Privacy policy

Privacy Policy

Last updated: 28 August 2026

Nefarious Clothing (“Nefarious Clothing”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

  • Visit or use nefariousclothing.com.au (the “Site”);

  • Create or use a customer account;

  • Purchase or return a product;

  • Subscribe to our marketing communications;

  • Contact or otherwise interact with us.

We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Spam Act 2003 (Cth) and other applicable privacy laws, to the extent those laws apply to us.

1. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

This may include your name, email address, telephone number, delivery address, billing details, order history and information about how you use our Site.

We do not intentionally collect sensitive information such as health information, biometric information, political opinions, religious beliefs or information about racial or ethnic origin. Please do not provide sensitive information unless it is reasonably necessary and you have consented to us collecting it.

2. Personal information we collect

Depending on how you interact with us, we may collect:

Identity and contact information

This may include your:

  • Full name;

  • Email address;

  • Telephone number;

  • Billing address;

  • Delivery address;

  • Customer account information.

Order and transaction information

This may include:

  • Products purchased, viewed, saved or added to your cart;

  • Order numbers and transaction history;

  • Delivery and tracking information;

  • Discount codes and promotional offers used;

  • Returns, exchanges, refunds and cancellations;

  • Communications relating to an order.

Payment information

Payments are processed through Shopify and the payment provider you select, which may include Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, card networks or financial institutions.

We do not ordinarily receive or store your complete payment-card number. We may receive limited payment information such as the payment method used, transaction status, billing details and fraud-screening results.

Your chosen payment provider will handle your payment information under its own privacy policy and terms.

Communications

We may collect information you provide when you:

  • Submit a contact form;

  • Send us an email or social-media message;

  • Make an enquiry or complaint;

  • Request customer support;

  • Participate in a promotion, competition, survey or product review.

Device and usage information

When you access the Site, we and our technology providers may automatically collect:

  • Internet Protocol address;

  • Browser and device type;

  • Operating system;

  • Network connection information;

  • Cookie and device identifiers;

  • Pages and products viewed;

  • Searches, clicks and interactions;

  • Shopping-cart activity;

  • Referring website or advertising source;

  • Approximate location derived from your IP address;

  • Dates and times of access;

  • Information used for security, analytics and fraud prevention.

3. How we collect personal information

We may collect personal information:

  • Directly from you when you place an order, create an account, subscribe, contact us or complete a form;

  • Automatically through cookies, pixels, server logs and similar technologies;

  • From Shopify and applications connected to our Shopify store;

  • From payment providers, banks and fraud-prevention services;

  • From delivery providers where necessary to manage an order;

  • From social-media platforms when you communicate with us through those platforms;

  • From marketing, analytics or advertising providers where permitted by law;

  • From publicly available sources or third parties where you have authorised disclosure or collection is otherwise lawful.

If you provide information about another person, you must have their permission to do so.

You may browse parts of the Site without identifying yourself. However, we require accurate identity and contact information to process payments, deliver orders, provide customer support and comply with legal obligations.

4. Why we collect and use personal information

We may collect, hold and use personal information to:

  • Operate and maintain the Site;

  • Provide products and services;

  • Process payments and fulfil orders;

  • Arrange delivery, tracking, returns, exchanges and refunds;

  • Create and manage customer accounts;

  • Communicate about purchases and account activity;

  • Respond to enquiries, requests and complaints;

  • Provide customer support;

  • Detect, investigate and prevent fraud, misuse and security incidents;

  • Personalise and improve the Site and customer experience;

  • Measure Site traffic, product performance and advertising effectiveness;

  • Conduct internal reporting, research and business analysis;

  • Send marketing communications where you have consented or where otherwise permitted by law;

  • Maintain business, accounting and taxation records;

  • Enforce our terms and protect our legal rights;

  • Comply with laws, court orders and lawful government requests;

  • Carry out any other purpose disclosed to you when the information is collected.

If you do not provide information we reasonably require, we may be unable to process your order, deliver a product, respond to your request or provide particular Site features.

5. Marketing communications

If you subscribe to our mailing list or otherwise consent to marketing, we may use your contact information to send information about products, limited releases, promotions and other Nefarious Clothing news.

You may unsubscribe at any time by:

We will action electronic marketing unsubscribe requests within the period required by applicable law. Unsubscribing from marketing will not prevent us from sending necessary service communications, including order confirmations, delivery updates, account notices or responses to your enquiries.

6. Cookies and similar technologies

Our Site and Shopify use cookies, pixels and similar technologies.

These technologies may be used to:

  • Keep the Site and checkout functioning;

  • Remember your cart and preferences;

  • Recognise customer accounts and sessions;

  • Protect the Site against fraud and misuse;

  • Understand how visitors use the Site;

  • Measure sales and marketing performance;

  • Personalise content or advertising where enabled.

Some cookies are essential for the Site to operate. Other analytics or marketing cookies may be optional, depending on your location and the privacy controls available on the Site.

You can manage cookies through your browser settings and any cookie or privacy controls presented on the Site. Blocking cookies may prevent the cart, checkout, account or other Site features from working correctly.

More information about cookies used by Shopify-powered stores is available in Shopify’s Cookie Policy.

7. When we disclose personal information

We may disclose relevant personal information to:

  • Shopify, which hosts the Site, checkout, customer accounts and ecommerce services;

  • Payment processors, digital-wallet providers, card networks and financial institutions;

  • Postal, courier, warehousing, fulfilment and delivery providers;

  • Website hosting, cloud-storage and information-technology providers;

  • Customer-support, email, communications and marketing providers;

  • Analytics, security and fraud-prevention providers;

  • Accountants, insurers, lawyers and other professional advisers;

  • Government agencies, regulators, courts or law-enforcement bodies where required or authorised by law;

  • A purchaser, adviser or other relevant party in connection with a proposed or completed sale, merger, restructuring or transfer of the business;

  • Other parties where you have directed, authorised or consented to the disclosure.

We require service providers to handle personal information only for authorised purposes and subject to appropriate confidentiality, privacy and security obligations.

We do not sell or rent customer personal information for money.

8. Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information to operate the Site, checkout, customer accounts, payments, security, analytics and related ecommerce services.

Information submitted through the Site may therefore be transmitted to and processed by Shopify and its service providers.

You can learn more by reading Shopify’s Privacy Policy and using Shopify’s privacy controls.

9. Overseas disclosure and storage

Some service providers we use operate outside Australia.

Your information is likely to be disclosed to or processed in countries including Singapore, Canada and the United States, as well as other countries in which Shopify, payment providers, cloud providers and their service providers operate.

Privacy protections in another country may differ from Australian protections. Where required by law, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.

10. Storage and retention

Personal information may be stored electronically through Shopify, cloud-service providers, payment providers and our business systems.

We retain information only for as long as reasonably necessary to:

  • Complete the purposes described in this Policy;

  • Maintain customer accounts;

  • Provide warranties, returns and customer support;

  • Maintain taxation, accounting and transaction records;

  • Prevent fraud and protect the Site;

  • Resolve disputes and enforce agreements;

  • Meet legal and regulatory requirements.

Order, payment and taxation records will generally be retained for at least five years or any longer period required by law. When information is no longer reasonably required, we will take reasonable steps to delete, destroy or de-identify it, unless continued retention is permitted or required by law.

11. Information security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, misuse, interference, unauthorised access, modification and disclosure.

These measures may include access controls, secure account authentication, encrypted connections, payment-security measures, system monitoring and limiting information access to people who require it.

No internet transmission or electronic-storage system is completely secure. We cannot guarantee absolute security.

You are responsible for protecting your account credentials and should contact us immediately if you believe your account or personal information has been compromised.

Where required by law, we will assess suspected data breaches and notify affected individuals and the relevant regulator of an eligible data breach.

12. Accessing and correcting your information

You may request:

  • Access to personal information we hold about you;

  • Correction of inaccurate, incomplete, out-of-date, irrelevant or misleading information;

  • Deletion or de-identification of information where legally available;

  • Further information about how we have used or disclosed your information.

Send your request to info@nefariousclothing.com.au.

We may need to verify your identity before responding. We will respond within a reasonable period, generally within 30 calendar days.

There is no charge for submitting an access or correction request. If a permitted administrative charge applies to providing access, we will explain it before proceeding.

In limited circumstances, we may refuse access, correction or deletion where permitted or required by law. If that happens, we will normally provide written reasons and explain available complaint options.

13. Anonymity and pseudonyms

Where practical, you may make a general enquiry without identifying yourself or by using a pseudonym.

We cannot process an order anonymously because we require accurate payment, delivery and contact information. We may also need to identify you when responding to an account, payment, fraud, privacy or legal matter.

14. Children’s privacy

The Site is intended for a general audience and is not directed at children under 16.

We do not knowingly collect personal information from children under 16 without the involvement or consent of a parent or guardian. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

15. Third-party websites and social media

The Site may contain links to Instagram, payment services and other third-party websites or platforms.

Those third parties operate under their own privacy policies and terms. We are not responsible for how an external website or platform collects, uses or protects information after you leave our Site.

16. Privacy complaints

If you believe we have mishandled your personal information, please email info@nefariousclothing.com.au with the subject line “Privacy Complaint”.

Please include:

  • Your name and contact details;

  • A description of what happened;

  • Any relevant order or account details;

  • The outcome you are seeking.

We will acknowledge your complaint, investigate it fairly and aim to provide a written response within 30 calendar days.

If you are not satisfied with our response, or we do not respond within a reasonable period, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC):

17. Changes to this Privacy Policy

We may update this Privacy Policy when our business practices, technology, service providers or legal obligations change.

The current version will be published on the Site with its updated date. If a change materially affects how we handle personal information, we will take any additional notification or consent steps required by law.

18. Contact us

For privacy questions, access or correction requests, complaints, or a copy of this Policy in another accessible format, contact:

Privacy Contact
Nefarious Clothing
Australia
Email: info@nefariousclothing.com.au
Contact form: nefariousclothing.com.au/pages/contact