Privacy policy

Anything But (“Anything But”, “we”, “us”, “our”) operates this online store and website, and provides related information, content, features, tools, products and services (together, the “Services”). Our store is powered by Shopify, which helps us provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website, place an order, interact with us, or otherwise use the Services.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Nothing in this Privacy Policy limits any rights or protections you may have under the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), or other applicable privacy or consumer laws.

1. What is personal information?

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether recorded in a material form or not, as defined in the Privacy Act.

This may include, for example, your name, contact details, order history and payment details. Information that has been de‑identified so that it can no longer reasonably identify you is not personal information.

2. Personal information we collect

The personal information we collect depends on how you interact with us and the Services. It may include:

• Contact details – name, billing address, shipping address, email address and phone number.

• Account details – username, password and preferences if you create an account.

• Order and transaction details – products you view, add to your cart, purchase, return or exchange, order history and payment confirmation details.

• Payment information – payment method, limited card/payment details processed via our payment providers (we do not store full card numbers on our systems).

• Communications – information you include in emails, forms or messages to us (e.g. customer support enquiries, feedback, reviews).

• Device and usage information – IP address, browser type, device identifiers, pages viewed, time and date of visits, and other usage data collected via cookies and similar technologies.

We will generally collect personal information directly from you where reasonable and practicable, such as when you:

• browse our website;

• place an order;

• create an account;

• sign up to marketing communications; or

• contact us via email or social media.

We may also receive personal information about you from:

• Shopify and our other service providers (for example, payment processors, analytics and marketing providers);

• our business and advertising partners; and

• publicly available sources, where permitted by law.

3. Why we collect and use your personal information

We collect, hold, use and disclose personal information for the following purposes:

1. To provide and operate the Services

• processing and delivering your orders;

• creating and managing your account;

• handling payments, refunds and exchanges;

• providing customer support and responding to enquiries; and

• remembering your preferences and items in your cart.

2. To personalise and improve your experience

• recommending products and content we think you may like;

• analysing how our website and Services are used; and

• improving our products, Services and customer experience.

3. Marketing and communications

• sending you emails or other communications about new products, collections, promotions or updates (where permitted and in line with your preferences);

• showing you relevant ads on our website or third‑party sites, including retargeting based on your activity on our site.

4. Security and fraud prevention

• verifying your identity (where needed);

• detecting, investigating and helping prevent fraud, misuse, or other unlawful activity; and

• protecting the security and integrity of our website and Services.

5. Legal and regulatory compliance

• complying with our legal obligations (for example, record‑keeping, taxation, responding to lawful requests from authorities); and

• enforcing our Terms of Service and other policies.

We will only use your personal information for the purposes for which it was collected, or for related purposes that you would reasonably expect, or as otherwise permitted or required by law.

4. Cookies and similar technologies

We use cookies and similar technologies (such as pixels and tags) to:

• enable essential site functions (e.g. shopping cart, checkout);

• understand how visitors use our site; and

• provide a more personalised experience and relevant advertising.

You can usually control cookies through your browser settings, but disabling certain cookies may affect how the Services function.

5. Marketing communications

If you subscribe to our mailing list or otherwise opt in, we may send you marketing emails or messages about new products, offers and updates.

• You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us at hello@anythingbut.co.

• Even if you opt out of marketing, we may still send you non‑promotional communications related to your orders or account (for example, order confirmations, shipping updates or important policy changes).

We may use third‑party tools (including Shopify and its marketing integrations) to help deliver and measure the effectiveness of our marketing.

6. How we disclose personal information

We may disclose your personal information to third parties for the purposes described above, including:

• Shopify – which hosts our store and processes personal information to help us operate and improve our business and the Services.

• Service providers – such as payment processors, shipping and fulfilment partners, IT and cloud hosting providers, email and marketing platforms, analytics providers, and customer support tools.

• Business and advertising partners – where we work with others to deliver ads, promotions or joint campaigns (they will handle your information under their own privacy policies).

• Professional advisers – such as lawyers, accountants and insurers, where needed to obtain professional advice or manage risk.

• Authorities and regulators – where required or authorised by law, or to protect our rights or the safety of our customers or the public.

• Business transactions – in connection with a sale, merger, reorganisation or similar transaction involving our business (in which case personal information may be transferred as part of that transaction).

We do not sell personal information in the ordinary sense of that term.

7. Relationship with Shopify

Our store is hosted on Shopify. When you use our Store, Shopify may collect and process personal information about you on our behalf (for example, to host our site, process payments and help us manage orders) and for its own purposes (for example, to improve the Shopify platform and provide certain consumer services).

• When Shopify processes your personal information to help us run our store, we are generally responsible for your information and this Privacy Policy applies.

• When Shopify uses your personal information for its own consumer services, Shopify is responsible for that processing. In those cases, Shopify’s own privacy policies apply, and you should review them to understand how Shopify uses your information and how to exercise your rights with Shopify.

You can read more about how Shopify handles personal information in the Shopify Consumer Privacy Policy and related resources on Shopify’s website.

8. Third‑party websites and social media

The Services may contain links to websites, apps or services operated by third parties, and may include features such as social media buttons or widgets.

We are not responsible for the privacy practices or content of third‑party sites or services. If you follow a link to a third‑party site, your use of that site is subject to the site’s own terms and privacy policy.

If you choose to interact with us on third‑party platforms (for example, Instagram or TikTok), the information you share may be visible to other users and handled in accordance with those platforms’ privacy policies.

9. Children’s privacy

Our Services are not intended for use by children, and we do not knowingly collect personal information about individuals under the age of 18 (or the age of majority in your state or territory).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@anythingbut.co. If we become aware that we have collected personal information from a child, we will take reasonable steps to delete it as soon as practicable.

10. Security of your personal information

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure, in line with the Privacy Act and Australian Privacy Principles.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you use the Services at your own risk. You are responsible for keeping your account login details confidential.

If a data breach occurs that is likely to cause serious harm, we will assess and, where required, notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

11. How long we keep your personal information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law, including:

• to provide you with the Services and manage our relationship with you;

• to comply with legal, tax and accounting obligations; and

• to resolve disputes and enforce our agreements.

When personal information is no longer required, we will take reasonable steps to destroy or de‑identify it, unless we are required by law to retain it.

12. Your rights and choices (Australia)

Depending on the circumstances and subject to certain exceptions, you may have the following rights in relation to your personal information under the Privacy Act and Australian Privacy Principles:

• Access – to request access to the personal information we hold about you.

• Correction – to request that we correct personal information that is inaccurate, out‑of‑date, incomplete, irrelevant or misleading.

• Opt‑out of marketing – to opt out of receiving direct marketing communications from us at any time.

To exercise these rights, or to update your details, please contact us using the details below. We may need to verify your identity before we can act on your request. We will respond within a reasonable time and in accordance with applicable law.

If you are located outside Australia, you may have additional rights under your local laws. You can also find information about rights relating to data processed by Shopify in Shopify’s own privacy materials.

13. Complaints

If you have a question or concern about how we handle your personal information, or wish to make a complaint, please contact us first using the details below. Please include as much detail as possible about your concern.

We will take your complaint seriously and will respond promptly, usually within 30 days, outlining the steps we have taken or will take in response.

If you are not satisfied with our response, you may have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au

• Phone: 1300 363 992 (within Australia)

14. International transfers

Our store is hosted by Shopify and we work with service providers located both in Australia and overseas. This means your personal information may be stored or processed in other countries, including Canada, the United States and other locations where Shopify or our service providers operate.

Where we disclose personal information overseas, we will take reasonable steps to ensure that the recipient will handle your information in a way that is consistent with the Australian Privacy Principles or otherwise in accordance with applicable law.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other operational reasons.

We will post the updated Privacy Policy on this page with a new “Last updated” date. If the changes are material, we will take reasonable steps to notify you (for example, by email or a notice on our website), where required by law. Your continued use of the Services after the updated policy takes effect will constitute your acceptance of the changes.

16. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, or if you would like to exercise your privacy rights, please contact us at:

Anything But

Email: hello@anythingbut.co

ABN: 96 237 519 850