kingdom, Canada and New Zealand as well as Australia. This means your personal information will usually be stored and processed outside your own country — principally on Shopify's cloud infrastructure, which may store and process data in Australia, the United States, Canada, Ireland and other countries where Shopify or its sub-processors operate data centres.
Where we transfer personal information across borders, we take the following steps:
- Australian customers (APP 8): before we disclose your information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including by relying on our service providers' contractual data protection commitments.
- UK customers (UK GDPR): where your data leaves the UK, we rely on the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or an equivalent adequacy or safeguard mechanism offered by our service provider, to protect your data at the same standard.
- Canadian customers (PIPEDA): we use contractual protections with our service providers so that your personal information receives a comparable level of protection while being processed outside Canada.
- New Zealand customers (Privacy Act 2020, IPP 12): we only disclose your information to an overseas recipient where we reasonably believe it will be subject to protections comparable to the New Zealand Information Privacy Principles, including through our service providers' own compliance with equivalent data protection standards.
How Long We Keep Your Information
When personal information is no longer needed for these purposes and we are not legally required to keep it, we securely delete or de-identify it.
Data Security
Checkout and payment are handled entirely within Shopify's encrypted, PCI-DSS-compliant infrastructure, so your card details are never transmitted to or stored on our own systems. We limit access to personal information to the small team members who need it to run The Minerals Lab, and we require our service providers to protect your data under written data processing terms.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the relevant regulator (such as the OAIC in Australia) in line with our legal obligations.
Marketing Communications And Anti-Spam Compliance
We only send marketing emails or SMS to people who have given us clear, opt-in consent — for example, by ticking a marketing checkbox at checkout or signing up on our website. We never add you to a marketing list simply because you placed an order.
- Australia: our marketing emails comply with the Spam Act 2003, including a functioning unsubscribe link in every message.
- United States: our marketing emails comply with the CAN-SPAM Act, including accurate sender information, no deceptive subject lines, and an easy opt-out mechanism.
- United Kingdom: our marketing communications comply with the Privacy and Electronic Communications Regulations (PECR), meaning we only email or text you with your prior consent (or, in narrow circumstances, where you are an existing customer and have not opted out).
- Canada: in line with Canada's Anti-Spam Legislation (CASL), we obtain your express consent before sending commercial electronic messages, we identify ourselves clearly in every message, and every message includes a working unsubscribe mechanism that we action within 10 business days.
- New Zealand: our marketing emails comply with the Unsolicited Electronic Messages Act 2007, including sender identification and a functional unsubscribe option.
You can withdraw your consent at any time by clicking "unsubscribe" in any marketing message, or by emailing help.themineralslab@gmail.com. We will action your request within a reasonable time and, in any event, within the timeframe required by the law that applies to you.
Children's Privacy
Cutting Drops and themineralslab.com are intended for adults only and are not directed at children. You must be at least 18 years old, or the age of majority in your jurisdiction, to purchase from us. We do not knowingly collect personal information from anyone under 18, including under the US Children's Online Privacy Protection Act (COPPA). If we learn that we have inadvertently collected personal information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at help.themineralslab@gmail.com.
Automated Decision-Making And Profiling
We do not use your personal information to make any decision that produces a legal or similarly significant effect on you (for example, refusing an order or setting a price) solely through automated means, without human involvement. Standard fraud-screening checks run by our payment processor may flag a transaction for manual review, but a person makes the final call before an order is refused.
Your Privacy Rights, By Country
Open the section for the country you are shopping from to see the rights that apply to you, and the regulator you can complain to if you're not satisfied with our response.
AustraliaURBAN CLOTHING PTY LTD handles your personal information under the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).
- Access the personal information we hold about you and ask us to correct it if it's wrong.
- Ask us to explain how your personal information is being used or disclosed.
- Complain about a suspected breach of the APPs, first to us and, if unresolved, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
To exercise any of these rights, email help.themineralslab@gmail.com. We will respond within 30 days.
Depending on your state of residence, you may have rights under state privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), and similar laws in other states. Where these laws apply to you, you generally have the right to:
- Know what personal information we have collected about you and request a copy.
- Request deletion of your personal information, subject to legal exceptions (for example, order records we must keep for tax purposes).
- Request correction of inaccurate personal information.
- Opt out of the "sale" or "sharing" of your personal information for cross-context behavioural advertising. We do not sell personal information for money; if advertising pixels described in Section 06 are active on this store, you can opt out of that sharing by emailing us or by declining non-essential cookies when prompted.
- Not be discriminated against for exercising any of these rights — we will never charge you a different price or refuse you service because you made a privacy request.
To exercise any of these rights, email help.themineralslab@gmail.com with your state of residence and the right you wish to exercise. We will verify your identity using the order or account details you provide before responding, and will respond within the time limit set by your state's law (typically 45 days).
California residents may lodge a complaint with the California Privacy Protection Agency (CPPA) at cppa.ca.gov. Residents of other states may contact their state Attorney General's office.
Under the UK GDPR and the Data Protection Act 2018, you have the right to:
- Request access to a copy of the personal information we hold about you.
- Request that we correct inaccurate or incomplete personal information.
- Request erasure of your personal information, where we no longer have a lawful reason to keep it.
- Object to, or request that we restrict, our processing of your personal information in certain circumstances, including for direct marketing.
- Request that we transfer your personal information to you or another organisation in a portable format (data portability).
To exercise any of these rights, email help.themineralslab@gmail.com. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), and, if you are in Québec, the Act Respecting the Protection of Personal Information in the Private Sector (Law 25), you have the right to:
- Access the personal information we hold about you and be told how it has been used or disclosed.
- Challenge the accuracy and completeness of your personal information and have it corrected.
- Withdraw your consent to our collection, use or disclosure of your personal information at any time, subject to legal or contractual restrictions.
- Ask us for information about our use of automated decision systems, if applicable, and request deletion of information we no longer need.
To exercise any of these rights, email help.themineralslab@gmail.com.
If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca, or, if you are a Québec resident, to the Commission d'accès à l'information du Québec.
Under the Privacy Act 2020 and its 13 Information Privacy Principles (IPPs), you have the right to:
- Ask to see the personal information we hold about you (IPP 6).
- Ask us to correct personal information you believe is wrong (IPP 7).
- Be told, if you ask, how and why we collected your personal information and who we disclosed it to.
To exercise any of these rights, email help.themineralslab@gmail.com. We will respond as soon as reasonably practicable and, in any event, within 20 working days.
If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Third-Party Links
Our site may link to third-party websites, including social media platforms and payment providers such as PayPal. Once you leave themineralslab.com, this Privacy Policy no longer applies, and the third party's own privacy policy governs how they handle your information. We encourage you to review those policies before providing any personal information.
Changes To This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or the law. When we make a material change, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of themineralslab.com after a change takes effect means you accept the updated policy.
How To Contact Us Or Lodge A Complaint
If you have any question about this Privacy Policy, want to exercise any of the rights described above, or wish to raise a complaint, please contact us first — we aim to resolve most requests directly and quickly.
URBAN CLOTHING PTY LTD (ABN 78 671 782 111), trading as The Minerals Lab · 66 Windemere Road, Alexandra Hills, Queensland 4161, Australia · Monday–Friday, 9:00 AM–5:00 PM AEST · Page last updated and effective: 6 September 2026