Data Protection

Security First: Protecting Your Privacy Through Advanced Measures

My Store adopts a security-first approach to online retail, treating your privacy as an integral part of our defensive cybersecurity strategy.

Advanced Security for Age-Sensitive Data

The age data we collect is treated as highly sensitive and is encrypted both in transit and at rest. This stringent protection reflects the legal and ethical necessity of preventing access to alcohol by minors. This age data is completely siloed from marketing data, ensuring it is only used for legally mandated compliance checks.

Cookie Consent and Granular Control

We operate a strict cookie consent banner that requires active user approval before deploying non-essential cookies. We offer granular control, allowing you to consent specifically to analytics, personalization, or marketing cookies. This commitment to active consent gives you full authority over how your browsing data is used while you explore our range of high-quality Australian beverages.

Shipping Data and Fraud Prevention

Your delivery address and associated purchase history are actively monitored by our systems for fraud prevention. Discrepancies between billing and shipping addresses, especially for large orders of premium spirits, are flagged for manual verification. This process is a necessary security layer that protects both My Store and you from financial fraud, maintaining the integrity of our transaction process.

Employee Access and Training

Access to personal customer information is granted only to employees of My Store who require it to perform their official duties (e.g., customer service, fulfilment). All relevant staff undergo mandatory, regular privacy and data security training, emphasizing the importance of confidentiality and adherence to APPs.

Data Incident Response Plan

We maintain a comprehensive Data Incident Response Plan. In the unlikely event of a data breach, we are prepared to act swiftly to contain the breach, notify affected individuals, and report the incident to the relevant Australian authorities, all in accordance with mandatory notification requirements. Our preparedness is a commitment to your data security.