Headnoise Apparel Pty Ltd
ACN: 675 270 416
Email: admin@headnoisephilosophy.com
Website: headnoisephilosophy.com

Our Site (headnoisephilosophy.com, including our social media accounts) is hosted by Shopify Inc. References to "we", "us", "our" and "Headnoise" throughout this policy refer to Headnoise Apparel Pty Ltd.

We reserve the right to update this Privacy Policy at any time. Changes will be posted to our Site with an updated "last reviewed" date. Your continued use of our Site following any changes constitutes acceptance of those changes.

When you make a purchase, create an account, sign up to our mailing list, contact us, leave a review or interact with our Site, we may collect the following personal information:

• Identity information: name, date of birth (if provided)
• Contact information: email address, phone number, postal/billing/shipping address
• Payment information: credit/debit card details and billing address (processed securely by our payment providers — we do not store your full card details)
• Order information: products purchased, order history, returns and exchanges
• Account information: username, password, account preferences
• Communication information: emails, messages, reviews, feedback and survey responses you send to us
• Marketing preferences: your opt-in/opt-out status for email and SMS communications

When you visit our Site, we automatically collect certain information using cookies and similar technologies, including:

• Device information: IP address, browser type, operating system, screen resolution
• Usage information: pages visited, time spent on pages, referring/exit pages, clickstream data
• Location information: approximate geographic location based on IP address

This information helps us understand how customers use our Site, detect and prevent fraud, and improve your experience. We do not respond to "Do Not Track" (DNT) browser signals.

We may receive information about you from third parties, including Shopify (our ecommerce platform), payment processors, analytics providers and marketing partners. Any information received from third parties is treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided by third parties.

We collect and use your personal information for the following purposes:

• Providing products and services: processing orders, arranging shipping, managing returns and exchanges, maintaining your account
• Communicating with you: sending order confirmations, shipping notifications, responding to enquiries and providing customer support
• Marketing and advertising: sending promotional communications by email or SMS where you have given consent (see Section 6.0)
• Improving our Site and services: analysing usage patterns, conducting research, testing new features and improving the customer experience
• Security and fraud prevention: detecting, investigating and preventing fraudulent or suspicious activity
• Legal compliance: meeting our obligations under Australian law, including tax reporting and responding to lawful requests from government authorities

We will only use your personal information for the purpose for which it was collected, or for a directly related purpose you would reasonably expect.

Where practicable, you have the option of not identifying yourself or using a pseudonym when dealing with us. However, if you choose not to provide certain personal information, we may not be able to process your order, respond to your enquiry or provide you with our full services.

We may disclose your personal information to the following categories of third parties, only to the extent necessary to provide our services:

• Shopify Inc.: our ecommerce platform provider, which processes and stores order data on our behalf (customer data is received by Shopify Commerce Singapore Pte Ltd)
• Payment processors: to process your payment securely (e.g. Shopify Payments, PayPal). All payment gateways adhere to PCI-DSS standards.
• Shipping and logistics partners: to fulfill and deliver your order (e.g. Australia Post)
• Analytics providers: to help us understand Site usage (e.g. Google Analytics)
• Marketing platforms: to manage email and SMS communications (e.g. Klaviyo, Yotpo)
• Social media platforms: if you interact with our social media accounts, those platforms collect information under their own privacy policies (e.g. Meta/Instagram)
• Professional advisors: legal, accounting and auditing professionals as required
• Law enforcement or government agencies: where required by law or to protect our rights, safety or property

We do not sell your personal information to third parties. We may share de-identified or aggregated data that cannot reasonably be used to identify you.

We will only send you marketing communications where you have given express consent (opt-in). In accordance with the Spam Act 2003 (Cth):

• Every marketing email and SMS will clearly identify Headnoise Apparel Pty Ltd as the sender.
• Every message will include a functional unsubscribe or opt-out mechanism.
• Unsubscribe requests will be processed within 5 business days.
• The unsubscribe mechanism will remain functional for at least 30 days after the message is sent.
• Your consent to receive SMS marketing is not a condition of purchase.

SMS: If you opt in to SMS marketing, you can opt out at any time by replying STOP to any message. Reply HELP for assistance. Message frequency varies. Standard message and data rates may apply.

Transactional communications: Order confirmations, shipping notifications and account alerts are not marketing messages and will be sent regardless of your marketing preferences.

To opt out of marketing, click the unsubscribe link in any email, reply STOP to any SMS, or contact us at admin@headnoisephilosophy.com.

Our Site uses cookies and similar technologies (pixels, web beacons, local storage) to:

• Enable essential Site functionality (shopping cart, checkout, account login)
• Remember your preferences and settings
• Analyse Site traffic and usage patterns
• Measure the effectiveness of our marketing campaigns
• Personalise your experience and show relevant content

Technologies we use:

• Shopify analytics: Site performance and checkout analytics
• Google Analytics 4: traffic analysis and audience insights
• Meta (Facebook/Instagram) Pixel: advertising measurement and audience targeting

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Blocking cookies may affect your ability to use some features of our Site. For more information about cookies and how to manage them, visit allaboutcookies.org.

In providing our services, your personal information may be disclosed to, or stored by, organisations located outside Australia. This includes:

• Singapore: Shopify Commerce Singapore Pte Ltd (ecommerce platform and data processing)
• United States: Shopify Inc. (platform services), Google LLC (analytics), Meta Platforms Inc. (advertising), payment processors, email/SMS marketing platforms
• Other countries: where our shipping, payment or technology partners operate

Under Australian Privacy Principle 8, we take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the APPs. By providing your personal information to us, you consent to this disclosure. We remain accountable for any overseas recipient's handling of your information.

We take reasonable technical and organisational steps to protect your personal information from misuse, loss, unauthorised access, modification or disclosure. These measures include:

• Encryption of data in transit (SSL/TLS)
• Secure hosting through Shopify's PCI-DSS compliant infrastructure
• Restricted access to personal information on a need-to-know basis
• Regular review of our security practices

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Retention: We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g. tax records, legal obligations). When your information is no longer required, we will take reasonable steps to destroy or de-identify it.

In the event of a suspected data breach involving your personal information, we will:

• Conduct an assessment within 30 days to determine whether the breach is likely to result in serious harm
• If serious harm is likely, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable
• Take all reasonable steps to contain the breach and reduce potential harm

This is in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988.

Our Site and services are not directed to children under 18 years of age, and we do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin@headnoisephilosophy.com and we will take steps to delete that information.

Access: You may request a copy of the personal information we hold about you at any time. We will respond within 30 days. There is no charge for making a request, though we may charge a reasonable fee for providing access if the request is excessive or repetitive.

Correction: If you believe any personal information we hold about you is inaccurate, incomplete or out of date, you can request that we correct it. You can also update your details directly through your account on our Site.

Deletion: You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected. Some information may be retained where required by law.

Complaints: If you have a concern about how we have handled your personal information, please contact us at admin@headnoisephilosophy.com. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

Our store is hosted on Shopify Inc. Shopify provides us with the online ecommerce platform that allows us to sell our products and services. Your data is stored through Shopify's data storage, databases and the general Shopify application on secure servers behind a firewall.

Payment: If you use a direct payment gateway to complete your purchase, Shopify stores your payment data in encrypted form through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as necessary to complete your transaction.

For more information, see Shopify's Privacy Policy and Terms of Service.

Our Site is operated from Australia and is governed by Australian law. If you access our Site from outside Australia, your information may be transferred to, stored in and processed in Australia.

European Union / United Kingdom visitors: If you are located in the EU or UK and the General Data Protection Regulation (GDPR) applies to our processing of your data, you may have additional rights including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise any of these rights, contact us at admin@headnoisephilosophy.com.

United States / California residents: If you are a California resident and the California Consumer Privacy Act (CCPA) applies, you may have additional rights including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise any rights, contact us at admin@headnoisephilosophy.com.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Headnoise Apparel Pty Ltd
ACN: 675 270 416
Email: admin@headnoisephilosophy.com
Website: headnoisephilosophy.com

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.