Privacy Policy

This store is operated by Undiesmith Pty Ltd (ABN 34 696 371 169), an Australian company. We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth).

If you’re shopping from the United Kingdom, the European Union or the United States, you may have further rights under your own local law. Email us and we’ll help you exercise them.

What you give us:

• your name, email address and phone number
• your delivery and billing addresses
• what you ordered, and any notes you send with it
• your account details, if you create an account
• anything you tell us in an email or a support message

What we collect as you browse:

• your device, browser and operating system
• your IP address and rough location from it
• the pages you visit, what you search for and what you add to your cart
• how you arrived at the store, including the ad or link you came from

We never see or store your full card number. Payments are handled by Shopify and its payment providers, who are held to the card industry’s security standards. We receive confirmation that a payment succeeded, along with the last few digits and card type for matching a refund to an order.

• To fill your order — take payment, pack it, ship it, and keep you posted on where it is.
• To help you — answer your emails, handle a return, sort out a problem with a delivery.
• To keep the store safe — spot fraudulent orders and misuse.
• To meet our obligations — tax, accounting and consumer law record-keeping.
• To improve what we sell — understand which products, sizes and pages people actually use.
• To market to you — send our newsletter where you’ve asked for it, and show our ads to people like you. You can opt out of both.

We don’t sell your personal information. We share what’s needed with the services that make the store work:

• Shopify, which hosts the store and processes orders and payments
• Our payment providers, to take payment and process refunds
• Delivery carriers, to get your parcel to your door
• Our email provider, to send order updates and the newsletter
• Meta (Facebook and Instagram) and Google, for advertising and analytics, as described below
• Professional advisers and authorities, where the law requires it

Each of these gets only what it needs for the job it does.

Our store uses cookies and similar technologies. Some are necessary — they keep your cart and your session working. Others tell us how the store is used, or support our advertising:

• Shopify’s own analytics, for store and sales reporting.
• Google Analytics, to understand how people move through the store. Google’s opt-out add-on turns this off across sites.
• The Meta pixel, which tells us when an ad on Facebook or Instagram led to a visit or a sale, and lets us show ads to people who’ve visited us. Your Meta ad preferences control how your activity is used for ads.

You can also clear or block cookies in your browser settings. Blocking the necessary ones will stop parts of the store working.

We email you about new drops and offers only if you’ve signed up for it. Every one of those emails has an unsubscribe link, and unsubscribing takes effect straight away.

Order confirmations, shipping updates and replies to your questions aren’t marketing, and you’ll keep getting those while an order is live.

We’re based in Australia and we ship to Australia and beyond, so your information may be stored or processed in Australia, the United States, the United Kingdom or the European Union, depending on where our service providers operate.

Wherever it goes, we take reasonable steps to see that it’s handled with protections comparable to those in your own country.

Order and transaction records are kept for seven years, as Australian tax and record-keeping law requires. Account details are kept while your account is open. Marketing details are kept until you unsubscribe, and support emails for as long as they’re useful for helping you.

After that we delete it or make it anonymous.

The store runs over an encrypted connection, and access to order and customer data is limited to the people who need it to do their job. No system is perfectly secure, but if a breach ever affected you, we’d tell you and the relevant regulator as the law requires.

Our store is meant for adults, and we don’t knowingly collect personal information from children. If you believe a child has given us their details, email us and we’ll delete them.

We may update this policy as the business or the law changes. The current version is always on this page, with the date it was last updated at the top. If a change materially affects how we use your information, we’ll tell you.

Questions about your privacy, or a request about your data, can go to hello@undiesmith.com. A person reads every one.