Privacy policy

This Privacy Policy describes how girlinmind.shop (“girlinmind.shop,” “we,” “us,” or “our”) collects, uses, stores, discloses, and protects your personal information when you:

• Visit or interact with our website;
• Create or use a customer account;
• Purchase or return a product;
• Subscribe to our marketing communications;
• Contact our customer service team;
• Participate in a promotion, survey, or review; or
• Otherwise interact with our online store and related services.

For the purposes of applicable privacy and data protection laws, girlinmind.shop is generally the business or data controller responsible for the personal information described in this Privacy Policy. Shopify and certain other service providers may also process personal information for their own purposes, as explained below.

1. Contact Information

If you have questions about this Privacy Policy or wish to exercise a privacy right, please contact us:

Store Name: girlinmind.shop
Email: info@girlinmind.shop
Telephone: +61 3 9206 8329

Postal Address: 36 Japonica St, Bundoora, VIC 3083, Australia

Please use the email subject line:

Privacy Request – [Type of Request]

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through girlinmind.shop and through communications directly related to our store.

It does not apply to websites, platforms, or services operated independently by third parties. For example, Shopify, payment providers, delivery carriers, social media platforms, and advertising providers may process information under their own privacy policies.

If you follow a link to a third-party website, you should review that third party’s privacy policy before providing personal information.

3. Meaning of Personal Information

“Personal information” or “personal data” generally means information that identifies you, relates to you, describes you, or can reasonably be linked with you.

Personal information does not generally include information that has been irreversibly anonymised or aggregated so that it can no longer reasonably identify an individual.

4. Personal Information We Collect

The information we collect depends on how you interact with our store.

4.1 Contact and identity information

We may collect:

• Your full name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Country or region;
• Account username or identifier; and
• Information used to verify your identity.

4.2 Order and transaction information

When you place or attempt to place an order, we may collect:

• Products purchased or viewed;
• Product size, colour, quantity, and variation;
• Order number;
• Order value;
• Currency;
• Discount or promotional code;
• Payment status;
• Billing and shipping details;
• Delivery method;
• Tracking information;
• Return, exchange, and refund history;
• Gift card information; and
• Communications concerning the order.

4.3 Payment information

Payments are generally processed by Shopify Payments or another payment provider available at checkout.

Payment information may include:

• Payment method;
• Card type;
• Billing address;
• Transaction identifier;
• Payment authorization status; and
• Limited or masked payment account information.

We generally do not receive or store your complete payment card number. Full payment credentials are normally collected and processed directly by the applicable payment provider according to its own security and privacy practices.

4.4 Account information

If you create a customer account, we may collect:

• Account login information;
• Saved addresses;
• Order history;
• Product preferences;
• Wishlist or saved products;
• Marketing preferences; and
• Account activity.

You are responsible for maintaining the confidentiality of your account credentials and notifying us if you believe your account has been accessed without authorization.

4.5 Customer service information

When you contact us, we may collect:

• The contents of emails and messages;
• Your order number;
• Details of your enquiry or complaint;
• Photographs or videos of products;
• Return and refund information;
• Records of customer service interactions; and
• Any other information you choose to provide.

4.6 Device and website usage information

When you visit our website, we or our service providers may automatically collect:

• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Language and regional settings;
• Time zone;
• Device identifiers;
• Cookie identifiers;
• Pages viewed;
• Products searched for or viewed;
• Products added to or removed from your cart;
• Referring website;
• Links and buttons selected;
• Date and time of visits;
• Approximate location derived from an IP address;
• Session duration; and
• Website errors or performance information.

4.7 Marketing information

If you subscribe to marketing or interact with our advertisements, we may collect:

• Email or SMS subscription status;
• Marketing consent records;
• Advertising interactions;
• Campaign engagement;
• Email opening and link activity;
• Product interests;
• Communication preferences; and
• Unsubscribe or opt-out requests.

4.8 Reviews and user-submitted content

If you submit a review, photograph, comment, or other content, we may collect:

• Your display name;
• Review text;
• Ratings;
• Photographs or videos;
• Product information; and
• Any personal information included in your submission.

Please avoid including sensitive or unnecessary personal information in public reviews.

5. How We Collect Personal Information

We may collect personal information:

Directly from you

For example, when you place an order, create an account, complete a form, request a return, subscribe to marketing, or contact us.

Automatically

We may collect information through cookies, pixels, local storage, server logs, software development kits, and similar technologies when you use our website.

From service providers

We may receive information from Shopify, payment processors, fraud-prevention providers, delivery carriers, customer service providers, analytics services, and marketing platforms.

From advertising and social media platforms

If you interact with our advertisements or social media pages, we may receive information about that interaction, depending on your privacy settings and the platform’s policies.

From other people

If another person purchases a gift for you or sends an order to your address, we may receive your name, address, telephone number, and delivery information from that person.

Anyone providing another person’s information should have authority to do so.

6. How We Use Personal Information

We may use personal information to:

Provide products and services

• Process and confirm orders;
• Collect and process payments;
• Arrange delivery;
• Send order and shipping updates;
• Manage customer accounts;
• Process returns, exchanges, and refunds;
• Respond to enquiries; and
• Provide customer support.

Operate and improve our store

• Maintain website functionality;
• Remember shopping cart contents;
• Improve navigation and checkout;
• Analyse website performance;
• Understand customer preferences;
• Develop or improve products and services;
• Troubleshoot errors; and
• Maintain business records.

Protect our store and customers

• Verify transactions;
• Prevent payment fraud;
• Detect suspicious activity;
• Protect accounts;
• Enforce our policies;
• Prevent misuse of returns or promotions;
• Protect legal rights; and
• Maintain website and information security.

Communicate with you

• Send transactional messages;
• Respond to questions and complaints;
• Provide service announcements;
• Request feedback;
• Notify you about material policy changes; and
• Send marketing communications where permitted.

Advertising and personalisation

Subject to your choices and applicable law, we may use information to:

• Recommend products;
• Personalise website content;
• Measure advertising performance;
• Build advertising audiences;
• Display relevant advertisements; and
• Understand how customers interact with campaigns.

Meet legal obligations

We may use information to:

• Maintain tax and accounting records;
• Respond to lawful requests;
• Comply with court orders;
• Manage consumer-law claims;
• Investigate disputes;
• Comply with regulatory obligations; and
• Establish, exercise, or defend legal claims.

7. Legal Bases for Processing

Where a law such as the UK GDPR or EU General Data Protection Regulation requires us to identify a legal basis, we may rely on:

Performance of a contract

We process information when necessary to accept payment, fulfil an order, arrange delivery, or process a return.

Legitimate interests

We may process information for legitimate business purposes such as maintaining security, preventing fraud, improving our store, providing customer support, and understanding store performance.

When relying on legitimate interests, we consider whether those interests are overridden by your privacy rights.

Consent

We may rely on consent for certain marketing, advertising, analytics, or cookie activities. You may withdraw consent at any time, but withdrawal does not make earlier processing unlawful.

Legal obligations

We may process information when necessary to comply with tax, accounting, consumer protection, regulatory, or other legal requirements.

Legal claims and public interests

Where applicable, we may process information to establish or defend legal claims, protect individuals, prevent unlawful conduct, or comply with substantial public-interest obligations.

8. Shopify

Our online store is hosted and supported by Shopify.

Shopify may process personal information to:

• Provide the ecommerce platform;
• Operate checkout and payment services;
• Host store and customer information;
• Detect fraud and security threats;
• Provide analytics;
• Support store functionality; and
• Provide other Shopify services selected by us or used by you.

For many core platform activities, Shopify processes customer information on our behalf. For certain Shopify services, Shopify may independently determine how and why information is processed and may act as a separate data controller or business.

If Shopify Network Intelligence, Shop Pay, the Shop app, Shopify analytics, or other enhanced Shopify services are enabled, Shopify may process information across its services as described in its own privacy notices.

You can learn more by reviewing Shopify’s Consumer Privacy Policy.

9. Cookies and Similar Technologies

Cookies are small files stored on a device when a person visits a website. We and our service providers may use cookies, pixels, tags, local storage, and similar technologies.

Essential cookies

These cookies may be necessary to:

• Operate the website;
• Maintain your shopping cart;
• Process checkout;
• Remember security settings;
• Prevent fraud;
• Enable account login; and
• Remember your privacy choices.

Because essential cookies are required for the store to function, they may not be optional.

Functional cookies

These cookies help remember settings such as language, location, account preferences, and recently viewed products.

Analytics cookies

These cookies help us understand:

• How visitors find our website;
• Which pages and products are viewed;
• How customers use the store;
• Whether errors occur; and
• How website performance can be improved.

Advertising cookies

Advertising technologies may be used to measure campaigns, personalise advertisements, limit repeated advertisements, and understand whether an advertisement resulted in a visit or purchase.

Managing cookies

Depending on your location and our website configuration, you may be able to manage non-essential cookies through the cookie banner or privacy settings displayed on our website.

You may also configure your browser to block or delete cookies. Blocking some cookies may cause parts of the website, shopping cart, account, or checkout to function incorrectly.

10. Marketing Communications

We may send promotional emails or messages if:

• You have consented;
• You subscribed to our marketing list;
• You requested information about products; or
• Applicable law otherwise permits the communication.

You can unsubscribe at any time by:

• Selecting the unsubscribe link in a marketing email;
• Following the opt-out instructions in a message; or
• Emailing info@girlinmind.shop.

Unsubscribing from marketing does not prevent us from sending non-promotional messages about an order, delivery, return, refund, account, security issue, or customer service request.

We will process valid unsubscribe requests as soon as reasonably practicable.

11. Advertising, Sale, and Sharing of Personal Information

We do not sell personal information to third parties in exchange for money.

However, we may use advertising, analytics, or social media technologies that disclose online identifiers, browsing activity, device information, or shopping interactions to service providers and advertising partners.

Under some United States state privacy laws, certain advertising-related disclosures may be considered a “sale,” “sharing,” or use of personal information for “targeted advertising,” even if no money is exchanged.

Where applicable, you may opt out by:

• Using the “Your Privacy Choices” or data-sharing opt-out link displayed on our website;
• Adjusting the website’s cookie settings; or
• Emailing info@girlinmind.shop.

Where required by applicable law and supported by our website configuration, we will also process recognized browser-based opt-out preference signals.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

12. When We Disclose Personal Information

We may disclose personal information to the following categories of recipients where reasonably necessary.

Ecommerce and hosting providers

This includes Shopify and providers supporting our website, checkout, customer accounts, and store administration.

Payment providers

Payment gateways, banks, card networks, digital wallet providers, fraud-prevention providers, and payment processors may receive information required to authorize or complete a transaction.

Shipping and fulfilment providers

Postal services, couriers, warehouses, fulfilment partners, customs authorities, and delivery service providers may receive information necessary to deliver or return an order.

Technology providers

We may use providers for cloud storage, website operation, security, communications, customer service, data analysis, and error monitoring.

Marketing and analytics providers

Where permitted, advertising networks, email providers, analytics platforms, search engines, and social media services may receive limited information used for marketing and measurement.

Professional advisers

We may provide information to lawyers, accountants, insurers, auditors, consultants, and other advisers where reasonably necessary.

Government and regulatory authorities

We may disclose information where required by law, legal process, court order, regulatory request, or to protect people, property, and legal rights.

Business transactions

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, sale of assets, insolvency, or transfer of the business.

Any recipient involved in such a transaction may use the information only for evaluating or completing the transaction and operating the resulting business, subject to applicable law.

13. International Data Transfers

Our business is located in Australia, but Shopify and other service providers may operate in multiple countries.

As a result, personal information may be processed or stored outside your state, province, territory, or country, including in countries whose privacy laws may differ from those in your location.

Where required, we use or rely on appropriate safeguards for international transfers, which may include:

• Contractual privacy and security obligations;
• Standard contractual clauses;
• Data processing agreements;
• Transfer-risk assessments;
• Consent, where appropriate; and
• Other legally recognized safeguards.

Foreign courts, regulators, or government authorities may be able to access information in accordance with the laws of the country where the information is processed.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

The applicable retention period may depend on:

• The duration of our relationship with you;
• Whether you maintain an account;
• The time required to fulfil an order;
• Return, refund, chargeback, and warranty periods;
• Tax, accounting, and recordkeeping requirements;
• Fraud-prevention needs;
• Contractual obligations;
• Legal limitation periods;
• Pending complaints or disputes; and
• Legal or regulatory investigations.

When information is no longer reasonably required, we will take reasonable steps to delete, destroy, or de-identify it, unless continued retention is permitted or required by law.

Backups and archived systems may retain information for a limited additional period before it is securely deleted or overwritten.

15. Information Security

We use reasonable administrative, organisational, technical, and physical safeguards designed to protect personal information.

These safeguards may include:

• Access controls;
• Password protection;
• Encryption in transit;
• Secure payment processing;
• Fraud monitoring;
• Restricted staff or service-provider access;
• Software and security updates; and
• Incident response procedures.

No website, transmission method, or storage system can be guaranteed completely secure. You should use a strong, unique password and avoid sending sensitive information through unsecured channels.

If we identify a data breach that must be reported under applicable law, we will notify affected individuals and relevant regulators as required.

16. Sensitive Information

We do not ordinarily request sensitive personal information, such as health information, biometric identifiers, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, or criminal records.

Please do not provide sensitive information unless it is reasonably necessary and we have requested it for a lawful purpose.

If you voluntarily provide sensitive information, we will handle it in accordance with applicable law.

17. Children’s Privacy

Our store is not directed to children under 16, and we do not knowingly collect personal information directly from children under 16.

Purchases should be made by an adult or with the involvement and consent of a parent or legal guardian.

If you believe a child has provided personal information without appropriate authorization, contact us at info@girlinmind.shop. We will investigate and take reasonable steps to delete the information where required.

18. Automated Processing

We may use automated tools to:

• Detect potentially fraudulent transactions;
• Identify security risks;
• Recommend products;
• Organise customer service requests;
• Analyse website usage; and
• Personalise content or advertising.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate legal authority and safeguards.

Where applicable law provides a right relating to automated decisions, you may contact us to request information, human review, or to challenge a qualifying decision.

19. Your Privacy Rights

Depending on where you live and the law that applies, you may have the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of qualifying information;
• Request restriction of processing;
• Object to certain processing;
• Withdraw consent;
• Request a portable copy of qualifying information;
• Opt out of direct marketing;
• Opt out of targeted advertising;
• Opt out of qualifying sales or sharing;
• Appeal certain decisions concerning a privacy request;
• Complain to a privacy regulator; and
• Receive equal service without unlawful discrimination for exercising a privacy right.

These rights are not absolute. We may retain or continue processing information where permitted or required by law, including for tax records, fraud prevention, contract performance, disputes, and legal claims.

20. Access and Correction Requests

To request access to or correction of your personal information, email info@girlinmind.shop.

Please provide:

• Your full name;
• Email address associated with your account or order;
• Relevant order number, where applicable;
• The type of request;
• Details of the information concerned; and
• Any information reasonably necessary to verify your identity.

We may need to verify your identity before responding. We will only request information reasonably necessary for verification.

If we cannot provide access or make a requested correction, we will explain the reason where required and provide information about available complaint options.

21. Deletion Requests

You may request deletion of personal information by contacting us.

We may be unable to delete certain information if it is reasonably necessary to:

• Complete an order;
• Process a return or refund;
• Maintain tax or accounting records;
• Detect fraud;
• Protect security;
• Resolve a dispute;
• Comply with a legal obligation; or
• Establish, exercise, or defend legal claims.

If information cannot be deleted immediately from backup systems, it will remain protected and will not be used for unrelated purposes while awaiting deletion through the normal backup cycle.

22. Authorized Representatives

Where permitted by applicable law, you may appoint an authorized representative to submit a privacy request on your behalf.

We may require:

• Evidence of the representative’s authority;
• Confirmation directly from you;
• Proof of identity; and
• Information necessary to identify the relevant records.

23. Non-Discrimination

We will not unlawfully discriminate against you because you exercised an applicable privacy right.

Exercising a privacy right will not result in denial of service, different pricing, or a lower level of service unless a difference is reasonably related to the information required to provide the relevant service or is otherwise permitted by law.

24. Australian Privacy Rights and Complaints

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, you may request access to personal information we hold and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

If you believe we have mishandled your personal information, please send a written complaint to:

Email: info@girlinmind.shop
Subject: Privacy Complaint
Address: 36 Japonica St, Bundoora, VIC 3083, Australia

Please describe:

• The privacy issue;
• The information involved;
• Relevant dates;
• Your preferred resolution; and
• Any supporting documents.

We aim to acknowledge and respond to privacy complaints within a reasonable period, generally within 30 days.

If you are not satisfied with our response, or we do not respond within 30 days, you may be entitled to contact the Office of the Australian Information Commissioner, subject to its jurisdiction and complaint requirements:

Office of the Australian Information Commissioner – Privacy Complaints

25. European Economic Area and United Kingdom

If you are located in the EEA or United Kingdom, you may have rights under the GDPR or UK GDPR, including rights of access, correction, erasure, restriction, objection, portability, withdrawal of consent, and complaint to your local supervisory authority.

Where we process your information based on legitimate interests, you may object to that processing. Where we use information for direct marketing, you may object at any time.

If we require information to perform a contract and you do not provide it, we may be unable to process or deliver your order.

26. United States Privacy Rights

Residents of certain US states may have additional rights, subject to eligibility thresholds, exceptions, and verification requirements.

These may include rights to:

• Know what categories of personal information are collected;
• Access specific personal information;
• Correct inaccurate information;
• Delete qualifying information;
• Obtain a portable copy;
• Opt out of qualifying sales, sharing, or targeted advertising;
• Limit certain uses of sensitive personal information;
• Appeal a denied request; and
• Exercise rights without unlawful discrimination.

To submit a request, email info@girlinmind.shop or use the privacy controls provided on our website.

27. Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted technical standard for responding to these signals, our website may not respond to traditional Do Not Track settings.

Where required by applicable law and supported by our systems, we will process legally recognised opt-out preference signals, such as Global Privacy Control, in accordance with applicable requirements.

28. Third-Party Links and Social Media

Our website may contain links to social media pages, payment services, or other third-party websites.

We do not control the privacy, security, or content practices of independent third parties. Visiting those websites or interacting with their plugins may allow them to collect information about you.

You should review their privacy policies before providing information.

29. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our business practices;
• Shopify services;
• Payment or delivery providers;
• Advertising and analytics tools;
• Legal requirements; or
• The features of our website.

The updated policy will be posted on our website with a revised “Last Updated” date.

If a change materially affects how we use previously collected information, we will provide additional notice or obtain consent where required by law.

30. Contact Us

For questions, complaints, or privacy requests, contact:

girlinmind.shop
Email: info@girlinmind.shop
Telephone: +61 3 9206 8329

Postal Address: 36 Japonica St, Bundoora, VIC 3083, Australia