Privacy Policy
Last updated: 5 May 2025
1. Who we are
Designer Boutique (ABN 00 123 456 789) curates and sells limited‑edition fashion pieces. We are bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and, where applicable, the GDPR.
2. Personal data we collect
- Provided by you: name, email, phone, postal address, payment details, order notes.
- Automatically collected: IP address, device type, browser, referring pages, time‑stamps.
- Cookies & similar tech: analytics (Google Analytics 4), advert cookies (Google Ads / Meta), and essential session cookies.
3. Why we collect it
| Purpose | Legal basis (APP / GDPR) |
|---|---|
| Process and deliver orders | Contractual necessity / APP 3.2 |
| Provide customer support | Legitimate interests / APP 3.3 |
| Marketing with consent | Consent / APP 7 |
| Fraud prevention & security | Legitimate interests / APP 11 |
4. How we store & protect data
Data is stored on ISO 27001‑certified servers in Sydney (AWS). Payment information never touches our servers—processed by Stripe Payments Australia Pty Ltd (PCI‑DSS Level 1).
5. Third‑party disclosures
We do not sell personal data. Trusted processors include:
- Stripe – payments & fraud prevention
- Australia Post / Sendle – shipping labels
- Google LLC – analytics & advertising
Each processor is contractually bound to the APPs and, where relevant, the GDPR.
6. International transfers
Some data may be transferred outside Australia (e.g. to the US for Google LLC). Standard Contractual Clauses safeguard EU data.
7. Your rights
- Access or correct your data
- Withdraw marketing consent
- Request deletion (subject to statutory retention)
Email [email protected] with your request.
8. Children
Our site is not directed at persons under 16. We do not knowingly collect their data.
9. Contact & complaints
If you have a privacy query or complaint, contact us:
Email: [email protected]Phone: +61 417 015 551
Studio: South Melbourne Market, Coventry St, South Melbourne VIC 3205, Australia
If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).