Privacy Policy

Knotty Body Australia Pty Ltd (ABN 65 666 328 392)

Last updated: 2025

1. Purpose and scope

This Privacy Policy explains how Knotty Body Australia Pty Ltd (Knotty Body, we, us, our) collects, uses, discloses and protects your personal information when you visit our website, interact with us on social media, or purchase our products and services.

We are committed to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website or purchasing our products, you agree to this Privacy Policy.

2. What is “personal information”?

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not. It can include contact details, transactional data, device and usage data, and in some cases “sensitive information” (as defined in the Privacy Act). We do not intentionally collect sensitive information.


3. The information we collect

Depending on your dealings with us, we may collect:

  • Identity & contact: name, email, telephone, postal and delivery addresses.
  • Order & payment: order history, shipping details, billing information (note: payments are processed via secure third-party gateways; we do not store full card numbers).
  • Account & communications: your enquiries, survey responses, support tickets, reviews and messages.
  • Device & usage: IP address, browser type, pages viewed, links clicked, referring/exit pages, timestamps and general geolocation.
  • Marketing preferences: your consent status and engagement with our emails/ads.

4. How we collect information

We collect personal information:

  • Directly from you when you place an order, create an account, contact us, enter a promotion or join our mailing list.
  • Automatically through cookies, pixels and similar technologies when you browse our site.
  • From third parties such as payment processors, analytics and advertising partners, logistics and fulfilment providers, or where you authorise a third party to share information with us.

Our online store is hosted by Shopify. Your personal information may be collected and stored in Shopify’s systems. You can read more about Shopify’s privacy practices at: https://www.shopify.com/legal/privacy.


5. Why we use your information

We use personal information to:

  1. Provide and fulfil orders, process payments, manage shipping/returns and provide customer support.
  2. Operate, secure and improve our website, apps and services (including analytics, debugging and testing).
  3. Communicate with you about your order, our products, promotions and important updates.
  4. Personalise marketing and measure the performance of our advertising (you can opt out at any time).
  5. Comply with law, prevent fraud and protect our legal rights.


6. Direct marketing & your choices

We may send you emails or SMS about new products, offers and news where permitted by law. You can unsubscribeusing the link in our messages or by contacting us (see Section 15). We will respect your preferences.


7. Cookies and tracking technologies

We use cookies, pixels and similar technologies to enable core site functionality, remember your preferences, analyse traffic and improve performance, and deliver relevant advertising. You can manage cookies in your browser settings; some features may not function correctly if cookies are disabled. For more information, see our Cookie settings/notice (if applicable).


8. When we share information

We do not sell your personal information. We may disclose personal information to trusted third parties who help us run our business, including:

  • E-commerce, hosting & IT: e.g., Shopify and related apps, hosting, security and support providers.
  • Payments: secure payment gateways and fraud-prevention partners.
  • Logistics & fulfilment: shipping, warehousing and returns partners.
  • Marketing & analytics: email service providers, ad platforms, analytics, survey and review tools.
  • Professional advisers: accountants, auditors, insurers and lawyers.
  • Regulators or law enforcement where required or authorised by law, or to protect safety and legal rights.
  • Business transactions: if we restructure, merge or sell all/part of our business, information may be transferred under appropriate safeguards.


9. Overseas disclosures

Some service providers (including Shopify and certain app partners) may store or process personal information outside Australia. Where this occurs, we take reasonable steps to ensure those recipients protect your information in a way that is consistent with the APPs. By using our services, you consent to such overseas disclosures.


10. De-identified and aggregated data

We may de-identify and aggregate information for research, statistical analysis, product development and business reporting. De-identified data does not identify you and may be used or disclosed for any lawful purpose.


11. Security

We use reasonable technical and organisational measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Despite our safeguards, no method of transmission or storage is completely secure; we cannot guarantee absolute security.


12. Retention

We keep personal information for as long as necessary for the purposes set out in this Policy, to comply with legal obligations, resolve disputes and enforce our agreements. When no longer required, information is de-identified or securely destroyed.


13. Access and correction

You may request access to, or correction of, the personal information we hold about you. We will respond within a reasonable time. If we refuse access or correction, we will tell you why and how to complain.


14. Notifiable data breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Privacy Act.


15. Complaints and how to contact us

If you have questions, wish to exercise your privacy rights, or make a complaint, please contact:

Knotty Body Australia Pty Ltd

ABN 65 666 328 392

Postal: PO Box 5181, Pinewood VIC, Australia

Email: info@knottybody.com.au

We will investigate and respond within a reasonable period. If you are not satisfied with our response, you may contact the OAIC:

  • Website: https://www.oaic.gov.au
  • Post: GPO Box 5288, Sydney NSW 2001
  • Phone: 1300 363 992
  • Email: enquiries@oaic.gov.au

16. Children’s privacy

Our products and website are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.


17. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated Policy will be posted on our website with the “Last updated” date. Your continued use of our services after any update constitutes acceptance of the revised Policy.