Privacy policy

Privacy Policy

Last updated: July 26, 2026

Athena's Luxe Pawstry ("we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services (the "Services"), to provide you with a curated shopping experience. The Services are hosted by Shopify Inc. ("Shopify") and are only available to customers in Australia. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services or otherwise communicate with us. By using the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described below. If you do not agree with these terms, please do not use the Services.


Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you. Personal information does not include de-identified or anonymous data.

We may collect or process the following categories of personal information, depending on how you interact with the Services: Contact details such as your name, address, billing and shipping address, phone number, and email address. Financial information such as credit or debit card numbers, payment confirmation, transaction details, and other payment-related data. Note that payment processing is handled by Shopify Payments and other PCI-DSS compliant providers, and we do not store full card details. Account information such as your username, password, security questions, preferences, and settings. Transaction information such as the items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, along with your past transaction history. Communications such as the information you provide when contacting us, including customer support inquiries. Device and usage information such as your IP address, browser type, device identifiers, and how you interact with the Services, including pages visited and time spent.

We do not knowingly collect personal information from children under 16. If we discover we have collected such information, we will delete it immediately.


How We Collect Personal Information

We collect personal information from the following sources: Directly from you when you create an account, make a purchase, contact us, or provide information via forms or surveys. Automatically through cookies, logs, and similar technologies when you use the Services. From third parties such as Shopify, which hosts the Services and processes data to enable functionality like order fulfillment and payments. Service providers such as payment processors like Shopify Payments or other PCI-DSS compliant providers, shipping partners including Australia Post or other Australian-based fulfillment services, and customer support tools to assist with inquiries or disputes. Marketing and advertising partners such as Shopify and third-party ad networks like Google or Meta, which may use your data to show targeted ads.

Where practicable, we allow you to interact with us anonymously or using a pseudonym, for example for general inquiries. However, this may limit access to certain Services such as account creation or purchases.


How We Use Your Personal Information

We use your personal information for the following purposes: To provide, tailor, and improve the Services, including processing payments, fulfilling orders, managing your account and preferences, arranging shipping, handling returns or exchanges, and personalizing your experience such as through product recommendations. To comply with our contractual obligations to you. For marketing and advertising, including sending promotional communications via email, SMS, or postal mail unless you opt out, and showing targeted advertisements on the Services or third-party platforms like Facebook or Google. You may opt out of targeted advertising by using the unsubscribe link in our emails, adjusting your preferences in your account settings, or contacting us at admin@athenasluxepawstry.com.au. For security and fraud prevention, including authenticating your account, securing payments, and detecting or preventing fraudulent or illegal activity. To protect the security of the Services and our users. For legal compliance, including complying with Australian laws such as the Privacy Act 1988 and the Australian Privacy Principles, responding to law enforcement requests or other legal obligations, and enforcing our Terms of Service or policies. For communications, including providing customer support, responding to inquiries, and sending non-promotional updates such as order confirmations or shipping notifications.

We will not use or disclose your personal information for purposes other than those described above without your consent, unless required or permitted by law.


How We Disclose Personal Information

We may disclose your personal information to third parties only as described below or with your consent. To service providers such as Shopify, which hosts the Services and processes data to enable functionality like payments and order management. To payment processors such as Shopify Payments or other PCI-DSS compliant providers. To shipping partners including Australia Post or other Australian-based fulfillment services. To customer support tools to assist with inquiries or disputes. To marketing and advertising partners such as Shopify and third-party ad networks like Google or Meta, which may use your data to show targeted ads. You have the right to opt out of targeted advertising as described in the Your Rights and Choices section below. We do not sell your personal information under the definition of the Privacy Act 1988. To comply with legal and regulatory requirements, including Australian laws, court orders, or requests from law enforcement or government agencies, and to protect our rights or the rights of others such as for fraud prevention. In connection with a business transfer such as a merger, acquisition, or sale of assets, your personal information may be transferred to the new entity, and we will notify you of any such change. When you explicitly request or authorize disclosure, such as sharing your address with a shipping partner.

All third-party service providers are contractually obligated to use your personal information solely for the purposes described above and in accordance with this Privacy Policy and applicable Australian laws.


Cross-Border Data Transfers

While our Services are only available to Australian customers, some personal information may be processed or stored by third-party providers outside Australia, such as Shopify’s servers in Canada or the United States. Shopify is certified under the EU-US Data Privacy Framework and the UK Extension, which provides adequate safeguards for data transferred to the US. For other jurisdictions, we rely on Standard Contractual Clauses or other legally recognized mechanisms to ensure your data is protected to the standard required by Australian law. We will only transfer your personal information to countries with comparable privacy protections or under contracts that require the recipient to comply with Australian privacy standards.


Security and Retention of Your Information

We implement reasonable technical and organizational safeguards to protect your personal information, including encryption such as TLS for data in transit and encryption at rest for sensitive data, access controls to limit who can view or modify your data, PCI-DSS compliance for payment processing, and regular security audits and monitoring for breaches. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to provide the Services, such as maintaining order history for 7 years for tax and legal compliance, comply with Australian legal obligations such as tax records and consumer law, resolve disputes or enforce our policies, and fulfill legitimate business purposes such as customer service and marketing.

If we no longer need your personal information, we will take reasonable steps to destroy or de-identify it in accordance with the Australian Privacy Principles. If we receive personal information we did not solicit, such as misdirected emails, we will destroy or de-identify it as soon as practicable, unless it is permitted to be retained under the Australian Privacy Principles or we determine that the information is relevant to our functions.


Children’s Data

The Services are not intended for children under 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected your child’s personal information, please contact us at admin@athenasluxepawstry.com.au to request deletion. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we share or sell, as defined under Australian law, personal information of individuals under 16 years of age.


Your Rights and Choices

Under the Privacy Act 1988, you may have the following rights in relation to your personal information. You have the right to request access to a copy of the personal information we hold about you by contacting us at admin@athenasluxepawstry.com.au. You have the right to request corrections to inaccurate or outdated personal information by contacting us with details of the correction needed, and we will respond within a reasonable period, typically 30 days. You have the right to request deletion of your personal information, subject to legal requirements such as tax records, by contacting us. We may retain certain data where required by law. You have the right to opt out of promotional communications at any time by using the unsubscribe link in our emails or updating your account preferences. You have the right to request a copy of your data in a machine-readable format where feasible by contacting us, though this may not apply to all data types.

We will not charge you for making a request under the Australian Privacy Principles. We may require proof of identity before processing your request. We will not discriminate against you for exercising any of these rights.


Complaints

If you have a complaint about how we handle your personal information, first contact us at admin@athenasluxepawstry.com.au, and we will respond within 30 days.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website, updating the Last Updated date, and, if the change affects your rights or how we use your data, sending an email. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Policy.


Contact Us

For questions or requests regarding this Privacy Policy or your personal information, contact us at Athena's Luxe Pawstry, admin@athenasluxepawstry.com.au


Important Notes for Australian Customers

This policy complies with the Australian Privacy Principles under the Privacy Act 1988. Your personal information is primarily processed in Australia, with limited transfers to Shopify’s servers overseas, which are protected by Standard Contractual Clauses or adequacy decisions. We do not sell your personal information. You have the right to access, correct, or delete your data, subject to legal limitations.