Privacy Policy

Bummie Pty Ltd is the data controller responsible for your personal information. We are committed to handling your data responsibly and in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth), the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the California Consumer Privacy Act (CCPA) where applicable.

By using our website or purchasing our products, you acknowledge that your personal information will be handled as described in this policy.

Information you provide to us:

• Name, email address, shipping and billing address
• Phone number (if provided at checkout)
• Payment details — processed securely by our payment provider; we do not store full card details
• Messages and communications sent to us via email or contact forms
• Product reviews or feedback you choose to submit

Information collected automatically:

• IP address, browser type, device type, and operating system
• Pages visited, time spent on site, and referring URLs
• Cart and browsing behaviour on our website
• Cookie and tracking data (see Section 5)

We use your personal information to:

• Process, fulfil, and manage your orders
• Send order confirmations, shipping updates, and customer support communications
• Send marketing and promotional emails — only where you have given consent; you can unsubscribe at any time
• Improve our website, products, and customer experience
• Personalise your browsing and shopping experience
• Prevent fraud, detect abuse, and maintain the security of our platform
• Comply with our legal obligations and resolve disputes

We process your data on the following legal bases: performance of a contract (to fulfil your order), legitimate interests (to improve our services and prevent fraud), consent (for marketing communications), and legal obligation.

We do not sell your personal information to third parties. We may share your data with trusted service providers who assist us in operating our business:

• Payment processors (e.g., Stripe, PayPal) — to process transactions securely
• Shipping carriers (e.g., Australia Post, DHL, USPS) — to fulfil and deliver your orders
• E-commerce platform (Shopify) — to operate our online store
• Analytics providers (e.g., Google Analytics) — to understand website usage and improve performance
• Email marketing platforms (e.g., Klaviyo) — to send communications you have opted into
• Advertising platforms (e.g., Meta, Google Ads) — where you have consented to targeted advertising

All third-party service providers are contractually required to protect your data and may only use it for the specific purposes for which it was shared. We may also disclose your information where required by law or to protect our legal rights.

We use cookies and similar tracking technologies on our website. Cookies are small data files placed on your device that help us provide and improve our services.

We use the following types of cookies:

• Essential cookies — required for the website to function (e.g., shopping cart, login sessions)
• Analytics cookies — help us understand how visitors interact with our site
• Marketing cookies — used to deliver relevant advertising and measure campaign effectiveness
• Preference cookies — remember your settings and preferences for a better experience

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Where required by law, we obtain your consent before placing non-essential cookies.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

• Order and transaction records are retained for a minimum of 7 years in accordance with Australian taxation and financial record-keeping requirements.
• Marketing data is retained until you withdraw consent or request deletion.
• Account data is retained for the duration of your relationship with us and for a reasonable period thereafter.

When personal information is no longer needed, we securely delete or anonymise it.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data, subject to legal retention obligations
• Objection — object to certain processing activities, including direct marketing
• Restriction — request that we restrict processing of your data in certain circumstances
• Portability — request your data in a structured, machine-readable format
• Withdraw consent — withdraw any consent you have previously given at any time

To exercise any of these rights, contact us at privacy@bummie.com. We will respond within 30 days.

Our products are designed for use by parents and carers of toddlers. Our website is directed at adults and is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

If you believe we have inadvertently collected personal information from a child, please contact us immediately at privacy@bummie.com and we will take prompt steps to delete that information.

We implement industry-standard technical and organisational security measures to protect your personal information against unauthorised access, loss, misuse, or alteration. These include SSL/TLS encryption for data in transit and secure data storage practices.

Our payment processing is handled by PCI-DSS compliant providers. We do not store full credit card numbers on our systems.

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.

Our website may contain links to third-party websites, including social media platforms and partner sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Where required by law, we will notify you of significant changes via email or a prominent notice on our website.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

We take all privacy enquiries seriously and will respond within 30 days of receiving your request.