Privacy policy

1. Who we are

Firefly Cove Pty Ltd (ABN 14 611 955 223), trading as Nordic Spa, runs this store. In this policy, "we", "us" and "our" mean Firefly Cove Pty Ltd.

You can reach us here:

  • Email: hello@nordicspa.com.au
  • Phone: 03 6145 0600
  • Post: 34 Levanswell Road, Moorabbin VIC 3189, Australia

2. What we collect

Depending on how you deal with us, we may collect:

  • Identity and contact details, such as your name, delivery and billing address, email address and phone number.
  • Order and transaction details, such as the products you buy, order value, and your order history.
  • Account details, if you create an account. Our ecommerce platform holds your login credentials. We do not hold or see your password.
  • Freight and delivery details, such as your delivery address, site access notes, and any special instructions needed to deliver large items.
  • Communications, such as your enquiries, messages, product reviews, and your marketing preferences.
  • Device and usage data, such as your IP address, browser type, the pages you view, and how you move through our site.
  • Cookie and tracking identifiers, as described in section 4.

Payment card details are handled by our payment provider under the PCI-DSS security standard. We do not store your full card number.

3. Why we collect it and who we share it with

We use your personal information to process your order, arrange freight and deliver your products, take payment and manage refunds, provide customer service and handle warranty claims, manage your account, send you marketing messages as set out in section 5, understand how our site is used, meet our accounting and tax obligations, and help prevent fraud.

We share personal information by category with our ecommerce platform provider, our payment provider, our freight and delivery partners, our email and messaging provider, third-party analytics and advertising providers, and our accounting provider. Some of these providers store or process information outside Australia, including in the United States.

We may also disclose information where the law requires or allows it. We do not sell your personal information.

4. Cookies, analytics and advertising

Cookies are small files stored on your device. They help our website work and help us understand how it is used.

We use two kinds of cookies:

  • Essential cookies, which are needed for the site to function, for example to keep items in your cart and to keep you signed in.
  • Analytics and advertising cookies, which measure how our site performs and how our advertising performs.

Our analytics and advertising providers may use cookies and pixels to measure how our site performs and to show you our ads on other websites and social media platforms. This is sometimes called retargeting, and it means you may see our products again after visiting our site.

Where you reach our site from one of our ads, we record an advertising identifier.

When you give us your details, for example by sending us an enquiry or paying one of our invoices, we may share your email address, name, phone number, suburb and postcode with our advertising providers, including to measure how our advertising performs. The email address, name and phone number are scrambled. The suburb and postcode are not. With these details we send the advertising identifier, if we recorded one, and data related to your visit, enquiry or invoice. Scrambling turns a detail into a code, and we treat all of these details as personal information.

You can control analytics and advertising cookies at any time by adjusting the cookie and privacy controls in your browser and the ad-preference tools offered by the advertising providers. Our website will still work.

5. Marketing and your choices

We may send marketing emails and SMS to people who have asked to receive them. When you share your email address with us we may add you to our mailing list and you may receive occasional news and offers. We do not add you to marketing lists without telling you first.

Every marketing message identifies us and includes an easy way to unsubscribe, and every unsubscribe option keeps working for at least 30 days after the message is sent. When you unsubscribe we act on your request within 5 business days.

You can change your marketing preferences at any time by using the unsubscribe link, replying to stop an SMS, or contacting us at hello@nordicspa.com.au.

Any phone calls we make are about your order or enquiry, or because you asked us to call. We do not make unsolicited marketing calls.

6. Security

We take reasonable technical and organisational steps to protect your personal information from misuse, loss, and unauthorised access, use or disclosure. No online service can promise perfect security.

7. Contacting us about your information

If you have a question or concern about how we have handled your personal information, contact us at hello@nordicspa.com.au or by post at the address in section 1.

8. Changes to this policy

This policy was last updated on 3 October 2026. We may update it from time to time. When we make an important change, we will post the new version on this page and update the date above.

This policy is governed by the law of the State of Victoria, Australia.