Privacy policy

Reggio Co Perth ("we", "us", or "our") operates this storefront and website, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the "Services"). Reggio Co Perth is powered by Shopify, which provides our underlying e-commerce framework.

This Privacy Policy describes how we handle your personal information in accordance with our obligations under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It explains how we collect, use, hold, and disclose your personal information when you visit, use our website, make a purchase, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of our Services, you acknowledge the collection, use, holding, and disclosure of your information as described in this Privacy Policy.

1. Personal Information We Collect

Under Australian law, "personal information" is information or an opinion about an identified individual, or an individual who is reasonably identifiable. We collect personal information depending on how you interact with our website. This includes:

  • Contact Details: Your name, residential or delivery address, billing address, phone number, and email address.
  • Financial & Transaction Information: Transaction details, items you view, items added to your cart or wishlist, purchase history, returns, exchanges, payment confirmation, and payment methods. Note: Credit card numbers and financial processing are securely handled directly by our payment gateway providers and Shopify; we do not store raw credit card numbers on our local infrastructure.
  • Account Credentials: Usernames, preferences, and account settings if you choose to establish a customer account profile.
  • Communications: Any personal information you voluntarily provide when sending a customer support enquiry, email, or digital interaction.
  • Device & Usage Data: IP addresses, device identifiers, browser types, network connections, cookie identifiers, and analytical data tracking how and when you navigate through our online store.

2. How We Collect Personal Information

We collect personal information through several primary channels:

  • Direct Collection: Information you explicitly provide to us when placing an order, registering an account, subscribing to marketing lists, or contacting support.
  • Automated Tracking: Information collected automatically from your device using cookies, web beacons, and server tracking logs as you browse the storefront.
  • Third-Party Platforms: Data received from our operational partners, such as payment processors, delivery/fulfilment couriers, and marketing platforms (including Meta Pixels and Google Analytics frameworks).

3. How We Use Your Personal Information

We collect, hold, use, and disclose your personal information for purposes necessary to run our business, including:

  • Fulfilling Orders & Services: Processing payments, managing accounting, arranging physical product shipping, handling returns/exchanges, and maintaining your customer account layout.
  • Marketing & Communications: Sending promotional updates, product alerts, text messages, or direct marketing materials. You can opt out of direct marketing communications at any absolute moment by using the 'unsubscribe' links inside our digital messages.
  • Advertising Optimisation: Displaying relevant online advertisements on third-party platforms (such as Instagram, Facebook, and Google) based on your browsing interactions.
  • Security & Fraud Auditing: Checking transaction profiles to detect, investigate, and prevent fraudulent orders, unauthorised account access, or malicious operational activity.
  • Statutory Compliance: Meeting legal obligations under Australian Consumer Law, tax reporting requirements, or responding to lawful warrants issued by law enforcement or government authorities.

4. How We Hold and Secure Personal Information

We hold your personal information in digital formats across secure cloud storage arrays and within the technical infrastructure managed by Shopify.

We take all reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These safeguards include encrypted secure socket layers (SSL/TLS) for data in transit, strict local staff credential access controls, and security configurations managed via our platform service providers.

We retain personal information only for as long as necessary to fulfil the operational purposes detailed in this policy, satisfy legal record-keeping obligations, or resolve commercial disputes.

5. Sharing and Disclosure of Personal Information

We may disclose your personal information to third-party entities to support our retail operations. These third parties include:

  • Platform & Infrastructure Providers: Shopify and related cloud hosting applications that run our core database channels.
  • Logistics & Freight Providers: Delivery companies, postal services, and fulfilment couriers tasked with shipping your physical products.
  • Financial Clearances: Secure credit card processors, banking networks, and fraud screening vendors.
  • Marketing & Analytics Partners: Ad networks and tracking systems (such as Meta and Google) to refine target advertising. These platforms manage data according to their own independent privacy frameworks.

6. Cross-Border & Overseas Data Transfers (Mandatory APP 8 Disclosure)

Because our storefront framework is hosted by Shopify and integrates with international cloud ecosystems, your personal information will be transferred out of Australia.

By accessing our Services and providing your personal information, you acknowledge that your data will be transmitted, stored, and processed overseas. Your data is primarily transferred to Shopify’s data infrastructure servers located in the United States, Canada, and Singapore, as well as other global jurisdictions where our technical vendors operate.

While these overseas entities are subject to strict data security contracts, you acknowledge that they may not be subject to privacy laws identical to the Australian Privacy Act 1988 (Cth).

7. Your Rights: Accessing and Correcting Your Information

Under Australian Privacy Principles 12 and 13, you have an absolute right to request access to the personal information we hold about you, and to request that we correct any errors, out-of-date records, or inaccuracies.

If you need to update your details or wish to review what information we have recorded, please submit a written request via our contact channels listed below. We will respond to your request within a reasonable timeframe (typically within 30 days) and will provide access or make corrections free of charge, subject to any lawful exceptions permitted under the Privacy Act.

8. Children's Data

Our Services are intended for a general audience and are not directed specifically at children. If you are a parent or guardian and believe your child has submitted personal information to our database without your authorisation, please contact us using the details below so we can scrub that data from our records.

9. Changes to this Policy

We may modify or update this Privacy Policy from time to time to maintain compliance with regulatory variations or operational changes. Any revised policy updates will be posted immediately on our storefront with an amended "Last updated" timeline stamp.

10. Complaints Handling Pipeline

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you can submit a formal complaint directly to our management team:

Please provide clear details regarding your concern. We take all complaints seriously and will investigate your matter thoroughly, providing a written response regarding our findings and any corrective actions taken within 30 days.

If you are unsatisfied with our internal response, you have the right to escalate your complaint to the independent external regulator, The Office of the Australian Information Commissioner (OAIC):