Privacy policy

This Privacy Policy describes how rigby ("rigby", the "Site", "we", "us" or "our") collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

We are based in Australia. This policy is written to meet our obligations under the Australian Privacy Principles ("APPs") in the Privacy Act 1988 (Cth), and — because we ship worldwide — the EU and UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA") where those laws apply to you.

Contact

After reviewing this policy, if you have questions, want more information about our privacy practices, or would like to make a complaint, please contact us:

Email: [YOUR SUPPORT EMAIL] Postal address: [YOUR BUSINESS ADDRESS] Business name / ABN: [LEGAL ENTITY NAME AND ABN]

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

In this Privacy Policy, we refer to any information about an identifiable individual as "Personal Information". Below is what we collect and why.

Device information

Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage so we can improve it. Source of collection: collected automatically when you access the Site using cookies, log files, web beacons, tags or pixels. Disclosure for a business purpose: shared with our processor Shopify, and with our analytics and advertising providers. Personal Information collected: web browser version, IP address, time zone, cookie information, which pages or products you view, search terms, and how you interact with the Site.

Order information

Purpose of collection: to provide products to you and fulfil our contract with you — processing your payment, arranging shipping, providing invoices and order confirmations, communicating with you about your order, screening orders for potential risk or fraud, and (where you have agreed) sending you information or advertising about our products. Source of collection: collected from you. Disclosure for a business purpose: shared with our processor Shopify, our payment providers, and our shipping and fulfilment partners. Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address and phone number.

Customer support information

Purpose of collection: to provide customer support, answer your questions, and resolve issues with your order. Source of collection: collected from you when you contact us by email, social media, or through the Site. Disclosure for a business purpose: shared with our processor Shopify and, where relevant to your enquiry, our shipping and fulfilment partners. Personal Information collected: your name, email address, order number, and any information you choose to include in your message.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfil our contracts with you. For example:

• We use Shopify to power our online store. You can read about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy
• We use shipping and fulfilment partners to pick, pack and deliver your order. They receive the information needed to deliver to you.
• We use payment providers to process transactions securely. We do not store your full card details ourselves.
• We use analytics and advertising providers as described in the Behavioural Advertising section below.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information, or to otherwise protect our rights.

We do not sell your Personal Information.

Overseas disclosure

Because we are an Australian business using international service providers, your Personal Information will be disclosed to and stored by recipients located outside Australia.

The countries in which these recipients are likely to be located include Canada and the United States (where Shopify stores and processes data), Ireland and the European Union (initial processing for European customers), and the countries in which our fulfilment partners operate, being [FULFILMENT COUNTRY OR COUNTRIES].

By providing your Personal Information to us, you consent to this overseas disclosure. We take reasonable steps to ensure that overseas recipients handle your Personal Information in a manner consistent with the Australian Privacy Principles, including by using established providers with their own published privacy commitments.

Behavioural advertising

We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how customers use the Site. You can read how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/ — and opt out here: https://tools.google.com/dlpage/gaoptout
• We use Meta (Facebook and Instagram) and TikTok advertising tools, which may collect information about your use of the Site through cookies and similar technologies in order to show you relevant ads.
• We use Shopify Audiences to help show ads to buyers who have made purchases with other Shopify merchants and who may be interested in our products. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences.

For more information about how targeted advertising works, visit the Network Advertising Initiative's educational page: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can opt out of targeted advertising by:

• Meta — https://www.facebook.com/settings/?tab=ads
• Google — https://www.google.com/settings/ads/anonymous
• Bing — https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
• TikTok — through the "Ads personalisation" settings in your TikTok account

You can also opt out of some services through the Digital Advertising Alliance's portal: https://optout.aboutads.info/

Using Personal Information

We use your Personal Information to provide our services to you, which includes offering products for sale, processing payments, shipping and fulfilling your order, providing customer support, and — where you have agreed — keeping you up to date on new products, drops and offers.

Lawful basis (GDPR)

If you are a resident of the European Economic Area or the United Kingdom, we process your Personal Information under the following lawful bases:

• Your consent
• The performance of the contract between you and the Site
• Compliance with our legal obligations
• To protect your vital interests
• To perform a task carried out in the public interest
• For our legitimate interests, where these do not override your fundamental rights and freedoms

Retention

When you place an order through the Site, we retain your Personal Information for our records unless and until you ask us to erase it. We may retain certain information for longer where required by law — for example, records we are required to keep for tax purposes.

Security

We take reasonable steps to protect your Personal Information from misuse, interference, loss, and unauthorised access, modification or disclosure. Payment transactions are processed through encrypted connections by our payment providers. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Automated decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (including profiling) where that decision-making has a legal or otherwise significant effect on you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you. Services that include elements of automated decision-making include:

• Temporary blacklisting of IP addresses associated with repeated failed transactions. This persists for a small number of hours.
• Temporary blacklisting of credit cards associated with blacklisted IP addresses. This persists for a small number of days.

Your rights

Australia

Under the Australian Privacy Principles you may request access to the Personal Information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact us using the details above. We will respond within a reasonable period. If we refuse a request, we will tell you why in writing.

GDPR (EEA and UK)

If you are a resident of the EEA or UK, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that it be corrected, updated or erased. To exercise these rights, contact us using the details above.

Your Personal Information will initially be processed in Ireland and then transferred outside Europe for storage and further processing, including to Canada and the United States. For more information on how these transfers comply with the GDPR, see Shopify's GDPR whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR

CCPA (California)

If you are a resident of California, you have the right to access the Personal Information we hold about you (the "Right to Know"), to port it to a new service, and to ask that it be corrected, updated or erased. To exercise these rights, contact us using the details above. If you would like to designate an authorised agent to submit these requests on your behalf, please contact us.

Children and young people

Our products are intended for a general audience and our Site is not directed at children under 13. We do not knowingly collect Personal Information from children under 13. If you believe a child under 13 has provided us with Personal Information, please contact us and we will delete it.

If you are under 18, please review this policy with a parent or guardian before making a purchase.

Cookies

A cookie is a small amount of information downloaded to your computer or device when you visit our Site. We use functional, performance, advertising, and social media or content cookies. Cookies make browsing better by allowing the Site to remember your actions and preferences, so you don't have to re-enter information each time you return or move between pages. They also tell us how people use the Site — for instance whether it's a first visit or a return visit.

Cookies necessary for the functioning of the store

Reporting and analytics

How long a cookie remains on your device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing; persistent cookies last until they expire or are deleted. Most cookies we use are persistent and expire between 30 minutes and two years from the date they are downloaded.

You can control and manage cookies through your browser settings, usually found under "Tools" or "Preferences". Removing or blocking cookies can affect your experience and parts of the Site may not work properly. More information is available at https://www.allaboutcookies.org

Blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To opt out of those uses, follow the instructions in the Behavioural Advertising section above.

Do Not Track

Because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. The date of the most recent update is shown at the bottom of this page.

Complaints

If you would like to make a complaint, please contact us by email or post using the details under "Contact" above. We will acknowledge your complaint and respond within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority:

• Australia — the Office of the Australian Information Commissioner (OAIC), at https://www.oaic.gov.au/privacy/privacy-complaints
• EEA / UK — your local data protection authority
• Other regions — your local privacy or consumer protection regulator

Last updated: 1 August 2026