1. Who we are

Yarn Rabbit is an Australian online store.

If you have questions about this Privacy Policy or how we handle personal information, you can contact us at:

Email: hello@yarnrabbit.com

2. The personal information we collect

We may collect personal information such as:

• your name
• your email address
• your phone number
• your billing and shipping address
• order and transaction details
• account information, if you create an account
• information you provide when contacting us
• information you provide when subscribing to our mailing list
• information about how you use our website, including IP address, browser type, device information and pages viewed
• any other information you choose to provide to us

We do not generally collect sensitive information. If we ever need to do so, we will only do so where permitted by law.

3. How we collect personal information

We may collect personal information:

• directly from you when you place an order, create an account, subscribe to emails, or contact us
• automatically when you use our website through cookies, server logs and similar technologies
• from service providers that support our store and website operations
• from delivery and payment partners where needed to process orders and provide customer support

4. Why we collect personal information

We collect personal information so we can:

• provide our products and services
• process and fulfil orders
• take payment and manage transactions
• arrange shipping and delivery
• communicate with you about your order
• respond to enquiries and provide customer support
• send marketing emails where you have subscribed or where otherwise permitted by law
• improve our website, store performance and customer experience
• maintain website security and reduce fraud
• comply with legal and regulatory obligations

5. Website platform and service providers

Yarn Rabbit uses third-party service providers to operate the store.

These may include:

• Medusa for ecommerce functionality and order management
• Vercel for website hosting and infrastructure
• Stripe for payment processing and related payment security services
• Australia Post for shipping and delivery services

These providers may collect, receive or process personal information as part of delivering their services to us.

6. Payments

If you make a purchase through our website, your payment will be processed by Stripe.

We do not store full payment card details on our own systems. Payment information is processed by Stripe in accordance with its own privacy and security practices.

7. Shipping and delivery

If you place an order with us, we may share relevant order and delivery information with Australia Post or other shipping providers as needed to pack, send and deliver your parcel.

This may include your name, delivery address, email address, phone number and order reference details where reasonably necessary for fulfilment and delivery.

8. Cookies, analytics and website data

Our website may use cookies and similar technologies to keep the site functioning properly, understand how visitors use the site, improve performance, and support store operations.

These technologies may collect information such as:

• IP address
• browser type
• device type
• referring pages
• pages viewed
• time spent on the website
• actions taken on the website

Some of this information may be processed through our hosting or ecommerce infrastructure providers.

9. Direct marketing

If you subscribe to our mailing list, we may send you emails about new products, restocks, store updates and related marketing.

You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us directly.

We do not sell your personal information to third parties for their own marketing.

10. Disclosure of personal information

We may disclose personal information to third parties where reasonably necessary to run our business and provide our services, including:

• payment processors
• delivery and fulfilment providers
• website hosting and infrastructure providers
• ecommerce platform providers
• email and customer service providers
• professional advisers such as accountants, lawyers or insurers
• regulators, government bodies or law enforcement where required or authorised by law

We do not disclose personal information more broadly than is reasonably necessary for these purposes.

11. Overseas disclosure

Some of the service providers we use may store or process personal information outside Australia.

Where this happens, we take reasonable steps to work with reputable providers and to ensure personal information is handled appropriately in the circumstances.

12. Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

These steps may include:

• using reputable service providers
• limiting access to personal information
• account and password protections
• secure website infrastructure
• reviewing systems and processes from time to time

No online system is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

13. Access and correction

You may request access to the personal information we hold about you.

You may also ask us to correct personal information if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact us using the details in this Policy. We may need to verify your identity before responding.

14. Complaints

If you have a complaint about how we have handled your personal information, please contact us in writing using the contact details above.

Please include enough detail for us to understand the issue and investigate it properly.

We will consider your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner.

15. Third-party websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of those third parties. You should review their privacy policies separately.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers or legal obligations.

Any updated version will be published on this page with a revised “Last updated” date.

17. Contact us

For privacy questions, access or correction requests, or complaints, contact:

Yarn Rabbit

Email: hello@yarnrabbit.com