Privacy Policy


Last updated: 16 August 2026

Charlotte Collective operates this website and online store, including all related information, content, features, tools, products and services (the “Services”).

This Privacy Policy explains how Charlotte Collective collects, uses, stores, shares and protects personal information when you visit our website, make a purchase, contact us or otherwise interact with our Services.

Please read this Privacy Policy carefully to understand how your personal information is handled.

Where applicable, we process personal information in accordance with relevant privacy and data protection laws, including the General Data Protection Regulation (“GDPR”) and the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (“APPs”).

PERSONAL INFORMATION WE COLLECT

“Personal information” or “personal data” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with Charlotte Collective, we may collect:

  • Contact information, including your name, email address, phone number, billing address and shipping address.

  • Order information, including products purchased, order history, returns, exchanges and delivery information.

  • Payment information, including payment method and transaction information. Complete payment card details are generally processed by our payment providers rather than directly stored by Charlotte Collective.

  • Account information, where applicable, including login details, account preferences and settings.

  • Communications, including messages, enquiries, complaints, reviews and customer support correspondence.

  • Device and technical information, including your IP address, browser type, device type, operating system and similar identifiers.

  • Website usage information, including pages viewed, products viewed, items added to cart and interactions with our website.

  • Marketing preferences, including whether you have subscribed to marketing communications or changed your communication preferences.

We do not intentionally collect sensitive personal information unless it is necessary and permitted by law.

HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • directly from you when you place an order, create an account, subscribe to marketing, complete a form or contact us;

  • automatically when you use our website through cookies and similar technologies;

  • from Shopify and other service providers that help us operate our store;

  • from payment processors;

  • from fulfilment and shipping partners;

  • from advertising, analytics and marketing providers where permitted by law; and

  • from other third parties where you have authorised the disclosure or where permitted by applicable law.

HOW WE USE YOUR PERSONAL INFORMATION

We may use personal information to:

Provide Our Services

We use personal information to:

  • process and fulfil orders;

  • process payments;

  • provide shipping and tracking information;

  • manage returns, refunds and exchanges;

  • communicate with you regarding your order;

  • maintain customer accounts;

  • provide customer support; and

  • otherwise perform our obligations arising from your purchase.

Where GDPR applies, this processing is generally necessary to perform our contract with you or to take steps at your request before entering into a contract.

Security and Fraud Prevention

We may process information to:

  • detect fraudulent or unauthorised transactions;

  • protect our customers;

  • secure our website and systems; and

  • investigate suspected misuse of our Services.

Where GDPR applies, this may be based on our legitimate interests in protecting our business, customers and Services.

Legal and Regulatory Requirements

We may process and retain information where necessary to:

  • comply with tax, accounting and other legal obligations;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims; and

  • enforce our Terms of Service and other policies.

Marketing and Advertising

Where permitted by law, we may use personal information to send you marketing communications and inform you about products, promotions and offers that may interest you.

Where consent is legally required, we will rely on your consent.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us.

Withdrawing from marketing will not prevent us from sending necessary transactional communications such as order confirmations, delivery updates or customer service messages.

COOKIES & SIMILAR TECHNOLOGIES

We and our service providers may use cookies, pixels and similar technologies to operate and improve our website.

These technologies may be used to:

  • keep the website functioning;

  • remember your cart and preferences;

  • maintain security;

  • understand how visitors use our website;

  • measure website performance; and

  • provide or measure advertising where permitted.

Where applicable law requires consent for non-essential cookies, these technologies will be used in accordance with your consent choices.

You may also manage certain privacy preferences through our website's cookie or privacy controls.

Disabling certain cookies may affect the functionality of parts of the website.

HOW WE SHARE PERSONAL INFORMATION

We do not disclose personal information except where necessary for legitimate business purposes, where you have authorised us to do so, or where permitted or required by law.

We may share personal information with:

Shopify

Our online store is hosted by Shopify.

Shopify processes certain personal information when you visit our website, use our store or make a purchase in order to provide its e-commerce services.

Depending on the Shopify features enabled on our store, Shopify may also process information about interactions with Charlotte Collective, Shopify and other Shopify merchants to provide and improve its services.

Please refer to Shopify's Consumer Privacy Policy for further information about Shopify's processing practices.

Payment Providers

Payment information may be processed by third-party payment providers used to securely complete your purchase.

Fulfilment Partners and Suppliers

Charlotte Collective may use third-party suppliers and fulfilment partners to prepare and dispatch orders.

To fulfil your order, we may provide them with information necessary for delivery, such as:

  • your name;

  • shipping address;

  • contact information; and

  • products ordered.

Fulfilment partners are provided only with information reasonably necessary to fulfil your order.

Shipping and Logistics Providers

We may disclose delivery information to carriers, postal services and logistics companies responsible for transporting or delivering your order.

Service Providers

We may use third parties that provide services such as:

  • website hosting;

  • IT services;

  • customer support;

  • cloud storage;

  • analytics;

  • fraud prevention; and

  • business administration.

Marketing and Advertising Providers

Where permitted by law and subject to applicable consent requirements, information may be processed by marketing, analytics or advertising providers to measure campaigns or provide advertising.

Legal Requirements

We may disclose information where reasonably necessary to comply with law, legal proceedings, court orders or valid government requests, or to protect our legal rights or those of others.

Business Transfers

If Charlotte Collective or the business operating it is involved in a sale, restructuring, merger or transfer of business assets, personal information may be transferred as part of that transaction where permitted by law.

INTERNATIONAL DATA TRANSFERS

Charlotte Collective operates internationally and uses service providers, Shopify, payment providers, suppliers and fulfilment partners that may process personal information in countries different from the country in which you live.

As a result, personal information may be transferred or processed outside Australia and outside the European Economic Area (“EEA”).

Where GDPR applies and personal information is transferred outside the EEA, we will rely on an appropriate lawful transfer mechanism where required, such as:

  • an adequacy decision;

  • Standard Contractual Clauses; or

  • another lawful safeguard permitted under applicable data protection law.

Where the Australian Privacy Act and APPs apply, we will handle overseas disclosures in accordance with the applicable requirements of those laws.

Likely overseas recipient locations:
[INSERT THE COUNTRIES WHERE YOUR FULFILMENT SUPPLIERS AND OTHER RELEVANT SERVICE PROVIDERS RECEIVE CUSTOMER INFORMATION.]

DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

  • completing and managing your order;

  • providing customer support;

  • maintaining appropriate business and transaction records;

  • complying with tax, accounting and other legal obligations;

  • preventing fraud;

  • resolving disputes; and

  • establishing or defending legal claims.

The exact retention period may vary depending on the type of information, the reason it is held and applicable legal requirements.

When information is no longer required, we will delete, anonymise or otherwise dispose of it where reasonably practicable and legally permitted.

DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction.

We also use reputable third-party providers to process payments and operate our online store.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

YOUR PRIVACY RIGHTS

Depending on where you live and the applicable privacy law, you may have certain rights concerning your personal information.

These may include the right to:

  • request access to personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal information in certain circumstances;

  • restrict certain processing;

  • object to certain processing;

  • receive certain information in a portable format;

  • withdraw consent where processing is based on consent; and

  • lodge a complaint with an appropriate privacy or data protection authority.

These rights are subject to the conditions and exceptions contained in applicable law.

We may need to verify your identity before responding to a privacy request.

To exercise a privacy right, please contact us at:

infocharlottecollective@gmail.com

AUSTRALIAN PRIVACY RIGHTS

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to Charlotte Collective's handling of your personal information, you may request access to personal information held about you and request correction where information is inaccurate, out of date, incomplete, irrelevant or misleading.

If you believe your personal information has been mishandled, please contact Charlotte Collective first so that we can investigate your concern.

Where applicable, you may also have the right to lodge a privacy complaint with the Office of the Australian Information Commissioner (OAIC).

GDPR & EEA PRIVACY RIGHTS

Where GDPR applies to the processing of your personal information, you may have rights including:

  • access;

  • rectification;

  • erasure;

  • restriction of processing;

  • data portability;

  • objection to certain processing; and

  • withdrawal of consent at any time where consent is the legal basis for processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

CHILDREN'S PRIVACY

Our Services are not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where parental or guardian involvement or consent is legally required.

If you believe that a child has provided us with personal information improperly, please contact us so that we can investigate and take appropriate action.

THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

Charlotte Collective does not control the privacy practices of independent third-party websites.

We recommend reviewing the privacy policy of any third-party service before providing personal information to it.

PRIVACY COMPLAINTS

If you have concerns about how Charlotte Collective has handled your personal information, please contact us at:

infocharlottecollective@gmail.com

Please provide enough information for us to understand and investigate your concern.

We will review privacy complaints and respond within a reasonable timeframe.

If you remain dissatisfied, you may have the right to contact an applicable privacy or data protection authority in your jurisdiction.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our Services, privacy practices, technology or legal requirements.

The latest version will be published on this page and the “Last updated” date will be revised accordingly.

We encourage you to review this Privacy Policy periodically.

CONTACT US

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have a privacy-related complaint, please contact us:

Charlotte Collective
Email: infocharlottecollective@gmail.com