Privacy policy

5. PRIVACY POLICY

1. About this policy

This Privacy Policy explains how jthreads.net, trading as jthreads, collects, holds, uses and discloses personal information when you:

visit jthreads.net;
create an account;
place or enquire about an order;
subscribe to marketing;
contact us;
submit a review; or
otherwise interact with jthreads.

Jthreads uses Shopify to host and operate its online store.

Where the Privacy Act 1988 and Australian Privacy Principles apply to us, we handle personal information in accordance with those requirements.

Whether or not a particular privacy law applies, we will handle personal information as described in this policy.

2. Personal information we collect

Depending on how you interact with us, we may collect:

Identity and contact information

name;
email address;
telephone number;
billing address; and
delivery address.

Order and transaction information

products viewed or ordered;
size, colour and product preferences;
order history;
delivery and tracking information;
returns, exchanges and refunds;
discount use; and
communications about an order.

Payment information

Payments are processed by Shopify and other payment providers.

We may receive transaction confirmations, payment status, payment method type and limited payment details. We generally do not receive or store full payment-card numbers.

Account information

account login details;
saved addresses;
preferences; and
account activity.

Device and usage information

IP address;
browser type;
device information;
approximate location derived from an IP address;
pages viewed;
links selected;
referral source;
session and cookie identifiers; and
interactions with the website and advertisements.

Communications and customer content

customer-service enquiries;
feedback;
reviews;
photographs;
survey responses; and
social-media interactions.

Fraud and security information

information used to verify transactions;
suspected fraudulent activity;
login and access records; and
information required to protect the website and customers.

3. How we collect information

We may collect personal information:

directly from you;
automatically through the website, cookies and similar technologies;
from Shopify;
from payment, delivery, production and fulfilment partners;
from analytics and advertising providers;
from social-media services;
from fraud-prevention providers; and
where permitted, from publicly available sources.

4. Why we use personal information

We may use personal information to:

process and fulfil orders;
produce and inspect products;
take payment;
arrange shipping and delivery;
communicate about an order;
provide customer support;
administer returns, exchanges and refunds;
maintain customer accounts;
detect and prevent fraud;
protect the website and our legal rights;
personalise the shopping experience;
analyse website and product performance;
improve products and services;
request and display reviews;
send marketing where permitted;
comply with legal, tax, accounting and regulatory obligations;
manage disputes and claims; and
carry out a genuine business sale, restructure or transfer.

We use personal information only where we have a lawful basis or permission to do so.

5. Shopify

Our store is hosted by Shopify.

Shopify processes personal information to provide ecommerce, checkout, account, analytics, fraud-prevention, advertising and related services.

Information submitted through the website may be processed by Shopify and its service providers in Australia and other countries.

Shopify may separately process information for its own purposes as described in Shopify’s consumer privacy documentation and privacy portal.

6. When we disclose personal information

We may disclose personal information to:

Shopify;
payment processors;
production and embroidery or printing partners;
fulfilment providers;
Australia Post and other carriers;
information-technology and cloud-service providers;
website analytics providers;
marketing and advertising providers;
customer-support providers;
professional advisers;
government, regulatory and law-enforcement bodies where legally required;
parties involved in a business sale, merger or restructure; and
other parties with your direction or consent.

We do not disclose personal information to advertisers merely so that they can read your private communications with us.

We do not sell customer contact lists.

Some privacy laws use broad definitions of “sale” or “sharing” that may include certain targeted-advertising activities. Where those laws apply, you may have additional opt-out rights.

7. Overseas disclosure and processing

Our service providers may store or process information outside Australia, including in countries where Shopify, payment providers, analytics providers, production partners or carriers operate.

Privacy protections in another country may differ from those in Australia.

Where required by applicable law, we take reasonable steps or use recognised contractual or legal mechanisms to protect information transferred internationally.

8. Cookies and similar technologies

The website uses cookies, pixels, local storage and similar technologies to:

keep the website functioning;
remember cart and account information;
support secure checkout;
understand website usage;
measure advertising performance;
personalise content; and
detect fraud or misuse.

You may be able to manage non-essential cookies through a cookie banner, privacy settings or your browser.

Disabling certain cookies may affect website functionality.

Where required, non-essential advertising or analytics cookies will be used only with the appropriate consent.

9. Marketing communications

We may send promotional emails or messages where:

you have consented;
the communication is otherwise permitted by law; or
we have another valid legal basis.

You can unsubscribe using the link in a marketing email or by contacting us.

Unsubscribing from marketing will not prevent us from sending transactional communications about an order, account, refund, security issue or customer-service enquiry.

We comply with applicable direct-marketing laws, including the Spam Act 2003 where it applies.

10. Security

We take reasonable administrative, technical and organisational measures to protect personal information from:

misuse;
interference;
loss;
unauthorised access;
unauthorised modification; and
unauthorised disclosure.

No method of electronic storage or transmission is completely secure.

You are responsible for protecting your account credentials and should contact us if you suspect unauthorised account activity.

11. Data breaches

Where the Privacy Act’s Notifiable Data Breaches scheme or another applicable breach-notification law applies, we will assess suspected eligible breaches and provide notifications where legally required.

12. Retention

We retain personal information only for as long as reasonably necessary for purposes including:

fulfilling orders;
maintaining customer accounts;
supporting warranties and consumer claims;
meeting taxation and accounting obligations;
preventing fraud;
resolving disputes; and
complying with legal requirements.

When information is no longer required, we will take reasonable steps to delete it or de-identify it, subject to technical and legal limitations.

13. Access and correction

You may contact us to request:

access to personal information we hold about you; or
correction of information that is inaccurate, incomplete or out of date.

We may need to verify your identity before completing a request.

We may decline or limit a request where permitted by law and will explain the reason where required.

14. Additional privacy rights

Depending on where you live, you may have additional rights, including rights to:

access personal information;
correct personal information;
delete certain information;
restrict or object to processing;
receive a portable copy of information;
withdraw consent;
opt out of targeted advertising or certain sharing; or
complain to a privacy regulator.

These rights are not absolute and may be subject to legal exceptions.

We may require identity verification before processing a request.

15. Children

The website is not directed to children who are not legally able to enter online transactions.

We do not knowingly collect personal information directly from children without appropriate authority.

A parent or guardian who believes a child has provided personal information may contact us to request its deletion.

16. Third-party websites

The website may contain links to third-party websites and social-media services.

Their privacy practices are governed by their own policies. We are not responsible for the privacy practices of an independent third party merely because we link to it.

17. Privacy complaints

Please describe:

the conduct you are concerned about;
the information involved; and
the outcome you are seeking.

We will acknowledge and investigate the complaint within a reasonable time.

Where the Privacy Act applies and you are not satisfied with our response, you may be entitled to complain to the Office of the Australian Information Commissioner.

Customers in other jurisdictions may also be entitled to contact their local privacy or data-protection authority.