1. Who We Are

CustomFox ("we", "us", "our") is an Australian custom apparel business operating at customfox.com.au. We are registered in Australia with an ABN and are GST registered.

We take your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it. It applies to all customers and visitors in Australia, New Zealand, the European Union, and the United Kingdom.

If you have any questions about this policy, please contact us at support@customfox.com.au.

2. Information We Collect

Information You Provide Directly

•       Name, email address, phone number, and delivery address when you place an order

•       Payment information (processed securely by Shopify Payments — we do not store card details)

•       Custom design content you upload or create using our product customiser (text, images, design choices)

•       Communications you send us via email or contact forms

•       Marketing preferences if you subscribe to our mailing list

Information Collected Automatically

•       Browser type, device type, operating system, and IP address

•       Pages visited, time spent on site, referring URLs, and clickstream data

•       Cookie identifiers and session data (see Section 6)

•       Purchase history and browsing behaviour on our store

Information From Third Parties

•       Payment verification and fraud screening data from Shopify Payments

•       Analytics data from Google Analytics and Meta (Facebook/Instagram) Pixel

•       If you choose to pay via Afterpay, limited transaction data is shared with Afterpay Pty Ltd

3. How We Use Your Information

To Fulfil Your Order

•       Process and fulfil your purchase, including printing and dispatch

•       Send order confirmations, dispatch notifications, and tracking updates

•       Handle returns, exchanges, or customer service queries

•       Produce your custom-designed product accurately from your design data

To Operate and Improve Our Store

•       Understand how customers use our website and improve the experience

•       Detect and prevent fraud or unauthorised activity

•       Comply with our legal and tax obligations (including GST)

For Marketing (With Your Consent)

•       Send promotional emails, offers, and product news if you have opted in

•       Show you relevant ads on Meta (Facebook/Instagram) platforms

•       Segment and personalise email content based on your order history or preferences

Your choice: You can unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting us at support@customfox.com.au. Unsubscribing from marketing does not affect transactional emails related to your orders.

4. Third-Party Services

We use trusted third-party services to operate our store. Each service has its own privacy policy which we encourage you to review:

•       Shopify (shopify.com/legal/privacy) — Store platform, payments, checkout — shares order data, payment info, customer account

•       Shopify Payments (stripe.com/privacy) — Payment processing — payment card data (not stored by us)

•       Afterpay (afterpay.com/privacy-policy) — Buy now, pay later — transaction & identity data

•       Zakeke (zakeke.com/privacy-policy) — Product customisation tool — design content, session data

•       Google Analytics (policies.google.com/privacy) — Website analytics — anonymised browsing behaviour

•       Meta Pixel (facebook.com/privacy/policy) — Ad targeting & conversion tracking — browsing & purchase events

•       Email marketing platform (e.g. Klaviyo/Mailchimp) — Email campaigns & automation — email address, name, purchase history

We do not sell your personal information to any third party. Data is only shared with the services above as necessary to operate our business.

5. Legal Basis for Processing (GDPR)

For customers in the EU or UK, we process your personal data under the following legal bases:

•       Contract performance — processing your order, delivering your product, and handling post-sale service

•       Legitimate interests — fraud prevention, site security, improving our store experience, and anonymised analytics

•       Consent — sending you marketing emails or using tracking cookies (where required by law)

•       Legal obligation — complying with tax, accounting, and regulatory requirements

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking

Our website uses cookies and similar tracking technologies. These include:

•       Essential cookies — required for the store to function (cart, checkout, login sessions)

•       Analytics cookies — Google Analytics, used to understand how visitors use our site

•       Marketing cookies — Meta Pixel, used for ad targeting and measuring campaign effectiveness

•       Preference cookies — remembering your settings and customisation choices

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect your ability to use the store. For EU/UK visitors, you will be asked for cookie consent where required by law.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:

•       Order and transaction records — retained for 7 years for tax and accounting purposes (Australian law requirement)

•       Customer accounts — retained while your account is active, or until you request deletion

•       Custom design data — retained for the period required to fulfil your order plus a reasonable period for returns/disputes

•       Marketing data — retained until you unsubscribe or request deletion

•       Analytics data — anonymised and retained per Google Analytics and Meta's standard retention periods

8. Your Rights

Depending on where you are located, you have the following rights regarding your personal information:

•       Access — Request a copy of the personal information we hold about you

•       Correction — Ask us to correct inaccurate or incomplete information

•       Deletion — Request we delete your data, subject to our legal retention obligations

•       Portability — Request your data in a structured, machine-readable format (GDPR)

•       Restriction — Ask us to limit how we process your data in certain circumstances (GDPR)

•       Objection — Object to processing based on legitimate interests, including for direct marketing

•       Withdraw consent — Withdraw any consent given for marketing or non-essential cookies at any time

•       Complaint — Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@customfox.com.au. We will respond within 30 days (or sooner where required by law). We may need to verify your identity before actioning your request.

Regulatory Bodies

•       Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au

•       New Zealand: Office of the Privacy Commissioner — privacy.org.nz

•       EU/UK: Your local Data Protection Authority (e.g. ICO in the UK)

9. Cross-Border Data Transfers

CustomFox is based in Australia and our primary customers are in Australia and New Zealand. However, some of the third-party services we use (such as Shopify, Google, and Meta) process data on servers located in the United States and other countries.

Where your data is transferred internationally, we ensure it is handled in accordance with applicable privacy laws. For EU/UK customers, such transfers are made on the basis of standard contractual clauses or other appropriate safeguards as required by GDPR.

10. Children's Privacy

Our store is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at support@customfox.com.au and we will delete it promptly.

11. Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Our store operates on Shopify's platform, which is PCI DSS compliant and uses SSL/TLS encryption for all data in transit.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you become aware of any security concern, please contact us immediately at support@customfox.com.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

Questions or requests? Contact us at support@customfox.com.au

Privacy Policy — CustomFox (customfox.com.au)  |  ABN registered  |  GST registered  |  Last updated March 2026