Privacy policy

Last updated: May 31, 2026

Nested Raven is a registered Australian business (ABN: 46 569 035 891). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using our online store and website, including all related information, content, features, tools, products, and services (the "Services").

Our store is powered by Shopify, which enables us to provide these Services to you. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as described herein.

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. It does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories of personal information depending on how you interact with our Services:

  • Contact Details: Your name, billing address, shipping address, phone number, and email address.

  • Financial Information: Credit card, debit card, or other payment card details, financial account numbers, transaction details, form of payment, and payment confirmations.

  • Account Information: Your username, password, security questions, and saved preferences/settings.

  • Transaction Information: The items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past transaction history.

  • Communications: The information you choose to include when contacting us, such as when sending a customer support inquiry.

  • Device Information: Technical data about your device, browser, network connection, IP address, and other unique identifiers.

  • Usage Information: Data regarding how and when you navigate, interact with, or utilize our website and Services.

2. How We Collect Your Information

We collect personal information from the following sources:

  • Directly From You: When you create an account, make a purchase, or communicate directly with us.

  • Automatically Through Cookies: Data collected via your device when you browse our website, utilizing cookies and similar tracking technologies.

  • From Service Providers & Partners: Third parties who collect or process your personal information on our behalf to facilitate our business operations (such as payment gateways and fulfillment providers).

3. How We Use Your Personal Information

Depending on your interactions, we use your personal information to:

  • Provide, Tailor, and Improve the Services: To process payments, fulfill orders, arrange shipping, manage your account, facilitate returns, and customize your overall shopping experience.

  • Marketing and Advertising: To send promotional updates via email or text message, and to display targeted online advertisements based on your browsing and purchase history.

  • Security and Fraud Prevention: To authenticate your account, secure our payment ecosystem, and detect or investigate potentially fraudulent, unsafe, or malicious activity.

  • Customer Support: To respond to your inquiries and maintain an effective customer relationship.

  • Legal Compliance: To comply with applicable laws, respond to valid legal requests from law enforcement, or enforce our operational terms and policies.

4. How We Disclose Personal Information

In certain circumstances, we may share your personal information with authorized third parties for legitimate operational purposes, including:

  • With Shopify and Core Vendors: Partners who assist us with critical infrastructure, including payment processing, data analytics, cloud storage, and automated fulfillment and shipping.

  • With Marketing Partners: Third parties who support personalized advertising based on your online activity.

  • By Your Direct Request: When you explicitly direct or consent to a disclosure, such as utilizing localized shipping integrations or social media login widgets.

  • Corporate and Legal Protections: In connection with a business transaction (like a merger), to comply with subpoenas or warrants, or to defend the legal rights of our business and users.

5. Relationship with Shopify

Our Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of this website to optimize its infrastructure. Information you submit will be transmitted to and shared with Shopify and associated third parties—potentially located in countries outside your residence—to ensure reliable order fulfillment.

To optimize our business growth, we use enhanced Shopify features that incorporate data from your interactions across various store ecosystems. Under these specific optimization frameworks, Shopify acts as a data controller. To learn more about their data practices, you can review the official Shopify Consumer Privacy Policy.

6. Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from individuals under the age of majority. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at the details below to request immediate deletion.

7. Security and Retention

Please note that no security measures are entirely impenetrable, and we cannot guarantee "perfect security". We strongly advise against sending confidential or sensitive financial data through unencrypted communication channels.

We retain your personal information only for as long as necessary to maintain your account, fulfill active order contracts, comply with legal/tax obligations, or resolve active disputes.

8. Your Rights and Choices

Depending on your global location, you may possess specific statutory rights regarding your personal information, which may include the right to access, delete, correct, or port a copy of your data.

  • Targeted Advertising Opt-Outs: You may direct us not to share your data for personalized ads. We honor the Global Privacy Control (GPC) opt-out preference signal. If our system detects a GPC signal from your browser, we automatically treat it as a valid request to opt out of data sharing for that device.

  • Marketing Preferences: You can completely opt out of promotional emails at any time by clicking the "Unsubscribe" link located at the bottom of our digital communications.

9. International Transfers

We may store, process, and transfer your personal information outside of the country you reside in. If your data is transferred outside of the United Kingdom or the European Economic Area (EEA), we strictly rely on recognized legal protection mechanisms, including the European Commission’s Standard Contractual Clauses (SCCs), unless the destination country has been officially designated as providing an adequate level of data protection.

10. Contact Us

Should you have any questions regarding our data privacy practices, wish to file a complaint, or would like to exercise your statutory privacy rights, please contact us directly:

  • Email: support@nestedraven.com

  • Mailing Address: Nested Raven, 7 Quat Quatta Avenue, Ripponlea, VIC, 3185, Australia