Privacy Policy

At OUTERSPRING, we believe privacy is an essential part of a considered luxury shopping experience.

We are committed to respecting your privacy and handling your personal information responsibly, transparently and securely.

This Privacy Policy explains how OUTERSPRING ("we", "us" or "our") collects, uses, stores, shares and protects your personal information when you visit our website, create an account, make a purchase, contact our Customer Care team or otherwise interact with our services.

OUTERSPRING operates from Australia and offers a curated selection of luxury fashion, accessories and lifestyle products to customers internationally.

Our privacy practices are designed to comply with applicable privacy and data protection laws, including the Australian Privacy Act 1988 and Australian Privacy Principles where applicable, and relevant international data protection requirements.

By using our website, you acknowledge that you have been provided with this Privacy Policy.

Business Information

Trading Name: OUTERSPRING
Legal Entity: OUTERSPRING
ABN: [Australian Business Number]
Contact: our contact form

We may collect personal information necessary to provide our products and services, process transactions and improve your shopping experience.

2.1 Personal and Contact Information

When you create an account, place an order or contact us, we may collect:

• Full name.
• Email address.
• Telephone number.
• Billing and shipping addresses.
• Account login and profile information.
• Communication preferences.

2.2 Order and Transaction Information

When you make a purchase, we may collect:

• Products purchased and order history.
• Order values, currency and transaction details.
• Payment status and payment method information.
• Shipping and delivery information.
• Returns, refunds and exchange requests.
• Customer service correspondence.

Payments are processed through secure third-party payment providers. We do not ordinarily receive or store your full payment card number or card security code.

2.3 Device and Browsing Information

When you visit our website, certain technical information may be collected automatically, including:

• IP address.
• Browser type and version.
• Device type and operating system.
• Approximate geographic location derived from technical information.
• Pages visited and products viewed.
• Referral sources and website interactions.
• Cookie identifiers and similar tracking information.

2.4 Marketing and Preference Information

Where applicable, we may collect information about:

• Newsletter subscriptions.
• Marketing preferences.
• Products added to wishlists.
• Shopping interests and preferences.
• Responses to promotions and campaigns.
• Interactions with our marketing communications.

2.5 Customer Communications

When you contact us, we may retain relevant communications, including emails, enquiries, feedback and support requests, to respond to you and maintain appropriate business records.

We use personal information for legitimate business purposes, including:

Order Processing and Fulfilment

To process payments, confirm orders, coordinate supplier fulfilment, arrange deliveries and manage returns or refunds.

Customer Service

To respond to enquiries, resolve issues, provide order updates and assist with purchases.

Account Management

To create and maintain customer accounts, authenticate users and manage account preferences.

Website Improvement

To understand how visitors use our website, improve navigation, monitor performance and enhance the shopping experience.

Marketing and Communications

To send promotional communications, product updates and special offers where permitted by law and consistent with your preferences.

Security and Fraud Prevention

To detect suspicious transactions, prevent unauthorised activity and protect our customers and business.

Legal and Regulatory Compliance

To maintain records, comply with applicable laws, respond to lawful requests and resolve disputes.

We do not sell physical customer contact lists to third parties.

Our online store is powered by Shopify, which provides ecommerce infrastructure, hosting, checkout functionality and related services.

When you use our website, certain personal information may be processed by Shopify and its authorised service providers to operate the store.

Depending on the features enabled, Shopify may process information relating to orders, accounts, payments, device activity, fraud prevention and customer interactions.

Shopify's processing activities are subject to its applicable privacy notices and contractual arrangements.

For more information, please visit: https://www.shopify.com/legal/privacy

Payments made through OUTERSPRING are processed by the payment service providers available at checkout.

These providers may collect and process information necessary to authorise transactions, prevent fraud, issue refunds and comply with financial regulations.

We use appropriate technical and organisational measures to protect transaction-related information under our control.

We do not ordinarily store complete payment card details on our own systems.

Payment providers may have their own privacy policies governing their handling of personal information.

We may share personal information with trusted third parties where reasonably necessary to operate our business.

These may include:

Luxury Suppliers and Fulfilment Partners

We work with international suppliers, distributors and boutiques that may require customer names, delivery addresses, contact details and order information to fulfil purchases.

Shipping and Logistics Providers

Delivery companies and customs intermediaries may receive information necessary to transport, clear and deliver orders.

Payment Service Providers

Payment processors may receive transaction-related information to process purchases and refunds.

Technology and Hosting Providers

Shopify, website applications and technical service providers may process information required to operate our online store.

Marketing and Analytics Providers

Where enabled and permitted, marketing and analytics services may process website activity and campaign-related information.

Professional Advisers and Authorities

We may disclose information to accountants, legal advisers, regulators or government authorities where necessary and lawful.

We require service providers to handle personal information appropriately through applicable contractual, technical or organisational safeguards.

OUTERSPRING operates from Australia and sources products through international luxury suppliers and boutiques.

As a result, personal information may be disclosed to or processed by organisations located outside Australia.

These may include suppliers, delivery providers, ecommerce service providers and technology partners.

Information may be processed in Italy, other European countries, the United States or other locations where our service providers operate.

Where applicable, we take reasonable steps to ensure overseas recipients handle personal information consistently with relevant legal requirements.

For customers in jurisdictions with additional data transfer protections, we will use appropriate safeguards where required.

Our website may use cookies and similar technologies to provide essential functionality and improve the shopping experience.

These technologies may support:

• Shopping cart functionality.
• Account authentication.
• Website security.
• Remembering customer preferences.
• Website performance and analytics.
• Marketing measurement and advertising.

Essential Cookies

These support necessary website functions, including checkout, security and shopping cart operations.

Analytics Cookies

These help us understand website usage and improve performance.

Marketing Cookies

Where enabled, these may help measure advertising effectiveness and display relevant marketing content.

You may manage cookies through your browser settings and any cookie preference controls made available on our website.

Where applicable law requires consent for non-essential cookies, we will seek that consent before using them.

Disabling certain cookies may affect website functionality.

Where you subscribe or otherwise lawfully agree to receive marketing communications, we may send information about:

• New designer collections.
• Product launches.
• Exclusive offers.
• Promotions and seasonal events.
• OUTERSPRING news and updates.

You may unsubscribe from promotional emails at any time using the unsubscribe link provided in our communications or by contacting us.

We will honour applicable marketing consent and opt-out requirements.

Unsubscribing from promotional communications does not prevent us from sending essential transactional messages, including order confirmations, delivery updates and customer service responses.

We may use browsing activity, purchase history and stated preferences to provide relevant product recommendations and improve the shopping experience.

Where permitted by law, we may also use information to measure or personalise advertising.

Certain advertising providers may use cookies or similar technologies to understand interactions with our website.

Where required, we will provide relevant choices, notices and consent mechanisms.

We do not use automated decision-making to make decisions producing legal or similarly significant effects on individuals without providing any notices or protections required by applicable law.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Fulfilling orders and providing customer service.
• Managing accounts and preferences.
• Processing returns and refunds.
• Meeting tax, accounting and recordkeeping obligations.
• Preventing fraud and resolving disputes.
• Complying with legal requirements.

Retention periods may vary depending on the type of information and applicable laws.

When information is no longer required, we take reasonable steps to delete, de-identify or securely dispose of it, subject to legal retention obligations.

We take reasonable technical, administrative and organisational measures to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

These measures may include:

• Secure ecommerce hosting.
• Encrypted data transmission.
• Restricted access to customer information.
• Appropriate account access controls.
• Secure payment processing arrangements.
• Monitoring and review of security practices.

Although we take reasonable precautions, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If you believe your personal information or account has been compromised, please contact us promptly.

Depending on your location and applicable privacy laws, you may have rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Withdraw consent where processing relies on consent.
• Object to or restrict certain processing activities.
• Request data portability where applicable.
• Opt out of certain marketing or advertising activities.

These rights may be subject to legal exceptions and verification requirements.

To exercise an applicable right, please contact us using the details provided at the end of this policy.

We will respond within the timeframe required by applicable law.

Where the European Union General Data Protection Regulation (GDPR) or UK GDPR applies, OUTERSPRING will process personal data on an appropriate legal basis.

Depending on the circumstances, these bases may include:

• Contractual necessity: Processing information to fulfil orders and provide purchased services.
• Legal obligations: Maintaining required financial records and complying with applicable laws.
• Legitimate interests: Supporting website security, fraud prevention and reasonable business operations, subject to applicable balancing requirements.
• Consent: Processing for activities such as certain marketing communications and non-essential tracking technologies.

Where these laws apply, you may have additional rights, including the right to complain to an appropriate data protection supervisory authority.

Where legally required, we will provide information about any applicable EU or UK representative and international transfer safeguards.

Customers in certain US states may have additional privacy rights under applicable state privacy legislation.

Depending on the law and our activities, these may include rights to access, correct or delete personal information and to opt out of certain forms of data sharing, targeted advertising or sale of personal information.

Where applicable, we will provide required notices and methods for exercising these rights.

OUTERSPRING is intended for general retail shopping and is not directed towards children under the age of 16.

We do not knowingly collect personal information directly from children under 16 without appropriate authorisation where required by law.

If we become aware that personal information has been collected from a child contrary to applicable legal requirements, we will take appropriate steps to address the situation.

Parents or guardians may contact us regarding privacy concerns involving minors.

Our website may contain links to external websites, social media platforms or services operated by third parties.

We are not responsible for the privacy practices of independently operated third-party websites.

We encourage customers to review the privacy policies of those websites before providing personal information.

If we become aware of a data breach affecting personal information, we will investigate and take reasonable steps to contain and address the incident.

Where notification is required by applicable privacy laws, we will notify affected individuals and relevant authorities within the legally required timeframe.

We may also provide guidance on steps customers can take to protect their information.

If you have a concern about how we handle personal information, please contact our Privacy Contact using the details below.

We will review your complaint and respond within a reasonable timeframe and any timeframe required by law.

If you are dissatisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner (OAIC) or another relevant privacy regulator.

Australian privacy regulator: https://www.oaic.gov.au

We may update this Privacy Policy to reflect changes in our business operations, technology, service providers or legal obligations.

The latest version will be published on our website with an updated effective date.

Where required by law, we will provide additional notice or obtain consent before implementing material changes to our data practices.

If you have questions, concerns or requests relating to this Privacy Policy or your personal information, please contact us through our contact form.

OUTERSPRING
ABN: [Australian Business Number]