Security Policy

Last updated: 11 October 2026

At Just Fresh Roasted, protecting customer information is an important part of operating a responsible online business.

We understand that customers trust us with their personal and payment information when purchasing coffee through justfreshroasted.com.au.

We take reasonable steps to protect this information and use established e-commerce and payment platforms designed to support secure online transactions.

1. Secure Online Shopping

Our website operates on Shopify, an established global e-commerce platform.

Shopify provides security infrastructure designed to protect online shopping, customer accounts, transactions and order information.

These protections include encrypted connections, access controls, monitoring and other measures intended to reduce the risk of unauthorised access or misuse.

We also maintain appropriate business procedures to help protect the information used in our day-to-day operations.

No online system can be guaranteed to be completely secure, but we take information security seriously and regularly consider appropriate safeguards.

2. Secure Payment Processing

Payments made through our website are processed using Shopify and supported payment service providers.

These services use security controls designed to protect payment information during transaction processing.

Just Fresh Roasted does not ordinarily receive or store complete customer credit card numbers in its own business records.

Where applicable, payment processing is supported by the security standards and compliance arrangements maintained by the relevant payment providers, including the Payment Card Industry Data Security Standard (PCI DSS).

Payment information is handled by the authorised payment providers in accordance with their respective security and privacy arrangements.

3. Customer Information and Order Records

We collect personal information reasonably necessary to process orders, communicate with customers and arrange delivery.

This may include names, contact details, delivery addresses, order contents and purchase histories.

Customer information is primarily maintained in electronic systems used for e-commerce, order management and business administration.

Access to these systems is restricted to authorised personnel and service providers who require the information for legitimate business purposes.

We do not sell customer contact lists to unrelated businesses for monetary payment.

Where necessary, we share relevant information with authorised service providers, including payment processors, shipping providers and technology platforms, as explained in our Privacy Policy.

4. Physical Order Processing Records

Our fulfilment operation may use limited printed information to assist with picking, packing and preparing customer orders.

We aim to minimise the amount of personal information included in these records.

Printed picking information is generally limited to the details necessary to identify an order and prepare the correct products.

Delivery and payment information is managed through the relevant electronic systems rather than being unnecessarily reproduced on internal picking documents.

Any temporary printed records containing personal information are handled appropriately and securely disposed of when no longer required.

5. Fraud Prevention and Website Protection

Our online store and payment providers use security and fraud-prevention tools designed to identify suspicious transactions and protect customers and our business.

Depending on the circumstances, these measures may include:

• Transaction risk assessments.

• Checks for unusual purchasing activity.

• Protection against unauthorised account access.

• Website security monitoring.

• Appropriate access and authentication controls.

Orders identified as potentially fraudulent may require additional verification before fulfilment.

We may decline or cancel transactions where there are legitimate security or fraud concerns, subject to applicable law.

6. Information Retention and Disposal

We maintain business records for legitimate operational, accounting, taxation and legal purposes.

Certain transaction and customer records must be retained for periods required by applicable law.

When personal information is no longer reasonably required, we take appropriate steps to delete, de-identify or securely dispose of it, subject to applicable legal obligations.

Customers may request access to, correction of or deletion of personal information where applicable.

Some information cannot be immediately deleted where it must be retained for legal, accounting or other permitted purposes.

Further information is available in our Privacy Policy.

7. Email Communications and Customer Accounts

We use electronic communications to provide order confirmations, shipping notifications, customer service responses and other information necessary to fulfil purchases.

Promotional communications are sent where permitted by applicable law.

Customers can unsubscribe from marketing emails using the unsubscribe link provided in those messages.

We recommend that customers protect their account access, use appropriate passwords and remain cautious of unexpected messages requesting payment or personal information.

If you receive a suspicious communication claiming to represent Just Fresh Roasted, please contact us through our website before responding or providing information.

8. Security Incidents

We take suspected security incidents seriously.

If we become aware of an incident involving customer information, we will investigate the circumstances and take appropriate steps to contain and address the issue.

Where a data breach triggers notification obligations under applicable Australian law, we will notify affected individuals and relevant authorities as required.

We will also consider appropriate measures to reduce the likelihood of a similar incident occurring again.

9. Privacy and Customer Rights

This Security Policy should be read together with our Privacy Policy, which provides further information about:

• The personal information we collect.

• How information is used and shared.

• Website cookies and analytics.

• Overseas data processing.

• Access, correction and deletion requests.

• Privacy complaints and enquiries.

Nothing in this Security Policy limits any rights or protections available under applicable Australian law.

10. Contact Us

If you have questions about website security, payment processing or the protection of your personal information, please contact us through the Contact Us page on justfreshroasted.com.au.

Just Fresh Roasted

Website: https://justfreshroasted.com.au

We value our customers' trust and remain committed to protecting the information entrusted to our business.