Privacy policy

Last updated: 5 January 2026

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our website (wigglystuff.com.au) or shop with us. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using our services, you agree to this policy.

1. Who We Are

Wiggly Stuff is an online store based in Victoria, Australia, selling 3D-printed figurines.
Our store is hosted on Shopify, which provides the e-commerce platform that lets us sell our products and process orders.
We are the “data controller” — we decide how and why your personal information is processed.

2. Information We Collect

We only collect the information necessary to fulfil your order, provide support, and improve your experience:

Identity & Contact Details: Name, email, phone number, billing, and shipping address.
Payment Information: Processed securely by our payment providers (e.g., Shopify Payments/Stripe, PayPal, Afterpay). We do not store your full card details.
Order Details: Items purchased, order history, transaction amounts, and dates.
Device, Usage & Tracking Data: IP address, browser type, pages viewed, cookies, and tracking pixels (e.g., Google Analytics, Meta Pixel, Pinterest Tag, TikTok Pixel) used for analytics, advertising, and remarketing.
Newsletter Information: Email address if you subscribe to marketing emails (optional).
Correspondence: Messages sent to us by email, contact form, or social media.

We do not collect sensitive information (e.g., health data, political opinions) and we do not knowingly collect data from anyone under 18.

3. How We Use Your Information

Order Fulfilment: Processing payments, shipping your order, providing tracking, and sending order updates.
Customer Support: Responding to questions, troubleshooting issues, and providing help.
Website Analytics & Improvements: Using tools like Google Analytics to understand visitor behaviour and improve our site and product offering.
Marketing & Remarketing: Showing you relevant ads on platforms like Google, Meta/Facebook, Pinterest, and TikTok, based on your interactions with our site (only with your consent where required).
Fraud Prevention & Security: Helping detect and prevent fraud, abuse, and unauthorised access (including via Shopify and payment provider security tools).
Legal & Compliance: Keeping records for tax, accounting, and legal obligations.

4. Sharing Your Information

We do not sell your personal data. We share it only with trusted service providers who need it to deliver our services, including:

E-commerce Platform: Shopify (store hosting, checkout, order management).
Payment Processors: Shopify Payments/Stripe, PayPal, Afterpay — to process transactions securely.
Shipping Partners: Australia Post via SellerDash — to create shipping labels, lodge parcels, and provide tracking.
Destination Postal Networks (International Orders): For international deliveries, your name, address, and tracking information may be shared with the destination country’s postal operator or delivery network for final-mile delivery and tracking (e.g., NZ Post, SingPost, USPS, Canada Post) where applicable.
Marketing & Analytics Platforms: Google, Meta/Facebook & Instagram, Pinterest, TikTok — to run analytics, advertising, and remarketing campaigns.
Email & Marketing Providers: Mailchimp, Shopify Email, Klaviyo — to send newsletters, marketing communications, and automated messages (where applicable and based on your preferences).
Legal Authorities: When required by law or to protect our rights.

All service providers must protect your data and use it only for the purpose we specify.

5. Data Security

We use SSL encryption to protect information during transfer.
Payments are processed by PCI-DSS compliant providers.
Access to personal data is restricted to authorised staff who need it for business purposes.
We keep your data only as long as needed for legal, accounting, or operational reasons.
Data Breach Response: In the unlikely event of a data breach involving your personal information, we will take steps to contain the breach, assess the risks, notify affected individuals where required by law, and report the breach to the Office of the Australian Information Commissioner (OAIC) if it meets the notification threshold.

6. Cookies & Tracking Technologies

We use cookies, tracking pixels, and similar technologies to:

Enable essential site functions (e.g., keeping your shopping cart active and enabling checkout).
Measure performance and understand visitor behaviour (e.g., Google Analytics).
Personalise and deliver ads through remarketing (e.g., Meta/Facebook Pixel, TikTok Pixel, Pinterest Tag).

You can disable cookies in your browser or adjust ad preferences in your account settings on each platform. Some site features may not work without cookies.

7. Your Rights

Access & Correction: Request a copy of your personal data or correct any errors.
Deletion: Ask us to delete your data where legally permitted.
Marketing Opt-Out: Unsubscribe from marketing emails at any time by clicking the link in our emails.
Complaints: Contact us at privacy@wigglystuff.com.au if you have concerns about our handling of your information.
External Complaints: If you are not satisfied with our response to a privacy concern, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

If you live outside Australia, you may also have additional privacy rights under your local laws. We will respond to privacy requests in line with applicable requirements.

8. International Data Transfers

We are based in Australia, but some of our service providers (including Shopify, payment processors, analytics, advertising platforms, and email/marketing providers) may store or process personal information in other countries (including the United States and other regions where they operate).

If you place an order for delivery outside Australia (for example to New Zealand, Singapore, Canada, or the United States), your personal information may be processed overseas to enable shipping, tracking, customer support, marketing communications (if you opt in), and payment processing.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure the recipient handles the information in a way that is consistent with this Privacy Policy and applicable privacy laws. In some circumstances, overseas recipients may not be subject to the Australian Privacy Principles, and you acknowledge that by using our services and providing your information.