PRIVACY POLICY
This Privacy Policy was last updated on [14 September 2026].
----
Welcome to Kat The Label. Our Privacy Policy explains how Kat The Label (“we”, or “us”) collects, uses, discloses, and protects personal information when you engage or interact with us. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because our customers and website visitors are located around the world, we also aim to meet the expectations of other privacy laws that may apply to you, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as described further below.
1. Personal information we collect
We may collect the following kinds of personal information:
- identity and contact details, such as your name, billing and shipping address, email address and phone number;
- order and transaction information, such as products purchased, order history and returns;
- payment information, which is collected and processed on our behalf by our payment gateway providers (see Section 7);
- technical information, such as your IP address, browser and device type, and operating system;
- marketing preferences, such as whether you have subscribed to, or opted out of, email or SMS marketing; and
- any other information you choose to give us, for example through a customer service enquiry.
2. How we collect personal information
We collect personal information directly from you when you:
- browse our website or online store;
- create an account, place an order or otherwise make a purchase;
- subscribe to our email or SMS marketing;
- contact our customer service team; or
- otherwise interact with us, including via social media.
We may also collect information automatically through cookies and similar technologies (see Section 6), and from third parties such as our e-commerce platform provider and payment processors, where reasonably necessary for the purposes described in this Policy. Where practicable, we collect personal information directly from you.
3. Why we collect, hold, use and disclose your information
We collect, hold, use and disclose personal information to:
- process and fulfil your orders, including payment, delivery and returns;
- verify your identity and prevent fraud;
- communicate with you about your orders, account or enquiries;
- send you marketing communications, where you have consented (see Section 4);
- operate, improve and maintain our website and services; and
- comply with our legal and regulatory obligations.
We will not use or disclose your personal information for a purpose other than the primary purpose for which it was collected, unless you would reasonably expect us to use or disclose it for that secondary purpose, you have consented, or the use or disclosure is otherwise required or authorised by law, consistent with APP 6.
4. Consent and marketing
We collect, hold, use and disclose personal information where reasonably necessary for our functions and activities, or where otherwise required or authorised by law. Where consent is required (for example, for direct marketing or non-essential cookies where applicable), we will seek your consent before collecting or using your personal information.
You may withdraw your consent to further collection, use or disclosure of your personal information, or unsubscribe from marketing, at any time by contacting us at contact@katthelabel.com or by mail at: Kat The Label 33-41 Balmain St, Cremorne VIC 3121 Australia
5. Disclosure of your personal information
We may disclose your personal information to:
- our e-commerce platform provider, Shopify Inc., which hosts our online store (see Section 6);
- payment gateway and payment processing providers;
- delivery, logistics and fulfilment providers;
- marketing, analytics and IT service providers who assist us to operate our business;
- our professional advisers, insurers, regulators, law enforcement agencies where required or authorised by law; and
- a prospective buyer, if our business or its assets are sold, merged or transferred.
We do not sell your personal information to third parties for their own marketing purposes. Third-party providers we use will only collect, use and disclose your information to the extent reasonably necessary to provide their services to us. Some providers, such as payment gateways, have their own privacy policies governing how they handle information provided to them; we recommend you review those policies.
6. Overseas disclosure of personal information
Some of the third parties referred to above, including Shopify Inc., and certain payment processors, are based, or store data, outside Australia. Before disclosing personal information to an overseas recipient, we take reasonable steps to satisfy ourselves that the recipient handles that information consistently with the APPs, including by relying on the recipient’s contractual, security and privacy commitments.
7. Third-party services
Our store is hosted on Shopify Inc., which provides the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the Shopify application, on secure servers behind a firewall.
Payment: If you use a direct payment gateway to complete your purchase, your payment details are collected and stored by our payment gateway provider, encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is retained only for as long as necessary to complete the transaction, after which it is deleted or de-identified. All direct payment gateways we use adhere to PCI-DSS, as managed by the PCI Security Standards Council.
Links: Our website may contain links to third-party websites. We are not responsible for the privacy practices of other sites, and once you leave our website you are no longer covered by this Privacy Policy.
8. Cookies and other similar technologies
We use cookies and other similar technologies, including pixels and tags (collectively, Cookies), to operate our store, website, improve its performance, personalise your experience, understand how visitors use our website, and support our marketing activities.
Some Cookies are essential for our website to function, while others help us analyse website traffic, remember your preferences, or deliver more relevant advertising.
You can usually adjust your browser settings to block or delete cookies; some parts of our website may not function properly if you do so. Where required by law, we will seek your consent before placing non-essential cookies.
If you choose to use our website, certain essential cookies are required for it to function. Where required by law, we will seek your consent before using non-essential cookies. A current list of the Cookies is available in our Cookie Notice, which can be accessed at Cookie Notice.
9. Children’s privacy and age of consent
Our website is not directed at children, and we do not knowingly collect personal information from children under the age of 18 without the consent of a parent or guardian. By using our site, you represent that you are at least the age of majority in your place of residence, or that you have your parent or guardian’s consent to do so. If you believe we have inadvertently collected personal information from a child, please contact us using the details in Section 15 so we can delete it.
10. Data security and retention
We generally hold personal information electronically using Shopify and other cloud-based systems. We take reasonable technical and organisational steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. No method of transmission over the internet or electronic storage is completely secure, but we work to maintain appropriate safeguards and to keep them up to date.
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce our agreements. Where personal information is no longer needed, we take reasonable steps to destroy or de-identify it.
11. Access to and correction of your personal information
You may request access to, or correction of, the personal information we hold about you at any time. We will respond to your request within a reasonable period, and will not charge a fee for making a request (although we may charge a reasonable fee for giving access). We may need to verify your identity before actioning your request. In limited circumstances permitted by law, we may refuse to give access or make a correction; if so, we will explain our reasons.
12. Your privacy rights outside Australia
European Economic Area and United Kingdom (GDPR)
If you are located in the EEA or UK, we process your personal information on the basis of a contract with you, your consent, our legitimate interests in operating our business, or to comply with a legal obligation. You have the right, subject to applicable law, to request access to, rectification or erasure of your personal information, to restrict or object to our processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local data protection supervisory authority.
California (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, use and disclose about you (as described in this Policy), to request deletion or correction of that information, and to opt out of the sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioural advertising. We will not discriminate against you for exercising your privacy rights.
Other jurisdictions
If the privacy law of your country or state gives you additional rights, we will honour those rights to the extent they apply to us.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes take effect once posted on our website. If we make a material change to this Policy, we will take reasonable steps to notify you, including by updating the “last update” date at the top of this Policy.
14. How to make a complaint
If you wish to access, correct, amend or delete personal information we hold about you, or to make a complaint about how we have handled your personal information, please contact our Privacy Officer:
Email: contact@katthelabel.com
Post: Kat The Label, Re: Privacy Officer, 33-41 Balmain St, Cremorne VIC 3121 Australia
We will investigate and aim to respond to your complaint within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
15. Contact us
Kat The Label
33-41 Balmain St, Cremorne VIC 3121 Australia
Email: contact@katthelabel.com