Privacy policy
Last Updated: August 28, 2025
This Privacy Policy describes how M&C Nebulae Australia Pty Ltd (trading as MCNE Auto Supplies) collects, uses, and shares personal information of users of our website www.mcnebulae.com.au, We are committed to protecting your privacy and ensuring the security of your personal information.
M&C Nebulae Australia Pty Ltd, ABN: 58 604 549 644, located at 48 Jennifer Crescent, Bayswater North, Victoria 3153, Australia, is the data controller responsible for your personal information.
If you have any questions or concerns about our Privacy Policy, please contact us:
- Email: info@mcnebulae.com.au
- Phone Number: +61382882397
- Business Hours: Monday to Saturday, 8:00 AM – 6:00 PM AEST/AEDT (Melbourne Time)
1. Information We Collect
We collect the following types of personal information:
-
Information You Provide Directly:
- Name
- Email address
- Phone number
- Shipping address
- Billing address
- Payment information (credit card details are processed securely through our payment processor and are not stored by us)
- Inquiries and customer support requests
-
Information We Collect Automatically:
- IP address
- Device information (e.g., device type, operating system)
- Browser type
- Referring website
- Pages you visit on our website
- Date and time of your visit
- Cookies and similar tracking technologies (see Section 4 below).
-
Information from Third-Party Sources:
- Advertising partners (e.g., Google, Facebook) - We may receive demographic data and information about your interests.
- Payment processors - To confirm payments and prevent fraud.
- Shipping providers - To receive updates on shipment status.
2. How We Use Your Information
We use your personal information for the following purposes:
- To process and fulfill your orders: This includes order confirmation, shipping, and billing.
- To provide customer support: Responding to your inquiries and resolving issues.
- To personalize your experience: Recommending products and services that may be of interest to you.
- To send you marketing communications: With your consent, we may send you emails about new products, promotions, and other updates. You can unsubscribe at any time.
- To improve our website and services: we analyze website usage data to identify areas for improvement.
- To prevent fraud and ensure security: we protect our website and users from unauthorized access and fraudulent activity.
- To comply with legal obligations: As required by applicable laws and regulations.
- Personalized Advertising: We use your data for personalized advertising, including on Google Shopping Ads and Free Listings. This includes data such as product views, search queries, and purchase history. This information is shared with Google Ads and Facebook Ads to tailor ads to your interests and preferences. For example, if you view a specific type of car part on our website, you may see ads for similar parts on Google Shopping Ads.
3. Legal Basis for Processing
We process your personal information based on the following legal bases:
- Consent: We rely on your consent to send you marketing communications and use certain cookies. You have the right to withdraw your consent at any time.
- Contract: We process your personal information to fulfill our contractual obligations to you, such as processing your orders and providing customer support.
- Legal Obligation: We process your personal information to comply with legal obligations, such as tax reporting.
- Legitimate Interests: We process your personal information for our legitimate interests, such as improving our website and services, preventing fraud, and personalizing your experience. We have carefully balanced our legitimate interests against your privacy rights and have implemented safeguards to protect your personal information. For example, when analyzing website usage data to improve our website, we anonymize the data where possible to minimize the impact on your privacy. We consider factors such as the necessity of the processing, the type of data involved, and the potential impact on your rights. We only proceed if we believe that our legitimate interests are not overridden by your privacy rights.
4. Cookies and Similar Technologies
We use cookies and similar technologies to collect information about your browsing activity. A cookie consent banner is displayed when you first visit our website, allowing you to manage your cookie preferences.
The cookie consent banner covers the following types of cookies:
- Essential Cookies: These cookies are necessary for the website to function properly.
- Analytics Cookies: These cookies allow us to analyze website usage and improve our services. Examples include Google Analytics.
- Advertising Cookies: These cookies are used to display personalized ads. Examples include cookies from Google Ads and Facebook Ads.
Users can customize their cookie preferences through the cookie consent banner, allowing granular consent for different cookie categories. The banner blocks advertising and analytics cookies before user consent is given, in compliance with GDPR and other privacy regulations. You can also manage your cookie preferences through your browser settings.
5. Sharing Your Information
We may share your personal information with the following categories of recipients:
- Service Providers: We share your information with service providers who help us operate our business, such as payment processors (e.g., Shopify Payments), shipping providers, marketing platforms (e.g., Mailchimp), and data analytics providers (e.g., Google Analytics).
- Advertising Partners: We share your information with advertising partners like Google Ads and Facebook Ads to display personalized ads.
- Legal Authorities: We may disclose your information to legal authorities if required by law or legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring company.
6. International Data Transfers
Your personal information may be transferred to and processed in countries outside of Australia. These countries may have data protection laws that are different from the laws of Australia. When we transfer your personal information internationally, we will take appropriate safeguards to protect your information, such as using Standard Contractual Clauses (SCCs) approved by the European Commission. We may transfer your data to countries deemed 'adequate' by relevant authorities (e.g., the EU), meaning they offer a similar level of data protection as Australia.
Depending on the destination country, we may also implement supplementary measures to ensure your data is protected, such as:
- Data Minimization: Limiting the amount of personal data that is transferred.
- Encryption: Encrypting data both in transit and at rest.
- Access Controls: Restricting access to personal data to authorized personnel only.
- Data Protection Impact Assessments (DPIAs): Conducting DPIAs to assess the risks to personal data and implement appropriate safeguards.
7. Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Specific data retention periods include:
- Order Information: We retain order information for 2 years for tax purposes.
- Account Information: We retain your account information as long as your account is active. You can request to delete your account at any time.
- Email Address for Marketing: We retain your email address for marketing purposes until you unsubscribe.
- Customer Support Inquiries: We retain customer support inquiries for 1 years to improve our customer service.
8. Your Rights
You have the following rights regarding your personal information:
-
Access: You have the right to access the personal information we hold about you.
- Process: To request access, please email us with the subject line "Access Request". Please include your full name and email address in the request. We will respond within 30 days.
-
Correction: You have the right to correct any inaccurate or incomplete personal information we hold about you.
- Process: To request a correction, please email us with the subject line "Correction Request". Please specify the information you believe is inaccurate and the correct information. We will respond within 30 days.
-
Deletion: You have the right to request that we delete your personal information.
- Process: To request deletion, please email us with the subject line "Deletion Request". Please include your full name and email address in the request. We will respond within 30 days.
-
Restriction of Processing: You have the right to restrict the processing of your personal information.
- Process: To request restriction of processing, please email us with the subject line "Restriction Request". Please specify the reasons for your request. We will respond within 30 days.
-
Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Process: To request data portability, please email us with the subject line "Portability Request". Please include your full name and email address in the request. We will provide the data in a CSV format within 30 days.
-
Objection: You have the right to object to the processing of your personal information.
- Process: To object to processing, please email us with the subject line "Objection Request". Please specify the reasons for your objection. We will respond within 30 days.
-
Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
- Process: To withdraw consent, you can use the unsubscribe link in our marketing emails or email us with the subject line “Withdraw Consent”.
To exercise any of these rights, please contact us at info@mcnebulae.com.au. We may require you to verify your identity before processing your request.
9. Subprocessors
We use the following subprocessors to process personal data:
- Google Analytics: Website analytics.
- Mailchimp: Email marketing.
- Shopify Payments: Payment processing.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on our website. Please check this Privacy Policy periodically for updates.