Information We Collect

• Name, email address, phone number, and shipping/billing address when you place an order.
• Payment information, processed securely through Shopify Payments. We do not store full card details.
• Browsing and interaction data via cookies, analytics, and session recording tools.
• Communication records such as emails and support tickets.
• Marketing preferences including email opt-in and opt-out status.

How We Use Your Information

• To process and fulfil your orders.
• To communicate with you about your orders and provide customer support.
• To send marketing communications where you have opted in.
• To improve our website, products, and services.
• To detect and prevent fraud.
• To comply with legal obligations.

Third-Party Services

We use the following third-party services that may process your data:

• Shopify – Ecommerce platform and payment processing
• Australia Post – Shipping and delivery
• Google Analytics / Google Ads – Website analytics and advertising
• Meta / Facebook – Advertising and remarketing
• Microsoft Clarity – Session recording and heatmaps

Each third-party service has its own privacy policy. We encourage you to review them. We do not sell your personal information to third parties.

Cookies & Tracking

Our website uses cookies and similar technologies for:

• Essential website functionality (cart, checkout, sessions).
• Analytics and performance measurement.
• Advertising and remarketing (Google, Meta).
• Session recording (Microsoft Clarity).

You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Order records are retained for tax and accounting purposes.

Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to legal retention requirements.
• Opt out of marketing communications at any time.

To exercise any of these rights, contact us at hello@undertones.com.au.

Data Security

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, and disclosure. Our website uses SSL encryption, and payment processing is handled by PCI-compliant providers.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page. We encourage you to review this page periodically.