Privacy policy
This policy explains what personal information the business collects, how it is used, who it is shared with, and how you can access it, correct it or make a complaint.
The business is Jai Samadhi Pty Ltd, trading as The Premium Shisha.
Last updated: 10 August 2026
1. What we collect
Information you give us: name, date of birth, email address, phone number, billing and delivery address, order details, account login details, and the content of any message you send us.
Age verification: the result of the check, the date it was done, and a reference number from the verification service.
Information collected automatically: IP address, device and browser details, and cookie data.
Information from others: payment confirmations from payment providers, delivery and tracking updates from carriers, and fraud signals from those providers.
2. Why we collect it
- To accept, pack, send and track your order, and to handle returns.
- To confirm you are 18 or older before shisha tobacco is sent.
- To take payment and to detect fraud.
- To answer your questions and provide support.
- To send you order updates. Marketing is sent only if you ask for it.
- To keep the records the business is required by law to keep.
We do not sell personal information.
3. Age verification
Shisha tobacco cannot lawfully be sold to a person under 18, so age is verified before an order is sent. The check is carried out by Real ID, an independent verification service, and not by us. It runs after the order is placed and before dispatch, and it is normally done once per account rather than on every order. You upload a photo identity document, such as a driver licence or passport, to Real ID.
Most checks are approved automatically by Real ID. In that case we receive only the result, a reference number, and your name and date of birth so the order can be processed. We do not receive a copy of the document, the licence number, or the address shown on it.
Where a document has expired, or the check is flagged for an error, it does not pass automatically. Our authorised staff then view the document through Real ID and approve or decline it by hand. This is the circumstance in which we see your identity document.
Where we do see a licence or passport number, we use it only to confirm your identity and age. We do not use it as our own reference number for you, and we do not disclose it except where the law requires it.
Real ID holds this information on servers in the United States. You can ask us to have your verification record deleted.
4. Marketing
Marketing emails and messages are sent only to people who have asked to receive them. Every marketing email has an unsubscribe link, and you can reply STOP to a marketing text message. We act on an unsubscribe request within five business days.
Order confirmations, dispatch notices and replies to your questions are not marketing and are sent whether or not you have subscribed.
5. Who we share it with
We share personal information only with those who need it to do something for us or for you:
- Payment providers, to take and confirm payment.
- Carriers, to deliver your order.
- Our age verification service.
- Our website, hosting, email and security providers.
- Our professional advisers.
- Government agencies and regulators, where the law requires or authorises it.
6. Overseas handling
Some of the services we use store or process information outside Australia. Our website platform and our age verification service both hold information in the United States. Where we disclose personal information overseas, we take reasonable steps to require that it is handled to the same standard.
7. Cookies
This website uses cookies to keep your cart and login working, to keep the site secure, and to measure how the site is used. You can block or delete cookies in your browser settings. Some parts of the site may then stop working.
8. Storage, security and how long we keep it
Personal information is held in our website platform and business systems, which are password protected and access controlled. We take reasonable steps to protect it from loss, misuse and unauthorised access.
We keep order and verification records for as long as the law requires and for as long as they are needed to deal with a dispute or a warranty claim. After that they are deleted or de-identified.
9. Data breaches
If a data breach occurs that is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, and tell you what steps to take.
10. Access, correction and complaints
You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it. Email us using the details below. We may need to confirm your identity first. We will respond within 30 days.
If you are unhappy with how we have handled your personal information, tell us and we will look into it and reply in writing within 30 days. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
11. Children
This website is for adults. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
12. Changes
We may update this policy. The current version is always the one published on this page, with the date it was last updated shown at the top.
13. Contact
Email: support@thepremiumshisha.com.au
Phone: 0499 744 742
Post: Factory 20 / 573 Burwood Highway, Knoxfield VIC 3180, Australia