Privacy policy
Last updated: 31 July 2026
This Privacy Policy explains how P.C Mckenzie & Z.A Nicoll (trading as "KittyCaps") collects, uses, stores, and protects your personal information when you visit our website or place an order with us.
We take your privacy seriously and are committed to complying with applicable data protection laws, including the Australian Privacy Act 1988, the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) where applicable.
Who We Are
Data Controller:
P.C Mckenzie & Z.A Nicoll (trading as KittyCaps)
664 Malabar Rd, Maroubra, NSW 2035, Australia
Email: support@kittycaps.shop
We are a partnership registered in Australia, operating an e-commerce store selling pet accessories via Shopify.
What Information We Collect
We collect different types of information depending on how you interact with our Site:
Information You Provide Directly
- Identity information: Name, email address, phone number (optional at checkout)
- Shipping information: Delivery address, including country, postcode, and any special delivery instructions
- Payment information: We do not store your credit card details. Payments are processed securely by Shopify Payments. We may retain transaction IDs and billing addresses.
- Account information: If you create an account, your login credentials, order history, and wishlist items
- Communication: Any information you provide when contacting customer support, submitting reviews, or signing up for our newsletter
Information Collected Automatically
When you visit our Site, we automatically collect certain information via cookies and similar technologies:
- Device information: IP address, browser type and version, operating system, device type
- Usage data: Pages visited, time spent on pages, referral sources, click-through data
- Location data: Approximate geographic location derived from your IP address
- Shopping behaviour: Products viewed, items added to cart, abandoned carts, purchase history
Information from Third Parties
- Analytics providers: Google Analytics (via Google Tag Manager) provides aggregated data about website usage.
- Advertising partners: Meta (Facebook/Instagram) may provide data related to ad performance and conversions.
- Email marketing: If you sign up for our newsletter, Klaviyo may store your email address and email engagement data (opens, clicks).
Why We Collect Your Information (Legal Basis)
We process your personal data for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR) | Details |
|---|---|---|
| Processing and fulfilling orders | Contractual necessity (Art. 6(1)(b)) | To deliver products, process payments, and communicate about your order |
| Customer support | Contractual necessity / Legitimate interests | To resolve issues, process refunds, and respond to inquiries |
| Fraud prevention | Legitimate interests (Art. 6(1)(f)) | To detect and prevent fraudulent transactions |
| Website analytics | Consent (Art. 6(1)(a)) | To understand how visitors use our Site and improve user experience. Requires your opt-in consent. |
| Marketing & advertising | Consent (Art. 6(1)(a)) | To send promotional emails, display personalised ads, and measure ad performance. Requires your opt-in consent. |
| Legal compliance | Legal obligation (Art. 6(1)(c)) | To comply with tax, accounting, and consumer protection laws |
| Account creation | Consent / Contractual necessity | To create and manage your customer account |
Under Australian law, we collect personal information that is reasonably necessary for our business functions and activities.
How We Use Your Information
We use your personal information to:
- Process and fulfil your orders, including shipping, payment processing, and order confirmations
- Communicate with you about your order, shipping updates, and customer service inquiries
- Provide customer support and handle returns, refunds, and complaints
- Send transactional emails such as order confirmations and shipping notifications
- Send marketing communications (only with your consent), including newsletters, promotions, and product updates
- Prevent fraud and protect the security of our Site and users
- Comply with legal obligations, including tax, accounting, and regulatory requirements
- Analyse and improve our website, products, and services
Who We Share Your Information With
We share your personal data with trusted third parties who help us operate our business. We only share what is necessary for the specific purpose:
| Category | Provider(s) | Purpose |
|---|---|---|
| E-commerce platform | Shopify Inc. | Hosting our store, processing orders, managing customer accounts |
| Payment processors | Shopify Payments, relevant payment networks | Processing transactions securely |
| Shipping & fulfilment | Our logistics and fulfilment partners | Fulfilling orders, printing shipping labels, delivering products |
| Analytics | Google (via Google Tag Manager) | Website traffic analysis and performance metrics |
| Advertising | Meta Platforms, Inc. | Ad targeting, conversion tracking, and campaign measurement |
| Email marketing | Klaviyo | Sending marketing emails and managing subscriber lists |
| Legal & compliance | Government agencies, regulators, courts | Complying with legal obligations, dispute resolution |
International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including:
- International transfers: Your shipping address and contact details may be shared with fulfilment and logistics partners located outside of Australia to enable order fulfilment. This transfer is necessary for contract performance.
- Other jurisdictions: Google (analytics) and Meta (advertising) process data on servers located globally.
We ensure that appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses approved by the European Commission.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Site. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.
Key categories of cookies we use:
- Strictly Necessary: Essential for the Site to function (e.g., shopping cart, login session)
- Analytics: Help us understand how visitors interact with our Site (e.g., Google Analytics 4)
- Marketing: Used to deliver relevant advertisements and measure their effectiveness (e.g., Meta Pixel)
- Preferences: Remember your settings and preferences (e.g., currency, language)
You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our Site or by adjusting your browser settings.
How Long We Keep Your Information
We retain your personal information only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying legal, accounting, or reporting requirements.
- Order and transaction data: Retained for 7 years (to comply with Australian tax laws)
- Customer account data: Retained while your account is active, plus 2 years after closure
- Marketing email subscribers: Retained until you unsubscribe, plus 1 year to maintain suppression lists
- Analytics data: Retained by Google Analytics for 14 months (configurable)
- Cookie consent records: Retained for 1 year to demonstrate compliance
When we no longer need your data, we securely delete or anonymise it.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
For All Customers
- Access: Request a copy of the personal data we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Complaint: Lodge a complaint with a privacy regulator
For EU/EEA and UK Residents (GDPR Rights)
In addition to the above, you have the right to:
- Withdraw consent at any time (where processing is based on consent), without affecting the lawfulness of processing based on consent before its withdrawal
- Object to processing based on legitimate interests or for direct marketing purposes
- Restrict processing in certain circumstances
- Data portability — receive your data in a structured, commonly used format
- Not be subject to automated decision-making including profiling
To exercise these rights, contact us at support@kittycaps.shop. We will respond to your request within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority (e.g., the UK Information Commissioner's Office, or your national DPA in the EU).
For California Residents (CCPA Rights)
If the CCPA applies to our business, you have the right to:
- Know what personal information we collect, use, and share
- Delete your personal information (subject to exceptions)
- Opt out of the "sale" or "sharing" of your personal information
- Non-discrimination for exercising your privacy rights
Note: As a small business, we likely do not meet the CCPA thresholds ($25M+ revenue, 100K+ CA consumers, or 50%+ revenue from data sales). However, we provide these disclosures as a matter of transparency.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- SSL/TLS encryption: All data transmitted between your browser and our Site is encrypted
- Secure payment processing: Payment card data is processed by PCI DSS compliant providers (Shopify Payments)
- Access controls: Limited personnel have access to personal data, and only on a need-to-know basis
- Regular backups: Our systems are backed up regularly to prevent data loss
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Children's Privacy
Our Site is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.
- Material changes: We will notify you by email (if you have an account or are subscribed to our newsletter) and/or by posting a prominent notice on our Site before the changes take effect.
- Minor changes: We will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically to stay informed about how we are protecting your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
P.C Mckenzie & Z.A Nicoll (trading as KittyCaps)
664 Malabar Rd, Maroubra, NSW 2035, Australia
Email: support@kittycaps.shop
Data Processing Agreements
We have entered into Data Processing Agreements (DPAs) with Shopify (our platform provider) and Klaviyo (our email marketing provider) to ensure they process personal data in compliance with applicable data protection laws, including GDPR.
If you require a copy of these agreements for your records, please contact us.