Privacy policy
Privacy Policy
Last updated: 23 November 2025
RLLB Pty Ltd (ABN 11 641 085 234, ACN 641 085 234), trading as CurlyTops Shop (“we”, “us”, “our”), is committed to protecting your privacy. We comply with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) and are dedicated to handling your personal information responsibly, transparently, and securely.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information across all interactions with us, including through our website, email communications, marketing activities, products, and services.
1. Personal Information We Collect
We may collect personal information from customers, visitors, and users of our website, social media platforms, or services. The information we collect depends on your interactions with us and may include:
- Name
- Address and delivery details
- Email address and phone number
- Billing and payment information (e.g., credit card details)
- Date of birth (if voluntarily provided)
- Order history and product preferences
- Proof of identity (where required for verification)
- Any information you submit through forms, competitions, surveys, or customer enquiries
By providing your personal information or using our website, you consent to the collection, use, and disclosure of your information as outlined in this Privacy Policy.
If we collect information about you from another source, we will take reasonable steps to notify you of the collection and explain why it was collected.
You are not obligated to provide personal information, but failure to do so may mean we cannot supply certain products or services.
2. How We Collect Personal Information
We collect personal information in several ways, including when you:
- Purchase products from our website
- Browse our website or interact with our online content
- Contact us for support or enquiries
- Participate in competitions, surveys, promotions, or events
- Submit forms, reviews, or feedback
- Engage with us on social media
We may also collect information from:
- Third-party partners and service providers
- Publicly available sources (e.g., social media)
- Payment processors and delivery providers
3. How We Use Personal Information
We use your personal information to:
- Process and fulfil your orders
- Provide customer service and support
- Improve our website, services, and product offerings
- Customise your online experience
- Send marketing communications (where permitted)
- Operate our business and maintain our systems
- Comply with legal and regulatory obligations
We will not use your personal information for any purpose other than the purpose for which it was collected, unless required or authorised by law.
We may disclose your information to trusted third-party partners who assist in providing our services, including delivery companies, payment processors, marketing platforms, data storage providers, and technical support services. These partners are required to handle your information in accordance with Australian privacy standards.
If you no longer wish to receive marketing communications, you may opt out at any time using the “unsubscribe” link in our emails or by contacting us at hello@curlytops.com.au.
4. Keeping Information Accurate and Up to Date
We take reasonable steps to ensure that your personal information is accurate and current. You may update your details at any time by contacting us or logging into your CurlyTops account.
If information is no longer required, we will destroy or permanently de-identify it, unless retention is required by law.
5. Direct Marketing
We may send you marketing communications about our products, services, offers, and updates where permitted by law or where you have consented.
You may opt out at any time by:
- Clicking “unsubscribe” in our emails, or
- Emailing us at hello@curlytops.com.au
Note: You will still receive essential service emails such as order confirmations, shipping updates, and account notifications.
6. Keeping Your Information Secure
We take reasonable measures to protect your personal information from loss, misuse, unauthorised access, alteration, or disclosure. These measures include secure servers, encryption, access controls, and staff confidentiality obligations.
While we take every precaution, no method of data transmission over the internet is entirely secure. Any information you share with us is provided at your own risk.
7. Disclosure of Personal Information
Compliance and Legal Obligations
We may disclose personal information as required by law, including to law enforcement, regulators, courts, or agencies.
Fraud Prevention
We may exchange information with financial institutions for fraud detection and risk reduction.
Service Providers
We may disclose your information to third-party service providers who assist us with:
- Customer support
- Payment processing
- Order fulfilment and shipping
- Marketing and analytics
- Web hosting and security
- Cloud storage and data management
These providers are granted access only to the information required to perform their services and must protect your information in accordance with privacy laws.
8. Dealing with Us Online
Our website uses secure technologies, including firewalls and SSL encryption, to protect your personal information. Pages requiring payment or personal details use 128-bit SSL encryption.
Despite these precautions, transmissions over the internet carry inherent risks. You acknowledge that information submitted online is done at your own risk.
9. Cookies and IP Addresses
We use cookies to enhance your website experience, including to:
- Recognise returning visitors
- Store preference settings
- Analyse website performance
- Assist with fraud prevention
Our website uses Google Analytics, which may collect and transmit data to servers outside Australia. Google does not identify individual users and handles your data in accordance with its own Privacy Policy.
10. Links to Other Websites
Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party sites and encourage you to review their privacy policies.
11. International Data Transfers
Our service providers, including Shopify and Klaviyo, may store or process personal data in countries such as the United States and Canada. By using our website, you consent to the transfer of your information to these jurisdictions.
Where required, we implement safeguards such as standard contractual clauses or equivalent protections to ensure your data is handled in accordance with Australian privacy standards.
12. Updating Your Personal Information
You may request access to, or correction of, your personal information at any time by contacting us at hello@curlytops.com.au.
We may require proof of identity before actioning your request.
13. Data Breach Notification
In the event of a data breach likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme.
14. Contact Details
If you have any privacy-related questions or concerns, please contact:
Christine – Owner, CurlyTops Shop
Email: hello@curlytops.com.au
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).