Privacy Policy

Last updated: August 6, 2025

Michelle & Mary operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a carefully curated shopping experience (the “Services”). Michelle & Mary is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of your personal information. By using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and share your information.

We collect, hold, and use personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs) of Australia . For more information or to lodge a complaint, you can visit the Office of the Privacy Commissioner at www.privacy.org.

“Personal information” means information that identifies or can reasonably be linked to you. Anonymized or pseudonymized data that cannot identify you is not included. Depending on how you interact with our Services and applicable laws, we may collect or process the following categories:

Contact details: name, billing address, shipping address, phone number, email. Financial information: payment card and account numbers, transaction details, payment confirmations.

Account information: username, password, security questions, preferences, and settings.

Transaction information: items viewed, cart activity, wish list, purchases, returns, cancellations.

Communications: messages you send us (e.g., support inquiries).

Device & usage information: IP address, browser type, network connection, unique identifiers, and how you navigate and interact with the Services.

We may obtain your personal information from:

Directly from you: when you create an account, place an order, contact us, or otherwise provide information.

Automatically: via cookies and similar technologies when you visit or use our website and apps.

Third parties: our service providers (e.g., Shopify, payment processors, logistics partners, data analytics), marketing and advertising partners, and other external parties. 

Depending on your interaction with us, we may use your personal information for: Providing & improving the Services Processing your orders, payments, shipping, and returns. Creating and managing your account and preferences. Sending order and delivery notifications. Personalizing your shopping experience (e.g., product recommendations). Marketing & promotion Sending newsletters, offers, and advertising via email, SMS, or post. Displaying targeted ads on our site and elsewhere, based on your past purchases and site activity. Security & fraud prevention Authenticating accounts, detecting and investigating suspicious activity. Ensuring a secure shopping and payment environment. Customer support Responding to inquiries and providing assistance via email or other channels. Legal compliance & enforcement Complying with laws, regulatory requests, and court orders. Enforcing our terms, policies, and protecting our rights.

We retain your personal information no longer than necessary for the purposes set out in this policy, unless a longer retention period is required by law. Examples of maximum retention periods:

Order records & invoices: 7 years

Marketing preferences: until you withdraw your consent

In the event of a data breach that could cause “serious harm,” we will notify affected individuals and the Privacy Commissioner as soon as practicable, and no later than 72 hours after becoming aware of the breach, describing the nature of the breach and the steps taken.

Your data may be transferred to and processed in countries outside Australia. We take reasonable steps to ensure that such recipients maintain a level of protection comparable to the requirements of the Privacy Act 2020, for example through standard contractual clauses or other appropriate safeguards.

Depending on where you reside, you may exercise the following rights at no cost unless otherwise permitted by law:

Access: request copies of the personal information we hold about you.

Correction: ask us to correct inaccurate or incomplete data.

Deletion: request deletion of your personal information.

Portability: request transfer of your data to another service.

Restriction or objection: to certain processing activities.

Withdraw consent: without affecting the lawfulness of prior processing.

Opt out: of the sale or sharing of your data for targeted advertising.

To exercise your rights, please send your request to:

📧 Email: info@michelle-mary.com

We will respond within 1 business days.

If you believe we have breached your privacy rights, you may lodge a complaint with us at info@michelle-mary.com or with the Office of the Privacy Commissioner at www.privacy.org. We will not discriminate against you for exercising your rights.

We do not knowingly collect personal information from children under 16 without parental or guardian consent. If you believe we have collected data from a child in breach of this policy, please contact us at the email above.

We may update this Privacy Policy for operational, legal, or technical reasons. Any changes will be reflected by updating the “Last updated” date above and, where required by law, notifying you.